
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
File: d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa (raw, json)
Hash identifier: NJ1NN1yInh/qCU4cIIMgtbvcpIn5YPqBh1dD1t0A7Ek=
Subject key identifier: 6E:66:FC:51:36:8E:66:B9:D4:D3:0E:30:BD:03:FB:5B:F5:4E:AE:1A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584E059B8B9EF94CD64C1D237A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 7155
IP address blocks: 99.197.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:8b:9e:f9:4c:d6:4c:1d:23:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=5798ee7c-7477-4e25-a390-db33ac3b16e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:23:03:93:67:b4:ac:18:d7:a0:be:4b:0e:
c4:db:dd:2d:4d:2d:d0:c7:85:95:8d:69:75:3e:96:
2b:eb:5d:f7:30:0d:ee:14:24:3f:17:a5:5f:72:fd:
bf:c4:13:ec:5a:a1:26:90:29:94:a5:bd:ce:e5:10:
c9:64:ce:5d:a3:49:7a:f3:d0:c1:60:5a:0d:36:ae:
82:5b:2d:f0:41:7a:a3:df:f4:96:13:f8:02:c8:22:
a2:ee:07:8c:63:52:7c:82:fb:df:0c:6e:4f:2a:a9:
b2:79:ee:b3:5f:5e:9a:dd:15:3e:a5:6d:ba:1a:87:
30:1d:40:9b:b6:49:37:e2:bc:01:1f:95:2e:46:6a:
73:21:b6:b7:60:b2:db:90:48:86:b6:e9:c1:75:b1:
e9:1e:3b:fa:5b:4b:7f:20:6f:22:a2:f7:61:29:d4:
02:d9:31:be:83:da:83:8d:49:74:ca:db:76:6b:f7:
61:44:14:40:51:16:79:76:f2:71:5a:07:7f:c1:dd:
ac:db:9e:88:ba:4c:81:8a:8f:bf:99:73:2d:e7:9b:
50:46:c0:3e:5b:99:d8:2d:32:e3:a7:73:b3:7e:0c:
db:17:9b:ed:f8:07:16:4f:5d:83:f5:ff:06:6c:88:
d8:97:67:bd:c7:bf:c7:81:ca:ae:15:3d:a2:1f:80:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:FC:51:36:8E:66:B9:D4:D3:0E:30:BD:03:FB:5B:F5:4E:AE:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d64ce4a9-c5f2-3922-a83f-ceaa96fd4294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:dd:99:a8:31:c2:96:bd:34:19:e2:1d:59:00:3d:fb:4a:aa:
80:dc:22:1f:28:2f:d2:34:57:fc:08:e9:f1:f6:d5:ee:44:07:
89:86:91:43:0b:b8:ec:b3:5a:1f:43:0c:be:59:5d:b1:2d:2c:
cc:cb:51:6c:80:5e:77:ba:c9:3b:be:4a:0e:fa:1d:57:88:88:
f1:fb:c7:bd:0c:15:71:29:be:f5:89:cb:17:db:a0:96:b0:c4:
ef:8e:ef:c8:72:00:46:9b:ae:16:e3:72:d5:1f:15:ec:83:2d:
cb:c4:db:59:c2:db:63:e9:fb:21:36:19:a3:db:38:3d:48:ee:
35:bc:c2:57:40:23:c4:02:bf:f6:c0:37:a0:d2:af:3d:c1:24:
f1:a9:52:15:13:26:05:02:8e:3b:e5:de:a8:f8:94:6f:dd:02:
5e:03:61:a8:37:fc:1e:7b:fd:40:3a:1b:49:4f:c7:78:47:34:
1e:86:35:5d:62:10:a3:7c:8c:fa:97:63:b1:c0:50:30:c0:14:
cc:54:ce:f5:55:5a:c1:50:52:54:5e:c2:f1:58:89:0f:e9:8b:
c2:b5:1a:50:f7:1c:69:b5:f0:8d:f0:84:c4:8c:d0:4a:5a:93:
c0:5b:8c:a3:43:8a:61:8d:80:2e:3a:7c:0d:98:9b:da:dc:f1:
3e:bc:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:08 2026 by rpki-client