
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa
File: bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa (raw, json)
Hash identifier: 65nladoqeiDVKuoZOvKTuNDUKACnsrxNhCpSxxWH2zI=
Subject key identifier: 37:2E:28:01:A3:B5:43:9B:54:FF:97:4E:4C:D7:E6:43:B7:3E:78:2C
Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial: 010D0C9F4328584D932549BABEAF817CEEA1AC80
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 2711
IP address blocks: 64.84.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:49:ba:be:af:81:7c:ee:a1:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=c5ffd44e-de37-4230-bd4c-9b759b485756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:96:4d:23:e1:ff:2a:9d:2a:f2:76:09:79:
b7:97:a7:52:be:46:78:9d:dd:90:9c:8a:00:8f:a4:
21:85:8a:de:a9:a2:14:ed:34:81:cc:5c:f0:d3:60:
43:94:59:93:e8:44:6d:8a:c3:6e:01:77:d2:d4:6f:
aa:b6:15:04:d3:88:dc:01:18:15:f1:01:e9:06:4a:
fa:6c:b1:f4:3a:a3:38:e7:4f:b4:f3:ec:60:59:b3:
78:92:14:78:6e:06:28:77:16:99:06:0a:d4:34:8b:
ff:96:b7:d3:36:93:ca:15:ff:e0:26:31:7c:4d:c6:
11:8f:e5:5e:43:a9:41:a2:44:1d:20:c0:05:71:7b:
fd:83:ea:1d:64:88:04:76:60:01:45:36:f3:fc:24:
7f:11:76:af:cd:44:2d:f1:f6:d4:67:c5:a7:d6:de:
8b:e5:e6:82:c0:f3:61:d6:fc:c8:92:04:13:bc:91:
f9:13:71:93:9f:85:35:52:4b:2f:b5:25:b2:ed:1c:
9b:ef:f9:57:f2:a3:37:d7:c2:19:20:41:1e:22:77:
57:02:ab:4d:ad:ce:58:d1:32:ba:ae:d2:81:30:6f:
e8:bd:d5:b2:88:85:79:86:94:d5:cf:be:ea:23:3d:
b9:94:da:5f:3e:29:2f:d6:c1:d5:82:c9:52:12:0e:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:28:01:A3:B5:43:9B:54:FF:97:4E:4C:D7:E6:43:B7:3E:78:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
X509v3 Authority Key Identifier:
keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:07:e2:24:87:b0:dd:c5:80:8a:85:95:2f:82:2a:9a:54:9f:
d4:5d:f3:42:69:4a:12:96:44:54:7b:ab:27:a5:49:ec:d3:a7:
76:fc:8d:e6:00:7c:04:39:ab:8f:5e:9d:16:c3:8f:49:54:40:
a3:6e:59:10:83:76:64:09:9c:6c:bd:7b:44:a4:cc:65:e2:bc:
9f:c0:73:25:fe:ec:c5:d3:e9:06:79:a7:8a:5c:cd:2b:d9:19:
91:c7:d9:2e:8e:84:9c:ab:bb:f8:32:40:3f:49:23:fc:54:8f:
5e:e4:e3:11:e3:2c:d4:09:ba:3b:a6:d1:e4:66:c5:29:6e:76:
34:39:e4:c1:d6:43:96:3f:ce:e3:84:cd:85:c0:04:57:a9:21:
de:3f:83:76:96:7c:6a:13:ed:6e:0b:8e:16:bc:1e:e9:72:ca:
3b:26:95:81:b6:d0:04:2c:57:65:a7:44:a6:cb:5e:7a:d8:05:
d6:ab:ab:02:26:2a:1e:20:2c:c7:09:b7:c7:94:0c:db:9f:ad:
ba:a4:81:60:12:ad:9b:a0:bb:e5:80:97:b1:ea:09:25:fa:32:
b6:9d:7b:08:e5:e6:92:a1:9b:21:c9:7c:8d:0f:5c:4b:2d:5b:
57:aa:ed:1d:26:c1:e4:a3:4b:3d:c3:d4:ac:5e:ac:52:b2:af:
68:92:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:36:53 2026 by rpki-client