
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0064d4ea-14db-3d5a-a491-f20bec3ca228.roa
File: 0064d4ea-14db-3d5a-a491-f20bec3ca228.roa (raw, json)
Hash identifier: qeJVCrmTSQrloS2HbaHWdOmKcqu/cnwhmsSZvXMoSWc=
Subject key identifier: 17:1E:ED:0C:0B:F5:0E:C4:C0:B8:66:27:D7:44:1D:66:00:D3:F3:A2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DDDD9B41F8C246B2E7D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0064d4ea-14db-3d5a-a491-f20bec3ca228.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.196.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:dd:d9:b4:1f:8c:24:6b:2e:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=d117caf0-2221-4b5d-a810-27e3fe3d6e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:55:7c:68:c4:5b:94:91:21:49:aa:b1:dc:
ba:2e:1f:b1:be:68:63:b6:5f:57:55:9e:d7:87:21:
5e:08:7c:d8:f3:d3:5b:f2:ca:c1:25:2b:e7:a3:1a:
1b:11:bb:b3:1b:a6:e2:2f:93:7b:05:19:7d:ea:53:
fc:de:27:ce:e0:bf:da:ca:00:ae:6a:28:4c:a4:1e:
25:3e:c3:55:2a:a1:7b:f7:eb:4d:c2:93:55:28:a2:
16:f0:1c:15:46:0f:31:55:04:bf:a5:de:c9:0f:06:
8a:22:e5:00:ef:bb:6f:bf:33:ba:32:8d:bb:8a:00:
83:7f:9d:ee:d8:b0:37:1a:aa:44:2c:9e:01:fa:04:
05:42:ad:b3:ea:54:19:1e:1f:7f:1f:34:1c:3b:f1:
a1:f8:9c:19:71:79:b7:c7:71:e7:72:c3:c4:e3:f7:
38:8e:16:d0:be:77:19:aa:28:ac:82:4c:df:62:f9:
aa:c7:85:b9:11:28:99:ab:51:63:7a:36:84:c8:d0:
18:66:7b:a1:a7:66:b3:2a:15:80:26:ef:2f:93:93:
8e:f5:75:dd:b2:13:dd:75:5e:f7:89:9a:48:99:92:
64:26:85:56:78:61:0a:99:e2:af:9f:66:b6:15:ab:
6f:8e:c4:d1:c2:7b:cf:ae:6d:90:7a:79:2c:f0:a2:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:ED:0C:0B:F5:0E:C4:C0:B8:66:27:D7:44:1D:66:00:D3:F3:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0064d4ea-14db-3d5a-a491-f20bec3ca228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:bf:57:71:0a:4f:d6:76:de:0e:03:f7:9a:7f:0e:7f:5c:ae:
90:27:a3:47:66:65:b7:f1:09:00:c4:89:c8:02:e6:3c:10:55:
3c:54:6d:e3:c3:23:12:51:17:24:aa:d1:6c:09:16:1e:4f:15:
a1:21:54:70:2b:6b:7d:0f:a9:ea:5b:af:ee:57:a7:5f:a8:67:
81:ae:f2:27:90:58:16:f5:53:c8:f3:4e:cc:83:81:b2:42:1d:
3b:b6:41:30:f5:cc:99:93:a7:9b:9b:3f:8c:f0:59:f3:a5:d7:
50:71:94:23:47:a4:e7:e5:40:2c:94:0f:45:85:95:40:27:a0:
56:11:6f:09:63:98:db:12:53:20:53:bd:d0:ac:19:38:31:d5:
d6:f3:e5:5a:9c:a2:38:46:25:10:22:cd:9f:e2:7b:3e:26:ad:
05:d3:d3:90:4f:9b:16:9a:19:2f:9c:f6:91:58:a3:b3:72:57:
ad:70:cc:e9:32:44:55:5b:80:40:66:74:c3:a2:fc:4c:16:51:
0a:90:c7:66:cb:bd:a0:94:dd:89:ca:0b:b1:63:73:41:63:2d:
22:d6:2a:3f:28:99:45:ef:9b:32:89:bf:93:64:4d:90:61:f3:
fc:18:c7:d8:9c:b0:cb:90:8f:2b:23:cf:9c:cb:44:7d:85:30:
ed:36:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:47 2026 by rpki-client