
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa
File: bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa (raw, json)
Hash identifier: VA97SloHEnv2gk6cseKG4jMgTkcp/zvnAJCyN6YJM24=
Subject key identifier: 51:05:D7:A6:A5:E5:2E:3B:CB:DD:6F:6D:AA:A6:38:29:4F:C1:BF:BB
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F4328584F74B82A9F4CF7C551B7FA7580
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa
Signing time: Sat 10 Oct 2026 13:00:13 +0000
ROA not before: Sat 10 Oct 2026 13:00:13 +0000
ROA not after: Fri 08 Jan 2027 14:00:13 +0000
asID: 1004
IP address blocks: 209.112.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:74:b8:2a:9f:4c:f7:c5:51:b7:fa:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Oct 10 13:00:13 2026 GMT
Not After : Jan 8 14:00:13 2027 GMT
Subject: CN=00ba77bd-9bff-4df2-ad8f-ab56a870eb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:2f:d7:af:0d:64:59:cd:a3:76:bf:6d:dc:
fb:d0:c3:08:50:d2:60:15:ff:39:67:c0:0c:29:f0:
a0:ab:10:05:8b:69:e9:13:f2:38:6d:9d:1f:1b:87:
bb:bf:fe:77:40:a8:5d:c7:ab:8e:86:f6:d9:82:ba:
35:17:b6:54:ed:1b:a9:cf:62:e7:6d:54:2b:65:d8:
70:be:b9:d3:a2:ab:9c:f8:66:50:d0:79:99:a2:58:
66:48:51:7e:77:ea:8a:f4:b5:98:5d:a7:e5:37:98:
f8:02:b7:40:ea:01:5a:32:14:76:27:d3:7e:fc:2d:
16:66:d0:23:5d:a4:ce:dd:b8:6e:02:3e:cf:4b:e0:
d9:0e:3b:96:82:42:71:a6:c6:e1:5e:4e:db:86:9c:
f8:85:ac:0a:1b:b3:64:4b:c7:dc:ac:76:40:37:b1:
a7:85:58:80:b2:c1:33:8c:dd:9f:d2:f7:85:26:e3:
51:37:6f:d7:66:a5:d2:fe:84:ac:71:80:a3:2b:28:
5e:fb:02:aa:98:de:44:0a:a2:12:30:0b:55:3c:ca:
a0:bd:1a:92:59:eb:cb:b8:15:b2:32:2f:ba:d7:74:
d1:37:cd:80:b0:73:ef:0b:39:a9:a6:c3:b6:dd:96:
43:56:72:2d:aa:24:f2:bf:2a:dc:68:b9:64:a4:56:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:D7:A6:A5:E5:2E:3B:CB:DD:6F:6D:AA:A6:38:29:4F:C1:BF:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:05:85:cf:fe:27:00:bd:ec:54:03:7b:6f:2c:e6:60:b0:08:
8a:f5:4b:d2:37:8e:24:f3:fc:09:e2:bd:cc:cb:b8:8c:aa:96:
92:cc:5c:14:82:a7:7e:4d:6e:9e:43:0b:55:28:3f:a6:9a:7e:
d5:d6:19:18:cc:f3:9a:1c:46:ba:7f:60:45:4b:59:6a:2c:6a:
00:7e:1c:78:10:6c:4c:34:86:77:df:83:f3:56:ff:15:27:9a:
74:e7:e5:a4:02:5f:18:29:44:6a:91:09:74:ea:9d:75:90:cd:
b7:99:0d:f1:7d:4d:73:fb:33:29:4f:b7:19:f0:52:ee:e4:3e:
03:6d:41:ad:bc:a0:bd:61:6b:fc:46:5d:db:0c:9f:6c:a8:ab:
e1:b2:ca:47:f4:f9:3f:af:f5:52:78:84:67:44:39:13:38:7f:
04:b1:f5:d4:11:ee:bf:5f:2e:e6:ec:f4:bc:eb:66:75:51:29:
df:1e:67:f9:b5:e7:f5:40:73:2a:84:c9:23:e5:37:76:1f:c9:
19:e3:68:e4:f1:61:66:92:88:6b:78:58:67:6d:6e:f3:11:f2:
73:1f:95:1f:d5:0e:5d:ba:3b:5b:a4:c4:fa:90:b1:df:7d:84:
e6:ac:f7:e8:b5:3a:70:d7:7b:58:f6:cd:10:c8:ac:69:d2:b4:
c7:4b:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:49:09 2026 by rpki-client