
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa
File: 648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa (raw, json)
Hash identifier: qcxjVavEnS+9j8jD5sdauo7Dfa7Nstgqjjcqpkg4wr4=
Subject key identifier: 34:23:91:3F:47:51:C5:44:A6:38:6D:F0:54:1F:0D:C4:BF:46:09:11
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C0B1631EE5600CBA07480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.197.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:0b:16:31:ee:56:00:cb:a0:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=3df4e7be-cfb4-4a3f-bcb1-b9b6d9ca713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:1a:a1:56:10:4f:2a:a9:c7:61:fe:42:7d:
e1:b6:c3:66:35:60:92:eb:e3:34:10:54:14:ac:c5:
1b:75:3a:e4:c5:d7:29:46:1f:51:53:d1:aa:c1:21:
5b:81:56:0f:c4:2b:2d:c1:f0:bd:32:32:da:4b:bf:
7c:96:b8:3b:3d:12:48:30:d4:5e:72:a5:74:3d:fb:
25:9b:f1:cf:24:f5:39:b0:6b:eb:c4:6b:b4:e4:0d:
da:f2:a7:6d:da:a4:96:27:28:c8:67:b1:d5:51:6c:
82:43:44:a2:ac:84:76:07:71:9e:1b:c4:4e:bb:fc:
ed:24:1e:e7:c0:58:ee:1b:05:3f:9e:65:67:6e:2e:
21:06:a3:62:db:c9:e7:bf:e6:d4:2e:1f:82:86:4f:
06:8d:1a:7f:86:8b:9b:e7:73:d7:8e:3c:db:03:94:
50:a8:81:48:94:53:20:e8:a3:34:05:10:5a:5b:6f:
51:7b:75:7f:19:ec:f8:92:4d:cc:52:04:de:00:25:
32:36:16:95:e7:3c:85:cf:af:c5:16:ae:41:71:88:
6f:76:84:a3:33:75:08:ba:6e:d8:86:53:80:a2:93:
b1:65:4a:eb:91:4a:1a:e3:5b:27:5d:65:84:b3:80:
ac:9c:7a:85:3e:0f:60:66:1d:b7:2a:b7:72:f9:83:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:91:3F:47:51:C5:44:A6:38:6D:F0:54:1F:0D:C4:BF:46:09:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/648c7757-1bda-3b4e-bfac-3174ff41eb6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:c9:65:74:52:07:fe:81:8b:d3:fa:6a:11:d0:ef:94:a7:bd:
53:68:95:55:66:e6:78:d8:04:ab:0a:65:4c:4b:40:9f:6e:7e:
3e:1f:0a:2e:e9:c0:03:f6:0c:e3:38:74:ff:78:7f:bc:4e:e5:
ba:9a:28:55:ef:77:50:b0:77:a0:e2:00:e6:2a:3c:e2:6c:c2:
cd:ef:6f:69:87:e8:ac:47:fb:08:82:9d:cf:4a:80:dd:c5:ac:
5f:f5:87:8f:5c:69:fc:d4:b5:45:02:a3:96:2a:a5:43:de:ed:
dc:9e:e8:58:97:b2:37:14:c3:9e:41:95:08:e1:c0:56:24:4c:
73:00:99:48:96:95:40:8d:05:b2:c0:fb:8e:58:f7:e8:f7:d0:
97:03:b5:38:5b:a5:0e:3d:62:57:46:fa:2b:7d:1b:9b:d1:dc:
f1:3f:88:f8:db:92:8a:48:dd:7c:02:83:5d:35:e0:e9:17:22:
c7:7e:92:2b:9f:96:3d:a8:38:e3:cb:e0:a7:34:aa:06:16:c6:
73:3f:fb:78:4f:73:d1:3f:71:d1:d4:c5:b7:c9:4d:c9:2e:be:
eb:55:a9:48:11:25:3c:7a:14:8f:93:64:04:e4:17:16:ac:11:
a5:18:a0:c7:46:7c:51:9d:3a:02:31:d0:7d:b7:2c:07:8e:13:
6e:5c:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:19 2026 by rpki-client