
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc74282c-a4ec-3de6-93dc-069f1076b039.roa
File: bc74282c-a4ec-3de6-93dc-069f1076b039.roa (raw, json)
Hash identifier: qD2I3APnlXnEbFLOs81sFvaD3oOXQ4SZvP2USxZS5zE=
Subject key identifier: 72:79:FD:3D:AC:52:22:E9:77:4B:87:C5:BA:0D:18:26:CB:34:D1:A1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059C0A78F95553B769600240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc74282c-a4ec-3de6-93dc-069f1076b039.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.197.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9c:0a:78:f9:55:53:b7:69:60:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=0e18a818-f64f-4e36-8f12-70150455c365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:e6:c9:2c:30:d5:0f:5a:f1:e0:9c:ff:6d:
0e:d1:e4:50:55:44:95:7c:8a:63:2b:c0:a8:c4:3d:
94:4e:33:5b:81:fc:3b:12:72:6e:df:7e:e0:f7:c1:
87:52:40:64:20:9e:58:81:a6:2a:61:b4:39:3d:99:
23:33:99:27:f9:9a:d8:a5:69:d7:91:8a:8d:26:7a:
0c:9a:38:c6:d6:c4:fd:38:fb:d2:64:fe:05:9f:a2:
8b:8e:a2:4e:b1:9a:a8:11:45:d8:28:2a:64:8d:f9:
c8:5a:97:25:b8:73:c3:ec:ec:ed:2d:36:06:71:22:
91:0c:6d:23:1b:9b:2b:81:95:39:7c:23:a4:0c:11:
77:43:cf:0a:b2:65:9d:b2:69:ba:ef:89:72:4b:87:
db:bb:90:ac:b6:90:fe:66:f5:89:b5:49:0d:11:20:
c6:f7:d7:38:57:24:ba:93:59:44:b5:7f:bd:dd:19:
8c:2a:03:7e:f1:a7:af:fb:e1:13:8d:0c:15:87:4d:
4d:85:2a:a9:09:e7:59:f7:bf:0f:2e:42:81:88:b7:
4c:6c:53:69:dc:20:f6:58:7f:d1:c7:8e:4d:e8:c8:
fb:6d:86:18:87:cd:6b:f9:6d:44:51:bd:bf:3a:11:
30:26:39:38:84:3a:87:84:96:79:54:fd:5a:5b:2d:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:FD:3D:AC:52:22:E9:77:4B:87:C5:BA:0D:18:26:CB:34:D1:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc74282c-a4ec-3de6-93dc-069f1076b039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:2d:36:7e:16:11:46:c9:99:b0:e8:8b:55:35:8c:51:59:60:
a3:ad:d2:6f:8a:aa:72:9a:3e:97:27:cb:bd:e0:68:10:62:8d:
72:bd:b2:24:98:db:f0:8d:db:a9:3d:df:1e:27:9b:4a:11:e2:
e8:3d:0d:6f:85:d3:ec:86:1e:1a:76:7d:69:f5:68:e5:75:4a:
ae:93:cb:f2:2d:42:5c:04:ad:3a:fd:f0:83:80:9e:f2:0b:eb:
66:fa:db:ec:e9:87:25:28:c7:0e:6a:71:45:f1:83:95:4a:51:
ab:20:86:00:1e:77:79:a4:3c:e0:32:a4:32:d4:ec:ef:1e:0b:
81:b5:b1:c0:f8:7b:20:80:d2:58:b8:5a:29:31:87:32:67:9e:
6a:b4:13:3d:ea:3a:58:76:39:28:95:be:e3:bb:15:2e:53:19:
0a:f7:61:7a:05:57:19:11:5a:09:cc:c9:55:e8:6c:2f:03:5e:
e6:1a:89:2b:7b:fe:5b:e1:e9:22:63:ed:34:e7:31:45:fe:84:
14:96:4c:c8:c5:25:9e:49:35:1c:ce:c5:ea:db:1e:dd:77:27:
e8:db:ac:5e:5c:21:9e:ca:ef:d4:1a:ad:c1:57:ee:12:fb:36:
b5:cc:ce:b4:ef:94:13:af:88:2b:56:db:63:e2:10:6f:83:de:
d7:38:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:35 2026 by rpki-client