
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
File: a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa (raw, json)
Hash identifier: /SWnktiyRbgf9+EG7oVjShe+Vl6iIBsd7BJWtDxlvrM=
Subject key identifier: A0:F2:39:6E:CD:84:06:B2:CD:ED:A7:B2:65:5A:A3:34:0E:C7:29:7F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C0749AF6B2B987B14A200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.197.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:07:49:af:6b:2b:98:7b:14:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=018efdb8-a07e-4887-9ea1-0e6289ab188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:e4:03:03:1b:bd:3a:88:24:04:b4:06:43:
d1:18:98:ad:bb:7f:1c:3c:41:c8:bb:91:2d:18:b7:
d8:bb:f5:cd:64:26:57:b6:5c:9b:a1:35:e7:a4:15:
96:22:df:e4:83:8e:36:cc:3c:ce:bf:c7:61:8b:fa:
0f:92:89:99:ad:40:56:e2:ca:18:13:81:6c:4c:09:
03:b3:2a:55:8f:f6:ee:00:5a:b0:ae:bb:3d:bb:27:
c0:09:58:4b:90:31:c3:77:9c:ac:ee:58:72:ec:0b:
bc:82:0c:5e:1d:8a:16:d7:d4:88:c2:6a:ae:d8:c4:
a0:41:d6:87:09:1d:46:f1:29:79:c3:73:8e:63:ff:
f4:48:ef:87:9b:34:a9:76:f6:ff:e4:3c:ca:74:63:
b1:5a:22:1c:ec:d1:15:3c:8e:80:83:20:6d:75:38:
48:43:aa:6b:25:3a:44:d9:74:a3:6d:73:ac:c6:8e:
f9:fc:89:01:6c:48:84:3d:24:32:1d:08:4a:5a:50:
36:3f:e9:b6:0a:dc:02:0f:17:d2:40:99:09:48:90:
46:2a:19:aa:93:7e:8e:3b:a3:0f:35:d0:18:ed:b9:
14:c8:73:72:46:ef:d8:6d:5e:85:07:49:d1:d8:7b:
61:56:8a:1e:15:6c:90:8e:dd:78:0f:3b:c5:e1:1e:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:39:6E:CD:84:06:B2:CD:ED:A7:B2:65:5A:A3:34:0E:C7:29:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e98e24-967c-3d8d-8474-f7382cfb7a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:95:e1:f5:db:1c:e0:27:4b:93:c9:48:14:61:7c:17:22:11:
2c:0d:fc:1f:59:af:1f:dd:42:a6:e5:1b:43:a2:1d:c5:13:39:
06:47:1f:cc:ba:0e:b7:00:64:3d:6e:7b:c8:9f:6e:ba:23:08:
79:08:16:5d:e5:73:8e:d4:e6:d2:24:60:f0:71:4c:f9:4b:cc:
fd:7d:7f:a6:fa:ff:bc:52:60:c5:11:37:b8:37:ba:05:dd:3a:
2d:35:b1:e3:76:29:c5:a5:1f:1d:e6:09:40:72:8c:ea:93:c2:
45:b1:50:6e:95:10:27:b0:f2:a9:32:1c:92:73:85:df:2f:df:
56:16:be:13:d4:9b:ff:96:b9:69:95:d2:49:62:bf:63:6e:7e:
ab:81:f7:cf:79:10:03:e2:43:27:b8:57:fc:ea:b2:5f:41:54:
0a:26:6f:d9:63:b9:71:00:b1:16:4e:4e:75:73:59:f3:dc:65:
5e:31:7b:9f:07:12:6c:09:1f:a9:99:97:45:20:1f:cb:cf:33:
eb:0d:6d:a8:98:c0:d2:8b:67:63:6e:81:93:59:83:c3:f4:8e:
d8:98:4d:4e:b3:c0:c7:a4:b7:5c:6b:a0:b0:74:c3:cc:8e:c0:
86:66:ce:ba:77:1c:8e:c4:38:3c:b2:35:b6:26:9e:95:2a:e5:
fd:cf:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:30 2026 by rpki-client