
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa
File: ce8c9eee-e19e-3084-9874-4939fe74858e.roa (raw, json)
Hash identifier: bRuPTIg8ZUBCTE+Imt+r/crYErTYUUdbGwYWqCy1WTk=
Subject key identifier: 11:77:23:9A:55:95:FB:A8:FC:24:C8:89:F6:7A:02:D8:14:08:68:FB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584F49839673AE5B93E657167040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7155
IP address blocks: 99.197.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:83:96:73:ae:5b:93:e6:57:16:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b4331310-1972-46b3-a94e-502e7891c31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:90:d5:82:2f:ad:cb:aa:40:f5:a6:a7:0e:
f8:d5:7f:a1:53:4e:83:46:c8:4f:42:28:0e:76:c8:
e1:c6:2b:4b:90:e5:0c:8b:0b:4c:e0:90:d0:3f:6a:
c7:55:b4:66:bc:e8:09:be:cb:e0:28:7e:35:13:92:
ff:2c:0a:0c:8d:ff:b8:ac:31:d6:88:28:b3:72:fa:
37:a9:0c:39:46:83:72:3d:d6:51:15:fe:02:e6:5c:
31:ce:45:b3:ab:59:ac:f6:a6:a0:68:80:3c:6e:36:
57:46:a0:b6:90:d0:f8:6a:8b:38:4f:de:f5:ea:c7:
0c:fa:ee:9d:ea:05:ac:3c:de:e0:b5:48:6c:13:1a:
69:90:90:84:b6:e5:be:1d:51:0d:e3:12:72:56:f7:
f4:52:9a:85:7c:ed:8b:15:ff:2b:ec:f3:92:1b:8d:
7f:6b:1e:90:17:2f:81:5a:57:46:ba:64:eb:90:89:
c9:cd:f4:96:d2:db:d5:10:f5:dc:6c:f8:17:43:70:
e0:c5:df:88:94:ff:7c:44:4e:2c:9e:58:5e:f1:43:
2f:23:d4:0b:1c:60:3b:fe:e7:ab:6a:e4:e3:c0:84:
b1:2e:83:d9:86:a3:da:0f:c2:78:58:53:80:86:da:
46:de:cd:64:d7:c4:20:fd:9c:a2:ef:f1:50:32:7a:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:23:9A:55:95:FB:A8:FC:24:C8:89:F6:7A:02:D8:14:08:68:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8c9eee-e19e-3084-9874-4939fe74858e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:7a:7e:25:c8:16:d2:5b:a3:f5:a6:a7:84:22:7f:f9:3c:16:
6e:eb:4a:a8:79:73:36:be:7e:8b:28:6d:9e:e5:5b:06:bb:99:
81:67:41:80:d3:41:2b:fb:3e:37:b8:b4:e7:4b:e2:01:67:8a:
5d:54:f8:79:18:60:13:e1:03:d6:3f:8e:36:ee:e6:2d:fb:d6:
59:7e:be:3b:b2:e7:40:37:04:59:ff:5b:72:8c:ec:d7:6d:49:
02:a1:3b:18:e6:98:98:86:bf:0a:dd:63:c5:9c:ab:fb:dc:77:
a1:2e:46:a9:d4:3d:ed:28:3e:2b:47:ba:2b:d1:76:9a:c2:ba:
45:ee:ea:00:a0:89:29:1d:c1:3e:4d:bb:8e:7c:f2:bf:71:49:
6c:84:73:18:37:bf:ce:a7:30:03:8a:f7:e8:2c:6f:15:c0:21:
41:f3:7c:11:52:09:dd:75:f2:d1:7e:ca:aa:f7:a8:17:a7:3a:
99:c1:ab:4f:2e:2b:bc:38:cb:7a:5f:52:57:77:13:13:73:62:
45:08:52:e1:6d:e9:b6:56:bc:b8:0c:1d:b1:91:e9:1d:cf:8b:
f0:e4:0f:2a:3f:9f:86:ee:2d:50:43:ee:10:49:48:24:d9:a0:
a0:c4:e3:9b:42:32:73:67:cf:a3:ce:d8:e7:ca:d3:c3:12:2a:
ad:53:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:05 2026 by rpki-client