
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
File: 7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa (raw, json)
Hash identifier: 101p8pLQNa1wDSKrstjUwDbXaPoCiZEymCw6nM3WPEg=
Subject key identifier: 03:D7:D5:22:2D:73:34:F1:E1:55:24:D9:61:F5:0B:92:F8:1D:61:1B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584D24E094ED614BAA5EBCFB0458
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 7155
IP address blocks: 99.196.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e0:94:ed:61:4b:aa:5e:bc:fb:04:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=84e7f843-3fd4-4a48-8df0-12fac4d955ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:5f:b5:0a:58:b8:6d:94:4f:0c:be:fd:bf:
f9:cd:98:31:19:d9:d4:7c:5a:1b:1f:3c:86:15:a9:
f2:d2:bb:5a:43:19:62:e0:d9:c0:b9:4d:39:76:c0:
1d:83:34:f7:52:67:4e:e4:53:44:d3:7d:e0:bf:f3:
3d:aa:9b:32:a2:5b:6b:de:a6:67:90:a1:95:be:02:
ad:e5:fc:22:4c:e9:8d:3b:61:be:73:56:c6:e5:84:
e9:35:b6:2c:51:10:83:e4:02:dd:d8:04:1c:8a:0d:
54:b1:0e:58:7b:b4:fe:44:60:c6:a5:e3:ce:00:e2:
4a:85:36:a1:60:1a:a3:63:69:a0:aa:8c:4b:2b:97:
29:ca:e8:63:1f:3d:33:e4:bf:cd:eb:09:43:d2:4f:
93:77:24:92:dc:5a:b3:a5:f1:2d:4d:8b:40:d7:6d:
90:ed:69:00:2b:6c:c7:04:63:0d:ea:04:4a:ac:9f:
c2:23:34:55:0e:48:85:6e:06:df:56:5e:1e:ab:7f:
52:9a:c7:f2:eb:9d:cf:6a:b5:6c:ee:65:77:e8:7f:
7d:bf:1c:7b:65:6c:91:e8:e1:35:46:56:fa:9d:16:
b8:90:34:79:00:76:d0:f7:a7:d5:f8:37:47:ac:8f:
d7:99:bf:b3:31:cc:1b:e7:4f:60:39:0e:9c:fc:70:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:D5:22:2D:73:34:F1:E1:55:24:D9:61:F5:0B:92:F8:1D:61:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7111cf17-6b3a-354a-81ce-2b231a72d5a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:64:90:de:ea:c3:3e:09:2f:a8:8e:1e:97:8c:0b:99:94:a5:
50:15:d0:92:ff:1c:56:dc:c6:34:33:5e:7f:1b:c1:b3:fa:48:
11:6b:81:34:9d:8a:d9:5e:a8:91:1d:e0:cd:69:8e:c0:e0:db:
33:35:0b:b7:d5:94:43:7e:73:ab:fb:19:92:a1:96:eb:f7:83:
c5:d4:a7:ba:0f:b9:5b:a5:23:b3:a3:75:fe:90:19:9c:4e:72:
5e:17:41:88:5f:f0:10:57:b1:ab:3a:d8:19:59:dc:8a:4f:2b:
d0:b5:6e:17:54:0c:17:4c:ee:1a:63:7f:c4:05:38:49:1c:d2:
85:3c:c2:74:3f:06:2b:2c:20:50:15:16:4a:ea:ac:5b:45:1d:
27:1d:65:fe:13:0c:11:5f:35:27:07:d7:59:78:b5:44:1a:b1:
48:79:38:92:11:a6:95:2c:42:3d:e7:9e:8e:09:32:79:22:af:
d6:40:c4:2a:eb:5a:b7:d0:14:ae:b0:18:e6:71:03:7b:a6:bd:
cf:3d:30:5f:a8:1d:7a:9b:a6:37:31:1f:01:9e:1c:13:5f:a5:
a4:89:f5:01:fd:b1:22:85:70:65:0b:60:8f:ab:5b:4e:3c:3e:
3e:8f:fe:1e:59:a5:5a:03:c7:99:39:ce:93:50:8e:e6:7e:2d:
fb:38:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:24 2026 by rpki-client