
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0832ef5-a6a3-331f-8080-65093efae54d.roa
File: d0832ef5-a6a3-331f-8080-65093efae54d.roa (raw, json)
Hash identifier: zxuYzmG65AK8Dh6xWtKwqiqCw+qxQcJo0CTRgZj2M2g=
Subject key identifier: 37:77:DD:12:24:E0:D4:CC:5A:78:6C:39:5A:A9:C3:6A:39:DA:B9:73
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F8667881BC15F0B34AD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0832ef5-a6a3-331f-8080-65093efae54d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.197.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:86:67:88:1b:c1:5f:0b:34:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d277bdfd-36bc-4608-903e-4242bfa55795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:4a:d2:82:af:e1:ef:31:e3:81:00:39:bd:
52:4c:65:7d:39:73:a3:58:79:34:54:c0:6c:ad:a3:
9b:fe:43:b5:57:7f:8f:b7:77:35:35:8e:0d:9d:5d:
fb:59:4b:f7:bc:90:b8:05:71:10:89:5a:d2:77:a9:
17:c4:14:90:61:f3:bc:51:6b:c6:2d:da:56:9e:52:
27:6d:68:ba:0a:74:77:f9:bc:16:76:7c:7f:f6:c5:
ff:29:5a:49:79:6f:5d:5a:69:57:2b:37:67:41:04:
a9:8b:6d:c4:51:51:09:e8:6c:75:00:6d:1b:8f:91:
cc:2a:3e:e1:8f:fe:25:b9:b6:d5:1c:5a:30:d8:af:
49:b0:1b:a6:c1:0c:b8:58:3a:87:f1:84:a3:85:82:
38:b0:dd:cd:43:df:08:38:20:5c:1f:6d:9e:76:e6:
af:91:de:86:10:06:ff:d8:65:3b:fe:9a:f6:d6:96:
2c:06:56:77:1d:68:68:de:f8:65:cc:fb:79:d9:2b:
65:f1:2b:60:dd:65:7e:a4:d9:cf:7a:26:f4:3f:ae:
a3:80:aa:16:a0:b6:86:f3:cd:21:b5:27:1e:7a:1a:
ea:b1:be:30:95:fa:52:1b:6b:6a:bc:38:82:81:d3:
d8:1d:ba:f7:8f:e9:b4:df:0e:2e:56:ba:3e:d6:5e:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:77:DD:12:24:E0:D4:CC:5A:78:6C:39:5A:A9:C3:6A:39:DA:B9:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0832ef5-a6a3-331f-8080-65093efae54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2b:f0:7c:9f:6b:ef:95:ef:c9:61:27:0e:67:08:bd:f2:c4:
f2:86:69:f9:a0:ca:fb:06:7a:2d:dc:77:e6:fd:48:a1:d0:62:
c4:77:a5:c9:c3:08:11:76:5e:b0:a7:0e:60:6f:11:2b:c7:fd:
50:b3:6a:37:73:0c:f9:0c:b9:7e:1b:a5:97:80:79:f1:2e:0b:
56:31:6b:6c:38:21:b0:bb:5e:b5:39:4e:20:6f:c7:e8:2f:9d:
bf:39:ff:1c:4a:ed:b5:f1:f1:2d:20:1f:47:03:22:bd:5d:32:
e9:50:fd:44:48:93:99:6a:45:50:9a:9f:70:11:0a:02:b9:25:
62:ba:21:85:af:94:1a:36:c8:1f:9b:83:3f:0a:51:2d:53:bc:
b4:9b:a2:1e:ba:29:12:12:3c:2e:bf:d3:a1:0b:ee:ee:8d:d5:
be:59:94:0d:50:27:1a:93:45:7d:46:1e:b0:77:e9:36:6b:f2:
dd:fb:af:8d:84:43:10:c1:9e:3e:3c:55:a4:30:d3:b5:f4:63:
8f:fe:4b:a3:f3:02:99:92:1c:7e:5c:a7:ea:d6:88:4b:93:68:
c1:16:b4:ef:0e:63:7d:53:bc:0c:14:45:83:ad:51:3e:4d:83:
b3:3b:64:90:de:84:a2:80:e5:5b:14:e8:54:61:84:d8:41:d5:
02:72:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:11 2026 by rpki-client