
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa
File: 8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa (raw, json)
Hash identifier: zD1zBYOfA9perM6B29fWkRMZnj5lSE+sMsWf+agEHMA=
Subject key identifier: 19:AD:49:D1:07:A5:D1:BC:D3:AF:73:C7:34:02:3E:C9:ED:AF:54:1C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F9ACFC1F5DD2D267F3000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.198.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:9a:cf:c1:f5:dd:2d:26:7f:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ecf3205f-d79d-496c-8266-f1f9fc9fed6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:84:ab:20:e7:2e:e1:e5:31:c7:19:ec:94:
9b:57:e2:7d:f2:25:a4:8c:dd:fb:ea:a4:07:ff:65:
02:e1:43:f5:bf:78:28:45:4f:1d:9e:61:b5:53:a7:
f6:70:ec:e8:b6:11:38:21:1b:79:83:6a:c4:e8:71:
04:77:85:d5:b0:56:13:3b:e0:18:b4:7a:e3:09:66:
a2:f1:e0:8e:55:ab:3f:19:30:73:cb:6f:13:ff:d4:
dc:e5:3f:f8:44:5e:a0:04:e2:dd:a2:cc:2e:df:59:
61:b7:af:db:28:6a:31:ef:29:f6:62:c4:fe:d7:d2:
fc:25:d2:ed:d0:b8:38:d0:07:b0:d3:52:42:f9:9f:
ec:92:6d:46:7b:96:fa:94:98:28:bb:51:26:b6:2b:
fc:29:14:5d:08:6e:cb:b6:d6:53:fa:a6:28:14:ce:
95:ac:0e:74:6d:e2:ca:91:dd:a9:b3:b8:6b:75:cc:
46:29:4b:0c:d8:0e:cb:a4:64:40:8d:c6:01:91:f0:
c4:72:15:a9:4b:26:d4:55:4c:eb:69:35:86:09:6a:
ef:35:6b:d8:c6:39:29:a4:09:4b:ae:45:7e:2e:55:
12:9c:69:7f:da:87:b1:22:46:94:8a:32:0a:32:6a:
80:60:5b:fa:60:f6:11:c6:a7:ef:95:0d:91:5f:33:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:49:D1:07:A5:D1:BC:D3:AF:73:C7:34:02:3E:C9:ED:AF:54:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f34fc7d-d61e-3cf3-817b-eb04f4475ded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:f3:e7:42:58:b5:4a:fb:46:09:30:d6:00:5a:f0:88:18:30:
78:b5:58:2b:5d:a2:08:90:43:ea:9a:86:90:77:ce:91:36:a1:
f0:4e:59:ba:cf:20:9b:cc:82:a5:98:2b:0a:9a:cd:72:b0:20:
ef:02:db:12:32:9a:34:91:1b:89:83:d3:09:24:db:ea:84:dd:
2e:8f:8c:17:7b:37:26:f1:46:da:e7:bf:8f:d9:e0:69:00:88:
28:cf:f9:1a:64:a6:b1:83:cd:dc:28:a9:34:b4:32:1e:ab:99:
06:5f:d7:a7:ba:fa:f2:73:a1:f2:24:a4:25:ec:7d:84:99:e0:
12:e5:89:55:35:d6:71:64:5a:3f:04:fd:ff:d0:6a:fd:4e:1a:
43:4f:a4:93:04:e4:9b:3d:fd:59:fa:ee:52:2b:04:03:d4:e1:
6f:9d:81:fe:ce:52:f6:72:8f:5a:86:c3:09:36:09:8a:c7:07:
0e:3a:be:f7:ec:25:f2:31:b3:5b:f2:d8:c8:9d:8a:16:1e:51:
0a:11:09:76:ca:c3:7b:a7:ed:7d:7b:1a:72:4a:cc:49:7b:ef:
01:ac:15:d6:7c:77:d0:81:fe:46:29:cb:74:3f:49:23:11:1a:
5f:48:d8:59:c3:ba:b0:28:b6:94:78:1b:1f:f3:98:5f:e9:34:
cf:f8:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:19:16 2026 by rpki-client