
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
File: 73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa (raw, json)
Hash identifier: 0es+iZA9CRb/rXT1j7bQEzSipHgzX9mPA8rMB4Eh7OI=
Subject key identifier: E1:4D:24:10:A8:E5:15:A5:31:FA:5E:AA:25:71:56:E7:35:FB:C4:44
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C08C8F0D09272FB4BE880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.197.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:08:c8:f0:d0:92:72:fb:4b:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=1f2379ec-a9ef-48a2-a91e-dcc4d5689e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:79:e1:9d:69:d8:0f:4d:a6:0d:50:0e:0b:
73:83:d0:cd:27:d8:7d:9d:64:02:02:d2:4c:b8:e6:
fa:ad:a8:66:b9:61:a1:68:e6:38:d1:2c:43:3c:e6:
3b:1c:ce:18:8d:9c:17:41:b9:50:9e:82:73:b8:68:
bc:e4:78:e8:9a:85:34:ca:7b:f6:d3:53:be:e6:53:
ca:bd:85:03:64:18:43:90:4e:ca:1b:bb:8b:3f:29:
c2:92:6c:d2:7b:25:87:22:3e:ab:3b:a5:5e:85:bc:
3a:83:e9:b1:00:b9:5d:50:5d:62:91:85:bb:b3:87:
63:3e:02:26:76:73:c2:67:95:9a:32:ba:40:6c:e9:
b4:41:51:bf:41:23:3e:7d:b8:a8:39:81:c4:78:bc:
16:84:e4:d9:59:6c:74:b2:60:76:e5:c1:5f:18:e5:
fb:81:a6:af:88:72:e9:9b:e3:fb:e6:5c:b5:3b:31:
0b:40:84:b7:3c:82:26:8e:4f:bb:ef:c1:ba:87:34:
85:f7:56:aa:c7:e4:e7:df:b1:bc:2b:bb:4d:d7:70:
b3:6e:9f:d2:c4:a8:52:31:9d:9a:a4:1e:d9:72:48:
10:93:86:a2:14:71:c8:75:58:f5:93:3a:c2:b8:9c:
83:30:e5:a2:c0:a7:f5:9d:da:77:25:8b:b2:13:d3:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:24:10:A8:E5:15:A5:31:FA:5E:AA:25:71:56:E7:35:FB:C4:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bc65a7-da6e-30a7-9dd8-ba6611cac928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:df:ff:81:af:cf:7d:5a:a3:ff:a6:80:c0:b1:3c:8e:93:37:
45:ea:e8:4c:7f:77:10:64:39:02:01:5f:0c:e2:0e:d9:61:38:
0e:c0:c3:e5:a1:c2:71:18:d1:9e:d2:4b:8e:a9:fa:88:91:58:
be:4a:b2:05:2a:31:59:ea:dd:76:39:dc:35:1a:36:de:fd:5e:
8f:2d:f6:80:b5:51:0a:15:76:21:f9:5d:10:a9:64:0c:12:51:
e3:91:78:44:24:ca:a2:2f:93:b3:0a:1c:32:06:4d:c3:1e:05:
c6:fe:5c:44:f6:72:9e:ca:b8:81:b5:24:23:09:02:6d:59:ff:
21:3b:8e:c8:3d:05:e5:1e:5d:6b:59:91:61:e2:37:7f:24:c6:
4f:d3:85:af:a1:3c:71:fc:3e:c9:ef:5d:1b:90:68:37:01:40:
27:9c:9c:29:2d:3e:a9:1b:f3:87:be:ac:4c:04:21:a8:55:a5:
fc:ed:be:93:3b:96:59:4f:15:ff:97:fb:cc:f8:0e:7f:12:a4:
67:c2:85:5f:2e:be:f4:35:da:22:0a:da:36:ca:80:45:80:88:
ef:45:5f:ad:25:61:fc:ac:6d:16:b7:c4:30:27:0d:c9:dc:59:
aa:02:79:61:c0:41:3b:81:e5:69:8f:ba:80:c0:f7:09:c2:09:
2c:2c:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:13 2026 by rpki-client