
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa
File: ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa (raw, json)
Hash identifier: PiKcmWivrIAw82dqKad3dP7+4JVgGOuC8GRMH7BNtBc=
Subject key identifier: DC:7D:C3:E3:B0:1D:44:72:01:0D:C8:B3:D9:DE:EA:F0:85:73:64:1E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79DE4B3E82CC9E089FDC300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 99.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:e4:b3:e8:2c:c9:e0:89:fd:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e91f3d78-f5b4-419e-8fa0-9fd770fc9b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:a5:b5:75:24:38:56:18:17:11:e4:be:82:
07:45:c7:9a:87:3a:08:db:82:a0:d5:22:db:a7:5c:
0c:c9:6c:c5:a7:3e:e2:d3:63:86:e3:ff:bd:ea:81:
bf:0b:09:15:82:ed:f9:f1:44:40:33:4c:5b:a2:c3:
62:6f:40:d6:e0:7b:48:27:67:a2:7b:12:09:41:f6:
73:82:f7:a2:c8:35:7f:c0:10:4d:69:cf:f5:61:c6:
79:c5:6c:ba:39:3d:51:c8:f3:13:26:4c:61:96:8b:
85:da:e5:89:9a:fe:e5:05:02:3b:99:76:ac:79:22:
33:77:fe:dd:1a:04:68:4e:23:5a:1c:a8:a9:76:dc:
33:dd:34:af:d7:0c:9c:2b:21:c4:5d:25:83:33:fe:
58:1c:b6:53:43:3c:03:1a:9f:fb:49:06:87:17:46:
de:c5:63:55:9d:60:8c:e4:b7:91:b7:55:ec:c6:bf:
a2:d1:8a:66:72:92:f1:9f:72:7d:fa:70:71:14:ea:
ce:23:a2:f3:91:60:16:fb:37:eb:2c:3a:89:d7:0f:
e8:7b:cb:aa:7b:0e:80:86:da:e3:55:15:12:9c:7d:
8d:8f:65:af:98:8e:70:22:22:c5:94:ea:34:12:d0:
51:7e:f9:bf:89:47:88:f2:23:ba:32:08:3a:8a:c9:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:C3:E3:B0:1D:44:72:01:0D:C8:B3:D9:DE:EA:F0:85:73:64:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad260ea3-35b6-3aa3-b34a-31f05aed6991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.196.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:f7:d0:ed:41:c7:fa:cf:5e:c1:e7:0d:dd:79:ba:ac:b1:33:
48:b1:e2:c9:8f:85:39:72:ac:44:39:74:6b:b4:44:0c:1d:2f:
32:9f:07:d2:3c:dd:1b:a9:31:ef:f0:b7:cb:87:b1:00:e3:0f:
d2:34:1a:b4:04:20:29:5a:48:60:f4:72:8e:0f:3f:83:2f:07:
64:51:6a:0c:9d:b3:ee:3c:df:79:66:a7:25:cb:b9:a5:79:81:
0d:54:d0:7b:44:b3:14:96:1d:64:d9:57:0b:9a:bd:8e:0f:a9:
3f:07:d3:ef:c0:e9:95:c1:8f:fb:36:68:b8:2d:74:8d:58:f7:
55:86:b9:25:c7:44:0d:66:a3:cf:8f:95:f0:63:c6:0f:5c:73:
cf:a5:a2:dd:44:b6:cf:03:b2:38:2f:f9:7d:c8:9b:15:b6:b2:
5a:d6:e4:c1:20:58:91:56:ec:59:6f:fd:5a:fe:77:cf:96:97:
79:22:c7:6b:bf:55:ec:1f:7c:3b:f7:42:74:75:20:42:f1:3a:
36:a6:60:5f:66:f8:e1:ad:c1:46:8d:aa:90:8f:b8:0e:47:e3:
10:cf:00:49:62:bf:84:df:90:ed:cc:44:4b:1e:90:ed:b1:a0:
5b:52:f0:b5:af:28:1c:ed:18:27:d7:6e:61:55:8f:6b:22:a7:
47:4c:25:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nneSz6CzJ4In9wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTkxZjNkNzgtZjViNC00MTllLThmYTAtOWZkNzcwZmM5YjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/6ltXUkOFYYFxHkvoIHRceahzoI24Kg1SLb
p1wMyWzFpz7i02OG4/+96oG/CwkVgu358URAM0xbosNib0DW4HtIJ2eiexIJQfZz
gveiyDV/wBBNac/1YcZ5xWy6OT1RyPMTJkxhlouF2uWJmv7lBQI7mXaseSIzd/7d
GgRoTiNaHKipdtwz3TSv1wycKyHEXSWDM/5YHLZTQzwDGp/7SQaHF0bexWNVnWCM
5LeRt1Xsxr+i0YpmcpLxn3J9+nBxFOrOI6LzkWAW+zfrLDqJ1w/oe8uqew6Ahtrj
VRUSnH2Nj2WvmI5wIiLFlOo0EtBRfvm/iUeI8iO6Mgg6iskn3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNx9w+OwHURyAQ3Is9ne6vCFc2QeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQyNjBlYTMtMzViNi0z
YWEzLWIzNGEtMzFmMDVhZWQ2OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEf30O1Bx/rPXsHnDd15uqyxM0ix4smPhTlyrEQ5dGu0RAwdLzKfB9I8
3RupMe/wt8uHsQDjD9I0GrQEIClaSGD0co4PP4MvB2RRagyds+4833lmpyXLuaV5
gQ1U0HtEsxSWHWTZVwuavY4PqT8H0+/A6ZXBj/s2aLgtdI1Y91WGuSXHRA1mo8+P
lfBjxg9cc8+lot1Ets8Dsjgv+X3ImxW2slrW5MEgWJFW7Flv/Vr+d8+Wl3kix2u/
VewffDv3QnR1IELxOjamYF9m+OGtwUaNqpCPuA5H4xDPAEliv4TfkO3MREsekO2x
oFtS8LWvKBztGCfXbmFVj2sip0dMJSE=
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:43:09 2026 by rpki-client