
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa
File: bfa85c3a-da14-3b0f-85f0-747d639f186d.roa (raw, json)
Hash identifier: rxIbhIMLg1YAQaLydi21TdfwunNTdf/N9Pj28CihSj8=
Subject key identifier: 54:B4:87:57:8B:FC:DA:43:45:85:6F:67:AA:05:C3:8E:12:54:21:8B
Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial: 010D0C9F4328584D0D9B70FE549149077E0982A0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa
Signing time: Wed 04 Mar 2026 05:00:17 +0000
ROA not before: Wed 04 Mar 2026 05:00:17 +0000
ROA not after: Tue 02 Jun 2026 04:00:17 +0000
asID: 29873
IP address blocks: 66.235.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:9b:70:fe:54:91:49:07:7e:09:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Validity
Not Before: Mar 4 05:00:17 2026 GMT
Not After : Jun 2 04:00:17 2026 GMT
Subject: CN=9d080e7c-40d4-421d-84f9-955c54b3b1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:70:88:f5:73:71:a8:1f:4f:9a:c1:18:1a:
ae:60:75:69:e1:ee:07:62:28:d1:23:ba:9e:fb:38:
05:ae:6b:1c:69:b8:6b:b2:e8:d5:b1:95:96:47:d1:
81:21:f0:be:dc:99:fe:0b:ce:95:d9:15:e7:34:17:
71:49:61:31:c0:fd:7c:9b:09:71:a9:55:b4:27:cc:
61:77:c5:b9:3e:e9:5e:41:e7:d6:83:9b:f0:3f:04:
54:d0:83:32:21:32:c3:9a:4d:c0:ad:a0:19:30:d5:
f0:71:48:1f:21:a5:f3:62:b6:d9:d9:2f:65:60:f8:
34:e1:59:c8:96:b0:81:11:6d:bc:df:7f:32:8c:3a:
d4:d7:ef:18:79:a1:c1:b6:3f:cf:01:80:86:0a:68:
3e:ce:7c:be:2e:5c:9c:49:79:d3:89:4d:ad:d9:97:
63:02:b1:98:0d:93:9e:e3:d6:f0:bd:8c:23:78:46:
7b:e9:d5:3d:1e:a7:79:fe:b7:91:ef:be:0a:93:0a:
c3:07:c3:00:a1:a7:d2:53:5c:21:e5:56:39:55:67:
33:c7:3a:6a:06:8f:8e:96:6d:0e:b5:86:54:a8:67:
ae:b4:b8:65:02:ac:74:06:f1:d8:2d:f5:a7:6d:42:
2b:5c:c8:a7:89:5f:87:6f:36:b1:75:d7:43:2e:4d:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:87:57:8B:FC:DA:43:45:85:6F:67:AA:05:C3:8E:12:54:21:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/bfa85c3a-da14-3b0f-85f0-747d639f186d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
X509v3 Authority Key Identifier:
keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.235.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8c:f7:22:c0:c7:a4:ec:42:d1:85:c8:3d:7c:1b:9e:5a:67:
b5:60:26:f0:c8:73:fb:b1:4a:bd:f1:b7:d0:29:d3:c9:75:32:
b1:7d:81:54:96:14:de:3b:49:5c:79:cc:70:af:b5:2f:71:fa:
d9:b0:4a:3d:86:b1:bf:40:86:ac:d5:80:58:ca:5f:51:e4:3d:
59:7e:3a:f9:9a:2c:18:aa:35:7d:a0:a2:b5:f3:0e:f6:97:d4:
2b:e5:1b:f0:f4:54:e3:1f:76:1c:cf:e3:b4:fe:12:d7:e2:17:
42:a4:af:0c:95:b9:a2:18:a4:97:b3:49:e7:aa:dd:5e:d1:38:
b2:b7:15:0d:01:71:0b:ae:59:88:71:55:eb:7d:72:bd:60:8d:
36:86:6c:c6:37:18:e4:ec:6f:48:1d:db:0f:8f:e2:4b:c1:e4:
bc:2a:7f:1a:94:b8:55:4d:9c:3c:00:a0:a0:54:46:79:96:d3:
96:ec:35:8f:02:38:9d:26:49:76:79:79:20:89:75:e3:0a:fa:
65:32:c7:aa:02:50:b9:bd:b2:c0:2a:c7:03:3f:fb:c4:43:d1:
73:7d:e7:23:f7:4a:ac:8e:63:06:c0:c4:a3:c7:ab:b5:6c:cf:
2b:0a:69:b9:1e:13:6b:d1:8e:6d:69:a2:a9:f1:45:5f:db:ea:
1d:0b:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:31:15 2026 by rpki-client