
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa
File: 86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa (raw, json)
Hash identifier: b5x1RnRRJXAhuxlsUMglQBc3vSK0udB9L9jFUyhqAEg=
Subject key identifier: 40:7A:D6:2D:16:A4:F7:E8:66:18:A1:AA:1D:17:5E:7A:50:AD:34:78
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B83FE5034F39A718A9B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.196.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:83:fe:50:34:f3:9a:71:8a:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=87108c04-0a58-45a9-8002-f46f4af3e60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:5b:a6:81:2e:c3:e2:f8:61:97:98:f5:a2:
30:94:49:88:27:fd:6d:a7:1b:dd:a3:35:69:04:ce:
0c:10:8f:9a:3b:71:6f:6b:5e:76:ad:12:ee:17:da:
97:49:d0:6b:11:93:32:e2:f5:0d:fe:7b:da:77:f6:
bd:be:e3:de:c2:89:d9:40:35:01:c9:c2:31:07:99:
71:2c:48:e2:ed:f1:77:dc:8d:b0:e0:eb:0f:05:43:
6a:ad:c7:b2:2a:c8:e2:54:eb:6b:75:7a:22:d2:8e:
6a:75:c9:ac:bc:40:77:03:79:7a:6f:91:37:3e:9e:
42:4a:e0:ff:d5:06:1f:d7:9d:32:8c:fb:86:f6:67:
68:d0:c4:08:56:6b:f9:65:d7:16:39:a3:ce:aa:42:
fc:b6:86:4c:af:b9:ba:1e:6f:93:b7:ca:14:5b:16:
b9:a0:73:00:2e:25:0a:f4:41:54:ba:e9:61:78:fa:
8d:52:77:79:73:70:68:d8:1f:c4:6d:7b:cd:ee:48:
84:99:c7:79:00:0e:42:77:c0:5a:04:6f:98:8e:ce:
3a:cb:b8:40:1d:e2:8a:c5:23:3c:79:72:65:c8:92:
9e:c2:b0:5f:35:c4:d6:54:f5:10:b7:29:48:f1:97:
e2:5c:f2:84:18:c1:9e:dd:73:b6:67:0c:d5:19:f4:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:D6:2D:16:A4:F7:E8:66:18:A1:AA:1D:17:5E:7A:50:AD:34:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c5:c8:84:a3:99:91:dd:32:5a:38:cc:53:b2:f1:3a:93:1c:
a2:4d:29:a1:d1:21:13:fe:21:fc:3f:f4:5c:52:13:6e:0c:32:
08:cb:31:81:93:b5:71:79:5d:89:68:cb:9a:40:8b:5f:ca:71:
01:5b:1b:19:61:a4:f3:fa:94:1c:29:60:ae:c0:ed:89:ff:75:
01:18:57:46:68:71:d3:27:36:09:78:eb:65:6e:9b:b1:31:08:
0b:50:e1:0d:3f:f0:ae:6b:f3:f2:7b:98:11:ae:bf:38:e0:38:
ba:9d:13:5a:5c:7b:3f:d3:11:9e:29:38:32:02:2a:44:c6:30:
8e:ac:a2:2f:30:f4:b7:3a:22:75:80:66:ac:a3:31:70:ac:4e:
b9:cf:93:47:08:ac:c2:ef:c9:31:7e:d0:31:f6:df:ab:36:81:
e2:86:0d:c7:47:0a:1b:55:c8:b7:28:dd:3d:96:0c:f2:b3:c4:
c8:25:6f:bb:26:00:a0:8d:f0:17:2e:d7:af:ae:53:b1:9c:c2:
ee:a9:6e:c5:b4:68:00:ba:18:cd:e9:87:88:4a:1b:f0:ac:d7:
00:51:a1:85:d9:6a:ec:25:1b:e2:c9:90:fc:ca:a2:19:08:39:
d6:c6:9f:4e:bc:cd:6e:3a:ef:58:34:2a:3f:bc:dd:d4:d8:f9:
66:4e:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:16 2026 by rpki-client