
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa
File: f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa (raw, json)
Hash identifier: XY3HF6ShAIg84B88yoFAil6j92O4TJsGNpMU9zmJT1M=
Subject key identifier: C3:97:7E:E2:9B:9B:92:2C:78:A1:AA:EB:24:22:12:D3:30:86:89:36
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F4983A252B902A762C7D30500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.197.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:a2:52:b9:02:a7:62:c7:d3:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=be73b740-379d-41c2-87f7-1b07d2da814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:d0:3d:96:61:ea:37:8a:35:5e:79:f9:2b:
41:e1:fa:1a:59:bf:f9:1d:24:69:55:1c:55:38:fa:
cb:d7:2f:75:ce:4c:5c:f2:90:9f:5a:12:77:6a:22:
42:3a:3a:c1:a0:62:21:7f:f9:11:f4:e6:cb:74:61:
4b:9f:ff:c9:c3:3b:b1:02:ae:2b:06:1a:ee:68:20:
43:ae:9c:a3:9a:23:49:dd:8e:91:e0:f4:bb:c1:78:
cc:e2:5d:c9:09:a6:75:01:94:82:4b:72:01:31:dd:
6b:1b:0e:c1:55:3f:3d:49:02:06:53:fc:89:34:1b:
7b:bf:d7:32:f4:72:55:3f:54:27:5b:13:33:06:53:
50:4f:64:07:0a:2a:ac:04:fd:59:d4:9c:d4:8f:c8:
c0:bb:84:58:10:6a:e3:8b:d3:38:05:63:d1:5f:1e:
a8:f0:0c:37:91:10:70:78:c3:00:a2:e6:5c:38:ea:
2b:26:26:7b:a5:0e:f5:28:fa:85:b8:9c:a8:33:ac:
1a:34:61:68:4a:81:13:0a:91:c9:ed:00:a7:7f:2c:
a2:42:25:04:07:91:a1:30:40:28:49:05:79:83:29:
67:94:d1:e7:df:2b:96:24:dd:31:25:1d:a9:d6:ca:
01:dd:bc:c5:f0:f7:77:0b:34:62:7e:47:a3:6e:d1:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:7E:E2:9B:9B:92:2C:78:A1:AA:EB:24:22:12:D3:30:86:89:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3f6289c-f0cc-33ad-aa09-f64dbe53d039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:1f:b2:e9:db:cd:42:33:3b:5c:8c:2f:2d:f0:0c:dd:ea:91:
6c:b3:b7:ac:0c:13:20:52:e3:29:79:f1:98:f4:4a:c3:f7:12:
23:7d:e7:a0:8b:6f:d8:d1:d7:a9:66:52:63:55:81:0f:8b:23:
44:cc:91:41:ad:a4:4d:7b:2e:59:d1:1d:51:9e:c4:ce:05:7b:
f1:cb:ce:57:c7:a7:72:e8:cb:af:4c:03:51:de:09:b5:4b:9d:
8e:65:8e:c7:09:c3:65:49:ea:a0:79:70:cc:72:6b:ec:8f:a4:
95:17:ad:3f:8c:08:d6:81:d4:41:e8:93:5e:3f:29:79:d8:8d:
a5:be:67:8e:6e:24:3f:97:20:b6:13:69:40:c0:74:0e:c1:ad:
e9:79:90:49:25:5f:6b:c6:68:7f:8e:58:7f:26:c6:41:cf:05:
c9:82:d2:3c:da:bf:d6:f6:12:00:b0:f3:4c:7c:8c:00:64:1a:
7d:c5:fe:08:fa:38:88:a4:0e:c0:df:fe:2a:3f:d1:f6:1d:eb:
fa:b9:1d:5b:b9:a1:4f:65:96:15:6c:1a:c7:62:cc:1e:41:33:
3c:f0:a5:49:8c:00:ea:a0:c6:c9:09:f2:89:08:af:50:9d:6c:
be:81:70:e6:2d:3a:6d:54:bd:84:78:3e:57:bf:10:ce:ab:b0:
6c:2e:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:03:01 2026 by rpki-client