
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json)
Hash identifier: dyiO3RgyceWNSjMjiRJnaRLYI22TQ0PsiDHhv52ihXU=
Subject key identifier: C7:54:CD:F2:D2:53:E4:07:33:0E:C0:28:5F:AC:DB:3C:F7:B5:86:EF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79D62919F07C6ECD83676CD
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 40306
IP address blocks: 99.196.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:62:91:9f:07:c6:ec:d8:36:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9c2764f4-8704-49ea-bd4a-e4a1af28e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:7d:fd:58:31:81:51:ba:39:ca:ce:f7:ea:
6e:d7:ae:c4:3a:c9:89:53:88:bb:ce:c9:2e:a9:f2:
f2:64:9b:32:8a:26:f8:d8:78:ba:6a:03:88:8c:d5:
a2:ab:e1:10:d1:47:fb:9b:1f:c3:a9:0f:f0:28:6c:
2e:1c:88:36:ef:47:d0:6b:41:eb:06:f9:f8:e8:18:
a2:fd:fd:22:9b:1d:cb:61:52:2f:6d:ae:76:d0:10:
ae:85:b9:70:4a:9f:24:31:0d:79:6e:d4:65:55:f4:
c3:54:69:93:38:b8:9c:2d:7f:70:20:96:d3:a2:ed:
1e:d5:09:4f:1f:10:bc:49:a1:bb:24:09:9e:f4:cd:
cf:05:9e:ee:05:9f:b4:12:52:1e:39:f6:b2:52:7d:
66:8e:4b:49:f5:6d:61:c3:88:15:41:98:b6:c6:77:
a0:ee:56:fc:de:37:44:af:e9:45:d0:a7:a4:dc:87:
f2:c5:36:a1:cd:1c:01:3d:53:30:7b:dc:74:b0:b2:
e7:7f:30:df:3b:86:17:6b:6a:2d:77:a1:0b:29:57:
c1:d6:bc:1b:1f:a0:54:a0:ee:d9:4d:14:0f:2a:58:
65:0c:23:94:c8:d8:d9:10:e4:b3:4e:b6:d0:a3:51:
d8:94:02:51:6f:b4:33:9f:3d:b0:47:4a:d7:c5:a6:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:CD:F2:D2:53:E4:07:33:0E:C0:28:5F:AC:DB:3C:F7:B5:86:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:b8:84:95:20:d0:d7:48:65:07:fb:5f:e2:eb:9f:9e:2f:be:
ed:08:3f:77:7c:61:cf:96:d1:87:7a:9b:38:5f:78:ef:77:50:
0b:60:ca:60:e5:9d:ce:73:b6:09:7f:32:71:74:d3:80:2a:05:
be:e2:36:be:8c:d6:74:d0:69:7b:75:18:45:68:77:ce:91:62:
39:1e:b3:9e:09:b0:d3:57:ca:8c:96:8d:fb:df:90:b1:97:8c:
6b:a2:b2:60:cd:ba:dd:a8:ba:aa:f8:bf:66:61:10:62:1d:4b:
17:0f:0b:da:de:d4:d6:d2:69:3b:b6:57:2d:a9:15:30:4c:bd:
b5:e3:40:80:87:d4:9c:45:17:3b:3e:cb:90:47:01:45:40:14:
60:74:1c:49:e2:9b:1f:a1:c5:d5:90:82:fc:d6:99:50:d9:9e:
1c:6e:00:d3:d3:5b:0e:3b:ce:6a:0d:43:90:21:d4:4c:fb:23:
e6:ac:46:e3:d4:b0:96:34:0d:be:ef:35:9a:0d:c8:ab:c5:92:
1f:48:40:e0:c9:46:58:09:f3:b3:12:2b:43:01:d9:17:33:b5:
55:f6:89:ba:02:10:5c:0f:b1:d1:4a:3a:3d:b5:4c:2a:94:cb:
6b:b1:fd:7e:74:ad:7b:37:25:83:8d:0c:b4:0c:70:df:5c:42:
42:1e:06:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnWKRnwfG7Ng2ds0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWMyNzY0ZjQtODcwNC00OWVhLWJkNGEtZTRhMWFmMjhlN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMt9/VgxgVG6OcrO9+pu167EOsmJU4i7zsku
qfLyZJsyiib42Hi6agOIjNWiq+EQ0Uf7mx/DqQ/wKGwuHIg270fQa0HrBvn46Bii
/f0imx3LYVIvba520BCuhblwSp8kMQ15btRlVfTDVGmTOLicLX9wIJbTou0e1QlP
HxC8SaG7JAme9M3PBZ7uBZ+0ElIeOfayUn1mjktJ9W1hw4gVQZi2xneg7lb83jdE
r+lF0Kek3IfyxTahzRwBPVMwe9x0sLLnfzDfO4YXa2otd6ELKVfB1rwbH6BUoO7Z
TRQPKlhlDCOUyNjZEOSzTrbQo1HYlAJRb7Qznz2wR0rXxaZmtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdUzfLSU+QHMw7AKF+s2zz3tYbvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjg1OGFhZTQtYTJkMC0z
MjA2LTkyNmEtMTFmODYwMGNjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKi4hJUg0NdIZQf7X+Lrn54vvu0IP3d8Yc+W0Yd6mzhfeO93UAtgymDl
nc5ztgl/MnF004AqBb7iNr6M1nTQaXt1GEVod86RYjkes54JsNNXyoyWjfvfkLGX
jGuismDNut2ouqr4v2ZhEGIdSxcPC9re1NbSaTu2Vy2pFTBMvbXjQICH1JxFFzs+
y5BHAUVAFGB0HEnimx+hxdWQgvzWmVDZnhxuANPTWw47zmoNQ5Ah1Ez7I+asRuPU
sJY0Db7vNZoNyKvFkh9IQODJRlgJ87MSK0MB2RcztVX2iboCEFwPsdFKOj21TCqU
y2ux/X50rXs3JYONDLQMcN9cQkIeBvg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:04 2026 by rpki-client