
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
File: 3f73f6be-cbc3-3833-b4a1-533442804977.roa (raw, json)
Hash identifier: +qO2tKJPi8mPH6qBe735b/9NW8BCy5I0H5r5hUAkFxg=
Subject key identifier: 67:F9:B1:9A:41:7D:CA:E1:D2:77:49:1B:4A:A0:83:BB:74:6B:36:3B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584B64CDB7F56887395C400BF640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
Signing time: Fri 03 Oct 2025 01:00:32 +0000
ROA not before: Fri 03 Oct 2025 01:00:32 +0000
ROA not after: Thu 01 Jan 2026 02:00:32 +0000
asID: 7155
IP address blocks: 99.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:cd:b7:f5:68:87:39:5c:40:0b:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Oct 3 01:00:32 2025 GMT
Not After : Jan 1 02:00:32 2026 GMT
Subject: CN=0052cbc4-b285-4d22-aa3d-794bb7d0d225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:a3:c4:e7:8a:81:b5:60:1d:07:fb:3e:26:
be:cb:1d:60:29:1a:81:5f:e3:fc:f4:ca:e3:51:44:
c3:e0:7f:e1:f8:b4:10:94:99:4d:94:a2:66:1d:d7:
22:6a:e7:78:39:fb:6b:51:dd:8d:81:2e:25:fd:5f:
99:69:72:2d:30:b7:5a:d0:1d:7e:57:42:a5:af:39:
db:5a:70:fa:47:b6:31:0c:9f:3f:46:ec:3d:58:f8:
71:e8:af:40:13:f1:a1:4e:77:95:18:6f:2f:16:97:
79:7d:e6:0a:9d:8a:bc:10:7e:99:90:f9:78:db:1b:
ac:11:48:42:37:3f:31:20:2d:72:f8:bd:1d:05:fc:
dc:03:e3:53:f3:40:54:95:4a:cf:da:c6:48:73:f1:
05:57:f9:3e:bd:eb:11:66:b1:67:4a:23:22:9a:96:
cc:f3:79:eb:cf:4d:28:99:4f:8f:7f:0a:16:b5:95:
0a:ae:5c:63:f9:05:22:3e:7a:51:86:a5:02:6a:e9:
48:70:84:f8:6a:73:69:d2:6b:99:09:35:5d:a6:bb:
14:cf:7e:44:67:00:b3:92:92:24:dd:71:7f:c1:17:
13:ba:09:26:79:93:c5:be:ec:47:6e:43:04:2e:27:
42:db:aa:d1:74:25:29:7f:57:cd:a7:16:22:84:b0:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:B1:9A:41:7D:CA:E1:D2:77:49:1B:4A:A0:83:BB:74:6B:36:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f73f6be-cbc3-3833-b4a1-533442804977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:6b:45:2d:00:ff:fc:90:c9:75:c3:26:a1:13:18:88:d1:e5:
16:4e:50:da:aa:73:a3:5c:b0:28:0f:73:da:c3:8a:b6:62:1d:
9a:5d:90:0a:65:03:5e:9b:83:ba:35:36:b9:ea:85:4d:01:e3:
92:06:2d:40:36:36:83:40:b8:47:6e:75:7a:85:2c:48:0b:fd:
30:59:30:93:e1:66:9e:49:ba:b9:0c:3f:ce:48:a9:d1:0e:c7:
1c:ee:cc:96:4b:86:9a:49:7d:92:6a:19:85:6a:67:90:16:07:
40:17:68:de:81:4d:26:19:f9:d2:4a:ca:6f:c3:bf:c5:46:f0:
86:ce:3a:0a:71:17:df:94:8e:1a:d9:1f:3b:3d:6e:98:71:68:
c2:6f:84:73:4e:7c:c2:16:c0:a7:3e:ff:c2:2d:0f:43:d0:e2:
64:0e:8d:98:b0:1e:63:e2:46:97:1c:2f:e2:1d:44:30:83:22:
17:40:b0:50:8d:75:c9:4f:70:04:55:bd:40:d3:73:90:c1:bc:
03:e0:dd:44:18:01:ec:ef:fb:11:f5:83:31:8f:c6:82:83:b3:
61:02:5c:ec:3a:0b:1e:54:8f:88:05:7f:28:f6:17:73:aa:3c:
a4:ee:af:f4:40:7d:28:f3:16:ab:ef:29:62:8f:23:74:f6:2e:
1a:d1:86:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbf1aIc5XEAL9kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDA1MmNiYzQtYjI4NS00ZDIyLWFhM2QtNzk0YmI3ZDBkMjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAujxOeKgbVgHQf7Pia+yx1gKRqBX+P89Mrj
UUTD4H/h+LQQlJlNlKJmHdciaud4OftrUd2NgS4l/V+ZaXItMLda0B1+V0Klrznb
WnD6R7YxDJ8/Ruw9WPhx6K9AE/GhTneVGG8vFpd5feYKnYq8EH6ZkPl42xusEUhC
Nz8xIC1y+L0dBfzcA+NT80BUlUrP2sZIc/EFV/k+vesRZrFnSiMimpbM83nrz00o
mU+PfwoWtZUKrlxj+QUiPnpRhqUCaulIcIT4anNp0muZCTVdprsUz35EZwCzkpIk
3XF/wRcTugkmeZPFvuxHbkMELidC26rRdCUpf1fNpxYihLB5rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf5sZpBfcrh0ndJG0qgg7t0azY7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y3M2Y2YmUtY2JjMy0z
ODMzLWI0YTEtNTMzNDQyODA0OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8ROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJrRS0A//yQyXXDJqETGIjR5RZOUNqqc6NcsCgPc9rDirZiHZpdkApl
A16bg7o1NrnqhU0B45IGLUA2NoNAuEdudXqFLEgL/TBZMJPhZp5JurkMP85IqdEO
xxzuzJZLhppJfZJqGYVqZ5AWB0AXaN6BTSYZ+dJKym/Dv8VG8IbOOgpxF9+UjhrZ
Hzs9bphxaMJvhHNOfMIWwKc+/8ItD0PQ4mQOjZiwHmPiRpccL+IdRDCDIhdAsFCN
dclPcARVvUDTc5DBvAPg3UQYAezv+xH1gzGPxoKDs2ECXOw6Cx5Uj4gFfyj2F3Oq
PKTur/RAfSjzFqvvKWKPI3T2LhrRhok=
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:07:40 2025 by rpki-client