
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa
File: 5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa (raw, json)
Hash identifier: o1Aq/h+w7ykPdzNQ0a5juCFSDvnOWp75kFzczsHaTUU=
Subject key identifier: E8:B3:F2:5F:E3:84:E5:F8:1D:B6:89:1D:F9:57:40:7A:0B:5D:2E:81
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584F498836F8ED8CF0DF0895CAC0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 14618
IP address blocks: 129.77.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:36:f8:ed:8c:f0:df:08:95:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=13652144-9c00-4694-8315-93f38973e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:53:28:d8:61:bb:c9:62:b8:05:81:e7:92:
84:2b:ae:a8:25:b0:b2:0c:e8:01:77:3b:6b:b2:a2:
29:57:8b:10:1b:ca:34:e4:1e:08:ad:ee:ff:d4:e8:
bd:bc:ab:5a:8d:fa:21:1f:95:8b:c7:d7:72:c5:03:
26:f7:4f:e5:8d:0a:f0:bc:81:df:b6:a4:a4:5a:1b:
69:52:ec:d4:a6:cf:63:00:be:0a:38:9d:50:a1:f3:
1e:ca:c2:2c:0f:81:e6:06:e3:d6:02:69:16:20:f5:
ac:42:94:72:74:e1:81:4b:56:13:fd:47:30:64:ba:
64:ef:a5:cd:5b:8f:9c:c3:6e:53:27:85:15:10:74:
85:12:a0:a8:06:91:5e:5b:3b:20:bf:27:ae:cb:05:
30:55:19:f1:db:08:02:28:cc:f5:38:32:d4:4a:bd:
63:09:3a:1e:7a:92:50:cc:3b:67:43:5a:42:ca:4e:
73:95:ba:f2:fd:51:bc:50:87:a7:32:b6:76:f9:9a:
46:59:12:41:35:00:50:d3:6f:d5:e6:4b:c0:08:d4:
16:7c:7b:f2:05:73:ab:3a:9c:a9:6a:9c:61:c3:21:
8d:d6:36:f6:ed:44:3f:a9:a6:77:b5:5d:13:a4:a9:
e7:49:b4:63:de:7a:6e:1f:ac:09:ff:82:06:0c:9f:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:F2:5F:E3:84:E5:F8:1D:B6:89:1D:F9:57:40:7A:0B:5D:2E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.77.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:dd:f2:7f:98:37:da:8b:ee:3e:c8:2a:a1:95:8c:e5:48:fd:
6d:70:3e:de:df:bc:90:fb:51:a5:c9:3e:ad:64:88:8b:1d:84:
a3:08:be:51:4e:e6:59:ee:e6:63:a5:e1:2b:2b:8b:bf:7c:8c:
43:4f:7d:54:10:17:b2:17:ce:09:97:20:a7:d3:c2:78:0a:51:
10:79:fd:9c:db:b3:ee:68:08:04:86:59:87:21:b8:ba:20:b5:
89:40:e9:8c:0f:7d:8d:ae:ea:44:40:dd:a7:28:c2:8b:32:30:
a9:79:30:cf:35:54:17:39:df:45:6a:a9:ab:bb:72:17:57:21:
37:7d:0a:84:27:3c:50:cf:38:7c:31:84:02:b2:53:54:ac:e3:
a9:88:6c:ae:bc:3a:83:7e:0e:40:58:59:d2:12:6f:a5:c6:5f:
7c:f1:15:43:59:79:d3:4c:82:45:6f:c7:1f:d0:42:77:0e:21:
b6:ad:56:2e:96:60:4f:4c:cf:98:e6:7a:b2:b6:a0:46:37:53:
d3:ce:64:16:35:66:87:8b:35:30:58:87:e9:d8:e0:97:c2:c5:
2c:27:90:ef:99:e7:d4:21:0f:33:d1:6e:6c:bf:e1:06:9b:4f:
3a:0b:5c:c5:0f:42:e1:eb:b3:95:8e:3d:cf:37:a7:de:32:7d:
df:c1:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:07:04 2026 by rpki-client