
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
File: bfb03a9d-6724-3257-b89f-a663facf63ac.roa (raw, json)
Hash identifier: e+gAQkUYFYzMYmYkHPvKwntvXHm8ptwTvBe8v8KF7+Q=
Subject key identifier: 30:26:F7:BE:BA:2A:01:AD:44:AF:FE:E4:0E:DA:6D:9F:B7:B5:66:8D
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F4328584D1B1A0CD049E6508C4F790500
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 50304
IP address blocks: 172.84.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:0c:d0:49:e6:50:8c:4f:79:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=c30fc0c5-c8da-4595-9f8a-562cc143b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:b9:36:32:89:f5:10:86:e6:2c:21:1d:73:
e5:3b:21:48:1c:77:08:dc:cb:b2:8a:a9:46:10:95:
5f:ae:0d:4e:bb:5e:6b:c9:9f:85:c5:67:89:7c:90:
d9:a2:1c:9f:39:20:23:13:f1:07:17:65:3e:47:15:
60:a4:ea:1b:0c:de:9b:b2:cb:8b:49:d9:33:3c:33:
3b:f0:70:84:22:a5:ad:dd:4f:1e:e6:3e:fe:ac:46:
ec:13:a6:0d:b2:c5:f1:45:6a:ee:69:fc:13:1e:8b:
2c:7c:a9:81:5b:68:68:62:70:9a:3a:98:1f:77:d0:
76:cc:28:c5:f1:c2:12:47:ae:b2:ba:0b:2b:0c:2d:
1a:f3:cc:b4:8b:b9:eb:b5:74:d7:e2:58:de:8f:11:
ac:0c:3b:71:85:c5:38:c0:7f:9e:82:32:32:b5:9c:
ac:fb:69:90:57:84:e9:e9:c2:8b:dd:a0:f1:4e:aa:
f9:f9:80:cc:89:a0:9c:4e:c8:e4:3a:b6:3b:c5:79:
63:97:f2:69:c9:c2:6e:29:52:16:a9:ad:d2:9a:05:
1e:eb:69:0d:2f:ad:47:3d:0f:9b:5a:c9:5e:a3:94:
fc:91:ca:f9:e8:bd:ae:b0:64:69:cb:49:7a:cc:ec:
27:a2:4f:84:e8:8f:d2:cd:b7:aa:74:c1:09:5c:46:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:F7:BE:BA:2A:01:AD:44:AF:FE:E4:0E:DA:6D:9F:B7:B5:66:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9c:dd:82:4f:cb:9d:fa:f4:ba:45:27:c6:f5:34:9d:65:11:
93:e8:14:ad:1a:0f:f9:26:26:53:57:ce:f3:4f:a8:bb:4a:47:
34:52:e0:42:8f:4d:cd:26:07:19:d0:c1:af:a6:f1:0e:3c:55:
6f:81:f1:93:c1:d1:aa:23:0c:7a:3e:79:a7:70:17:31:66:35:
d3:d6:8f:f5:7e:72:cb:73:82:ca:75:db:ee:0b:cb:be:14:4f:
3b:d2:9c:f3:59:a9:a1:a4:2b:e1:fa:07:86:6c:f5:00:7c:74:
f4:70:0d:af:0c:f8:3c:78:95:10:ff:f3:9d:9e:c7:97:ee:e8:
c8:95:fb:6b:54:0c:26:11:5c:75:8a:4e:0b:16:80:29:09:a2:
f0:b6:6f:2a:c8:9b:59:16:dc:a5:a5:52:c0:18:13:17:b6:06:
af:7f:0d:ff:33:4f:c1:7d:be:0b:25:b5:9c:88:44:e3:54:b0:
dc:f2:b8:ab:d2:0b:56:21:db:e9:7c:5e:b2:64:ac:d9:9d:46:
d9:4d:7c:3b:b5:28:92:a8:29:b7:d8:3a:6d:db:5b:e1:38:78:
48:3e:d2:83:7c:0d:56:40:8d:e2:0c:0c:38:ed:e6:5d:4b:27:
be:83:be:a7:45:51:53:63:e3:f0:69:7f:bf:56:d7:55:33:07:
d7:94:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 15:48:44 2026 by rpki-client