
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa
File: d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa (raw, json)
Hash identifier: wviYkz9OGKIL7kXd1gYARIGa8WJRSe3QxHL/aON0gKc=
Subject key identifier: EE:20:FC:C8:B7:FE:A1:AF:F5:C6:ED:B9:8D:00:AC:A3:6A:99:F0:4D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49838E9C4DA0EF279DB93D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.196.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:8e:9c:4d:a0:ef:27:9d:b9:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a2830f0a-e399-4774-a778-e69eb41e1aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:0a:e1:cb:23:40:16:de:ab:26:e3:93:bc:
1a:d3:bb:d4:d2:bc:0a:50:0a:ee:d0:b3:f8:f6:22:
f5:9d:15:52:95:9a:3d:10:6f:f3:39:5f:9f:72:ec:
63:12:44:ba:59:12:34:1e:82:59:a3:ab:08:b6:b7:
5a:4c:42:b9:2e:4e:e4:70:e2:38:fb:dc:28:46:25:
47:f5:36:98:bf:56:22:9f:e3:a0:53:7d:53:16:d2:
98:00:75:88:75:bd:a0:ff:d8:aa:37:c2:da:ce:da:
f3:4f:c5:58:4f:a0:ab:9e:7d:8b:12:85:f1:1d:af:
5c:02:7d:6a:cb:02:55:a4:db:ce:59:a2:cc:6f:5a:
ed:8c:f0:67:5c:a5:72:e0:2d:96:41:8c:ec:a7:b6:
11:94:11:18:4e:e8:8d:70:61:ad:cc:f5:a2:da:0c:
0e:23:a9:7a:df:b0:7f:55:8e:3e:ca:75:53:bc:63:
57:ad:3e:02:5b:7b:c1:57:9c:40:e5:c3:44:00:5c:
35:28:6d:d8:d3:3f:32:86:62:ed:c4:e6:7e:e3:88:
6d:41:a8:97:4f:0a:44:17:92:9d:56:e5:83:64:ea:
6a:11:cb:1a:ae:de:66:7a:73:e7:90:de:d4:c5:79:
77:37:e8:f2:98:73:c6:07:66:eb:b0:f3:5f:8b:5c:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:FC:C8:B7:FE:A1:AF:F5:C6:ED:B9:8D:00:AC:A3:6A:99:F0:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:3c:35:d5:ac:5a:f8:48:20:6d:1b:e0:73:5b:0e:8e:15:de:
ac:6a:a1:28:80:46:93:4c:78:15:c5:d0:4b:3c:8f:8f:8c:66:
80:33:fa:26:10:b2:fe:76:00:65:52:c1:85:af:8b:d6:a9:c2:
68:9a:7c:04:3b:4d:52:6b:88:cc:0a:b9:55:eb:8a:51:18:13:
32:52:f8:e3:be:76:db:61:3a:0b:63:8c:55:7b:59:89:86:16:
19:37:fc:38:51:4b:b4:a3:b6:5c:19:54:0c:f9:71:dc:dc:07:
0b:be:19:8c:cf:a3:37:da:14:5c:dd:aa:8d:22:3b:85:7a:e2:
d5:0c:a6:09:3e:42:fd:b7:41:80:1e:22:67:b3:ec:bf:22:3a:
8b:6e:7c:c5:20:03:06:d9:8c:a6:33:64:0c:4f:f6:26:e4:b7:
5c:5c:17:2c:a1:d9:4d:d8:fa:fc:58:67:93:77:e2:a8:4b:4d:
db:4f:a0:86:2b:00:20:8a:a9:0d:fa:92:04:8c:6f:87:f5:1e:
16:17:19:cb:de:1a:f8:5a:db:7d:44:31:30:75:7c:56:f3:2e:
5f:47:39:c9:bd:0a:66:4b:f0:b0:76:18:15:91:c9:8f:42:b6:
7a:a8:08:fc:d5:12:01:5c:c1:ca:7a:68:05:c0:f6:21:7b:71:
77:a2:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:56:04 2026 by rpki-client