
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
File: b858aae4-a2d0-3206-926a-11f8600ccc2a.roa (raw, json)
Hash identifier: wy3PTipalJSWvlStojw6U0sFxg6pjZRPCd6FQA3bcnY=
Subject key identifier: 67:28:38:35:50:8B:AA:1D:5B:D7:60:7E:0C:EB:10:E5:D2:02:E6:C1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CCC4A940325B6F4762B140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 40306
IP address blocks: 99.196.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cc:c4:a9:40:32:5b:6f:47:62:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=c3466d70-af8b-41a5-a0da-878122f89d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:76:f4:ba:a5:bf:86:19:4f:d4:3b:5a:39:
87:98:9f:84:37:f6:44:e9:40:45:e6:7f:4e:92:0b:
ab:44:69:68:42:c8:49:a3:89:44:59:48:04:cd:45:
cd:94:d1:d6:18:03:7d:e8:c7:8a:a1:86:34:fb:80:
0f:1f:b4:51:ee:36:87:60:76:ae:86:47:e1:be:37:
f7:f0:33:50:5c:e9:f0:fa:55:5b:66:98:5d:8b:f0:
5c:20:33:06:e0:50:f6:93:20:77:93:79:7e:56:be:
d9:21:74:e1:59:fa:4e:ab:95:ec:07:27:b3:f7:2d:
7b:54:8b:bd:b1:42:fd:68:4a:12:8c:04:ee:81:44:
b6:df:8a:8a:d7:e5:da:0e:35:b6:86:05:01:08:53:
da:ca:68:14:ae:5d:b0:17:6e:72:6a:95:b3:26:9f:
b3:a7:51:14:b4:60:f9:84:be:62:66:89:c4:85:7c:
19:71:ea:2f:8c:e3:cb:3e:e9:a6:0c:bd:60:46:af:
a8:8c:f8:4d:5a:99:a4:fa:e3:0d:ed:ea:00:86:5b:
3a:3b:a0:47:7d:2e:ac:e0:77:dc:54:4f:76:9e:d0:
2f:72:28:85:51:cb:7e:0e:ce:d9:77:e8:89:5c:82:
32:02:b5:f0:a8:81:bb:62:1d:4f:70:89:de:6e:16:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:38:35:50:8B:AA:1D:5B:D7:60:7E:0C:EB:10:E5:D2:02:E6:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b858aae4-a2d0-3206-926a-11f8600ccc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c7:97:60:fa:63:a3:50:35:4f:c8:35:57:9a:54:4f:80:fc:
7e:29:13:4c:9d:67:94:21:5f:48:77:06:eb:0f:05:35:38:df:
0c:7f:4b:c2:cc:52:d2:43:57:db:da:94:73:bd:52:e3:75:55:
9d:98:df:18:9d:f5:fe:e8:fb:e9:b6:77:e1:34:8d:7f:86:6c:
75:13:ae:f7:38:af:be:c7:24:6a:b5:45:49:f5:03:8a:66:a8:
50:10:fc:b4:a4:0e:12:99:8b:0e:ca:d3:3e:3c:de:8b:2e:57:
3d:48:9b:ed:67:c2:e5:47:13:a7:52:f2:4c:fa:31:e5:ce:c8:
c9:ec:bc:a2:50:d7:b6:3d:ab:d0:00:7f:2d:15:0e:de:8d:63:
c9:d0:7f:45:30:b2:83:ff:dc:c4:75:6a:e3:f0:55:23:3a:c5:
ef:fb:87:5f:3c:3f:20:80:ff:1d:b4:43:8f:65:b0:ac:c6:4b:
61:d2:77:de:72:f6:27:77:d0:bb:63:d2:2a:ea:84:90:20:4f:
7c:14:1a:57:8c:b3:41:a6:29:a4:e8:2d:da:72:ee:f4:59:b1:
6b:09:2b:04:d2:03:7e:76:ae:a6:fa:eb:df:84:96:45:f9:f2:
cf:d1:45:66:eb:d4:7a:53:67:d2:cf:52:1b:3a:88:19:0e:f9:
39:1a:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:26:52 2025 by rpki-client