
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f14eecea-6776-34dd-9f9b-796f3d8d975a.roa
File: f14eecea-6776-34dd-9f9b-796f3d8d975a.roa (raw, json)
Hash identifier: gHOQ9vVOwJJVy0IVPtQmCn7eJKGfS8Js1B58oVB0PI0=
Subject key identifier: 21:BE:41:3A:4E:70:B4:18:FB:0D:CC:6D:1F:1F:DB:32:AF:5B:EB:55
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F497B6A367122163E44F9E220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f14eecea-6776-34dd-9f9b-796f3d8d975a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.197.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7b:6a:36:71:22:16:3e:44:f9:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c0f3b308-87aa-424a-929e-04f0f149ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:54:44:89:e9:06:63:6b:f5:fe:d6:94:68:
be:ba:ac:45:4a:b6:a2:27:55:2f:fb:6f:69:44:94:
71:6b:99:61:c1:00:76:dc:46:57:0b:57:0c:7a:74:
38:79:b8:a8:cf:e4:2d:96:40:91:4b:3a:ac:53:e5:
fc:26:fe:9a:f8:7f:8b:eb:49:05:f8:28:10:86:0a:
77:e9:49:0b:98:9c:c1:8f:53:5d:c0:69:a9:f5:92:
13:8c:66:07:f2:6a:28:f1:70:ac:54:2e:b5:72:97:
1b:f3:dd:d8:c6:54:06:19:e3:2d:37:3d:10:6f:1e:
92:d8:ee:15:5b:5a:4c:94:d0:f2:e5:d0:96:1e:57:
ce:a6:2c:00:c2:e1:27:96:c6:37:37:bb:b9:c3:1a:
7f:63:c3:6a:11:bb:b4:f3:5a:b6:da:f6:1a:1c:37:
78:76:de:44:35:b9:eb:1c:7b:00:4b:58:a7:85:11:
97:d0:75:6b:6d:80:1f:27:9d:b8:bf:3c:a1:14:66:
80:d6:96:fc:66:f4:ca:08:a8:49:da:89:c7:2a:b1:
62:a7:a3:c7:5e:44:e5:18:ad:19:a5:f4:da:be:b0:
0c:86:92:68:cf:76:93:d0:d4:94:35:29:ca:a6:b7:
fd:f1:ca:44:6d:a4:f6:0c:5b:24:05:4e:4d:e7:4c:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BE:41:3A:4E:70:B4:18:FB:0D:CC:6D:1F:1F:DB:32:AF:5B:EB:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f14eecea-6776-34dd-9f9b-796f3d8d975a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:9c:d7:fe:51:d2:d1:8a:ac:17:da:90:19:d3:cc:f2:08:4c:
f8:98:41:a6:d4:67:35:f2:f3:4e:9b:47:5e:87:ff:75:1e:44:
4f:cb:97:be:a1:b8:20:c3:a1:52:c1:ed:35:47:f1:3b:75:8d:
40:90:d8:43:a3:30:36:d9:c9:ab:65:1b:21:0b:bf:7e:31:0d:
8d:b2:7b:fa:94:65:0a:9f:fd:ee:e5:e1:cd:ae:e2:ac:4f:7d:
50:d4:d0:fb:82:88:04:af:b8:9f:83:11:e9:6c:b2:c9:87:aa:
7a:50:48:28:aa:e1:c6:8d:1d:7b:19:1e:bc:d0:fb:4d:40:c4:
e1:33:7e:99:2d:83:50:88:8e:d4:95:66:d9:23:48:4a:2e:dd:
8a:57:44:96:1e:d8:57:a6:96:5b:24:81:03:9f:2b:7f:84:9b:
fc:b6:5a:b2:57:de:cc:46:24:64:5c:95:99:cd:5d:29:9d:fd:
c8:27:55:c9:c9:93:66:92:d6:28:1f:a3:03:92:d7:a6:6f:6a:
23:10:5a:2e:dc:a0:81:bc:9e:0b:74:9c:90:64:bf:02:e2:55:
4b:54:2d:3e:c9:0f:c6:46:a5:83:41:56:d8:2f:0d:a9:98:2a:
7c:0e:c5:68:be:12:38:8d:12:03:fb:af:6c:fc:be:0d:c2:31:
2c:6a:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:35:51 2026 by rpki-client