
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa
File: 620c9921-4f80-34dd-840e-1c36b07b9504.roa (raw, json)
Hash identifier: 1H9Gnib2IEOoQn8uuWEsvFCtyUruwnHx7JqgJObUuwg=
Subject key identifier: C0:42:C6:26:16:B9:C4:3C:73:FB:D2:5A:9C:6B:ED:4B:51:FE:01:55
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F931F671B615879113900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.197.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:93:1f:67:1b:61:58:79:11:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d36c737c-f2a2-44dc-971a-693b5b028f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:a2:43:90:57:51:ea:f8:08:4d:dc:f7:c9:
9e:69:56:48:27:a8:27:8b:85:40:0e:fe:38:74:a1:
2b:8b:4b:ea:50:3a:33:28:9d:a5:b5:83:c0:bf:95:
59:76:6a:a5:d5:32:7d:f4:2d:60:56:2d:9f:db:d2:
ee:e1:ca:f6:b7:6b:23:be:e7:5e:06:4f:25:70:83:
4b:91:fb:34:fa:1a:0b:77:5f:3f:60:fc:b6:cf:51:
e6:9f:b9:d0:43:a7:f2:96:d4:0b:21:38:d3:79:25:
09:59:cc:b3:39:c8:a9:e5:f9:05:e2:56:13:06:a6:
8f:12:fe:09:ac:9d:e9:44:02:46:8e:85:53:25:ab:
9b:51:aa:f6:2a:40:73:44:5b:57:50:52:3e:ab:e4:
5a:72:d6:a6:5c:0f:fb:75:3b:a6:ba:9a:e0:a2:73:
46:14:7e:2c:74:0c:03:13:8d:83:a7:f6:87:fe:ac:
a7:b6:c0:32:f6:7b:bf:f9:b0:57:5b:80:16:c4:a5:
f0:06:b9:b8:40:6b:61:31:a6:54:1f:e7:df:da:d5:
92:37:2c:c2:7d:35:d3:13:9e:44:7e:19:39:6b:4f:
fa:8f:16:03:99:7a:5d:b0:f1:3a:24:44:f8:59:28:
d7:7a:b6:b6:3c:a3:fa:29:f6:1a:27:7f:ac:2b:d8:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:C6:26:16:B9:C4:3C:73:FB:D2:5A:9C:6B:ED:4B:51:FE:01:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/620c9921-4f80-34dd-840e-1c36b07b9504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:b4:28:0e:21:7f:32:dc:18:d4:dc:78:fe:a3:b8:bf:07:d6:
9d:d5:1d:94:ba:6d:ae:e0:08:44:ae:9f:45:54:7f:27:1f:70:
3d:f0:6f:0a:89:3d:3c:26:d7:a0:99:26:10:b4:6c:71:5c:b0:
9c:e7:d7:c4:8d:dc:9b:47:64:47:49:8d:86:86:8e:ca:b3:e3:
ec:6d:ad:32:e5:32:04:40:2a:ea:7f:c1:e8:66:97:a5:76:86:
3f:2a:a4:3a:0a:3e:c4:3a:ca:76:98:78:2a:e8:0d:68:92:ab:
76:0d:dd:6f:23:2f:9b:aa:11:06:e0:ee:c6:7f:c9:4d:b4:25:
5c:c0:99:5c:b5:bc:75:c3:d0:d0:e2:8a:1e:35:a4:ab:24:0a:
fc:aa:ba:d0:a1:c6:89:02:c0:d5:fd:15:11:13:5b:96:21:8e:
5e:55:b2:3b:0c:35:4e:86:fa:8e:4e:fa:03:26:b9:5e:70:9d:
c5:60:c2:b2:9a:87:af:3a:7f:f0:9c:96:a0:c4:c9:e7:77:20:
89:c7:00:3d:cf:83:23:a4:2d:9a:73:ad:dc:db:90:04:be:3a:
ee:f4:1e:ed:70:12:55:0c:e5:04:40:94:3e:e0:63:e6:b8:58:
09:ef:34:17:79:cc:67:e5:e7:54:b8:f6:14:21:9a:39:da:26:
01:d6:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:49 2026 by rpki-client