
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa
File: 99f40d0e-26f9-386b-bbbd-293755fb24c3.roa (raw, json)
Hash identifier: /CA4y05QNxhvgapRJOafJTg+Tm6sF0bXL0k4uNwLfic=
Subject key identifier: 0E:6F:51:BE:29:60:51:39:0E:61:46:87:B7:21:2B:4C:16:63:13:F6
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584E78FF75D05613B07E7201A880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa
Signing time: Sun 12 Jul 2026 09:00:11 +0000
ROA not before: Sun 12 Jul 2026 09:00:11 +0000
ROA not after: Sat 10 Oct 2026 09:00:11 +0000
asID: 400687
IP address blocks: 216.133.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:ff:75:d0:56:13:b0:7e:72:01:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jul 12 09:00:11 2026 GMT
Not After : Oct 10 09:00:11 2026 GMT
Subject: CN=4df3ef53-979d-4fe0-9434-ff95fe2f1562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:ba:42:90:81:1f:ca:f3:1b:2f:a5:a9:70:
f3:9d:89:2b:f6:f6:d6:c5:21:3b:73:8e:d2:d0:86:
85:d0:29:40:a2:21:13:20:98:d6:41:ca:24:d2:94:
1a:45:ef:df:29:7b:56:50:89:73:04:a2:8b:f3:6e:
fb:5b:70:f2:7a:e6:eb:88:d4:51:a9:4b:da:50:d2:
e9:61:66:71:6e:ab:f6:ba:7d:69:db:38:55:fa:a6:
b9:5a:8f:85:e3:f2:12:9b:ec:13:28:df:d1:78:43:
12:2e:a9:f5:15:94:4d:ed:41:f6:81:de:24:27:ef:
db:af:ac:4a:95:f2:da:02:65:f1:c1:d3:a0:fd:66:
de:54:89:4b:f7:09:c4:5c:aa:36:e0:fb:19:dd:0b:
87:56:d1:2d:fd:31:9a:1c:51:99:09:17:96:7c:18:
a9:44:cf:52:b7:59:ec:3c:6d:a5:3d:30:76:e9:12:
25:1e:07:59:94:69:a8:c2:0f:77:54:7e:5f:c1:62:
67:90:61:0e:6c:b2:ae:9a:33:09:9f:d3:01:d2:52:
66:2a:33:e4:22:a7:c8:76:8b:a1:cf:6a:ed:a3:a2:
77:81:41:0a:96:fc:07:08:59:5c:bb:0a:96:d5:d5:
1b:55:88:fd:96:84:af:32:fe:e1:2c:65:37:fe:4d:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:51:BE:29:60:51:39:0E:61:46:87:B7:21:2B:4C:16:63:13:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.133.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:fd:9f:93:97:7e:7a:ba:ed:05:de:44:cd:5c:45:4c:73:c4:
16:41:4d:74:ef:d6:28:5b:5d:85:de:ee:99:56:19:10:71:c1:
1b:22:06:c0:fc:0c:87:ea:98:9b:f0:44:21:2a:5c:56:d7:3d:
fa:ea:5c:f3:93:33:9c:f8:9a:cb:25:79:d8:4b:9d:89:2e:e8:
01:43:9d:c8:1d:fa:a8:be:89:dd:d3:3a:97:58:40:18:ab:fd:
bd:5c:db:59:75:8a:5d:da:84:e2:d4:35:e0:d2:b6:f2:ac:75:
cf:a4:a5:23:fa:2f:f1:59:b3:f2:53:e2:d5:a8:b2:0a:89:6c:
b1:94:9e:b6:82:3d:2c:0c:dd:fa:d2:4c:b7:72:1b:f9:8a:af:
e4:bf:3d:db:0f:5a:1e:a7:8e:2c:b4:56:a3:16:97:72:2b:2b:
75:f0:f1:28:16:75:6a:cf:73:f6:57:19:8d:8f:61:af:20:a4:
fa:c6:c5:df:5c:25:33:9e:87:f7:ce:ba:95:57:92:41:c7:22:
27:9b:31:1f:56:6c:0c:78:2f:d5:28:ad:b5:39:f3:3b:2c:ca:
4f:46:c9:d3:0a:bd:34:ed:bb:cc:75:35:69:3a:df:05:33:ca:
00:6d:c3:49:13:8f:5c:85:40:a9:b2:c0:84:ef:0e:4f:24:58:
f3:be:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 16:59:37 2026 by rpki-client