
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
File: 2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa (raw, json)
Hash identifier: 4qc1xVTM29/VWgXf0ItLtybkVgcCN4nKs0aYSxLM3g8=
Subject key identifier: 68:D8:D5:2C:C2:05:9D:65:88:65:A7:8D:53:32:CC:D0:1E:46:59:2F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CD0E3125896AF77C583450
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 99.198.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:0e:31:25:89:6a:f7:7c:58:34:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=5ea086a5-21e7-43d4-a05b-74c48ad2491c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:ad:4b:48:50:b6:35:a6:4b:a0:ea:14:93:
2d:96:36:5a:df:e9:15:7b:15:87:7b:16:97:5d:13:
e9:80:b4:77:ab:3c:0a:8b:f3:3b:50:04:01:7d:bb:
da:79:7a:7f:8d:ab:57:a7:bd:b5:9b:96:d0:7a:ec:
e1:68:4c:a8:27:f2:e2:21:99:4c:49:6c:be:b8:08:
cc:d3:87:9d:4d:ec:7c:a9:7e:fa:92:77:9f:13:e2:
d6:cf:4d:fe:d1:23:18:38:51:23:cf:1f:20:b2:de:
ff:a6:11:e2:d9:b7:ab:01:8b:7f:c2:03:7b:6f:a4:
64:00:81:0b:77:10:33:76:60:6d:a3:3f:3a:de:48:
25:12:3e:45:b0:4a:a8:f0:47:21:78:15:9e:58:67:
26:b0:f6:2c:11:c1:6b:2e:89:62:4f:53:a5:e2:9c:
f7:76:4b:9a:97:30:a5:97:a3:b5:58:f3:f9:b8:91:
9d:6a:e7:14:7c:49:30:b7:15:d9:90:e9:32:84:f1:
df:a6:91:c0:9e:0a:75:9f:07:77:3e:e3:b6:1b:a6:
c9:a9:91:9b:84:14:b1:02:d1:84:b0:f9:40:20:0c:
7f:fe:54:03:97:9f:97:2c:9e:50:59:8a:02:02:00:
33:b6:d4:ca:34:40:c9:ce:88:f0:d4:24:75:4c:4d:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:D5:2C:C2:05:9D:65:88:65:A7:8D:53:32:CC:D0:1E:46:59:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:f0:48:da:d0:be:96:2a:20:1b:41:24:64:29:e0:3b:7a:94:
63:9c:6b:eb:4c:db:8b:f2:0f:34:53:ae:96:f9:5c:b8:1a:69:
fb:e8:e9:70:54:20:0c:a8:08:c8:7e:e0:c4:34:4d:0b:6f:f2:
ad:46:56:ea:f0:c2:28:e2:f8:e8:38:0b:d0:d3:53:7b:74:a5:
de:1d:c9:9d:0a:28:90:3f:c0:c4:63:87:e9:81:2d:2c:c0:f6:
eb:b3:37:93:d5:5d:0c:43:07:28:a9:d8:35:13:d1:17:1d:17:
56:83:c6:a9:68:69:41:95:95:e4:9b:bd:8e:44:53:c3:b2:b3:
3a:0f:a6:2d:05:54:ae:4b:b7:e3:dd:1e:81:68:82:db:9c:a6:
d7:5f:91:14:df:61:00:7e:10:27:88:0b:ae:52:b3:f7:86:d7:
86:8b:e7:4f:05:2c:e9:96:1d:e6:70:47:ed:62:82:2e:75:23:
68:b9:35:ce:19:e7:44:d5:77:aa:df:b2:0b:33:93:1b:f1:70:
b9:df:d5:70:f7:82:9b:c3:a5:d7:a4:4c:e7:72:5c:81:6e:bf:
0a:3f:1a:c0:f9:03:60:5a:41:6f:50:9f:59:51:e9:b0:24:a9:
74:4c:ed:1e:3f:0a:5c:30:01:22:c8:2e:be:12:f4:d3:98:68:
f4:9d:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:58:22 2025 by rpki-client