
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/bf4ed312-6098-3416-9aaf-02214c922baf.roa
File: bf4ed312-6098-3416-9aaf-02214c922baf.roa (raw, json)
Hash identifier: wOdR35cVgVB0QUOhC7qs4vzRIX+BAKhuqWZiehYe+bk=
Subject key identifier: 8D:FD:ED:14:5A:BB:75:97:28:FC:08:DE:8E:22:46:09:57:0C:95:47
Certificate issuer: /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial: 010D0C9F4328584D60E5176307064D20FDD7C400
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/bf4ed312-6098-3416-9aaf-02214c922baf.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 32771
IP address blocks: 199.247.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:17:63:07:06:4d:20:fd:d7:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=1bd93a48-68dc-4d4f-a5c7-30f87a970244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:93:11:ac:d2:26:71:35:71:6b:32:94:3e:
0d:1e:bf:8d:50:47:48:07:16:e6:57:ac:d6:01:07:
9b:f4:9a:2a:77:d9:66:94:1b:ea:b2:65:f1:8b:0d:
1d:4c:37:1e:21:b7:c2:60:5c:fe:b9:86:9c:4b:74:
e0:df:98:25:ef:b6:b1:40:6f:07:41:60:87:99:fa:
3c:b8:40:26:2a:13:0b:7b:87:73:dc:b9:2a:de:50:
0c:76:22:8a:76:18:71:ce:c1:3a:b2:dc:48:08:df:
d9:10:f2:4a:e5:cd:5f:1b:2e:83:0a:df:13:3a:e6:
69:0d:2d:b5:5e:44:98:7b:6b:80:4d:4b:76:34:c5:
f0:a7:70:e9:ed:9b:76:5f:be:bc:0e:28:01:07:89:
3a:08:f9:f6:94:20:2e:92:bb:0e:07:99:4f:c4:4f:
fd:14:e0:df:05:0d:c5:ac:d4:64:b9:fc:37:4a:cc:
79:f4:a8:6d:94:4a:b7:e5:bd:c3:23:96:70:e6:52:
27:8f:79:67:6a:c9:ca:eb:db:ed:90:22:f2:97:84:
59:be:d0:7a:3a:82:f9:26:aa:c2:1e:b4:5a:0e:b6:
5a:8e:fc:83:51:69:f0:10:e3:91:c1:65:bd:20:8f:
5b:5f:fe:ff:4f:cb:c2:ce:7d:0f:0b:c6:ac:fc:09:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:ED:14:5A:BB:75:97:28:FC:08:DE:8E:22:46:09:57:0C:95:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/bf4ed312-6098-3416-9aaf-02214c922baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
X509v3 Authority Key Identifier:
keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.247.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9f:46:59:98:97:c8:d6:c1:41:3a:e5:fd:26:45:e0:2d:14:
05:27:d7:f7:9a:79:09:aa:f7:e0:78:77:66:f2:61:72:e1:f3:
23:71:e1:f6:26:f6:bc:5c:0f:f6:01:f0:79:ad:ac:37:a2:0d:
cd:5d:72:b9:e6:d1:3d:1c:2d:d1:3c:da:d1:00:c1:17:76:2e:
de:0d:ad:71:f7:96:50:b2:c1:e8:54:06:77:d5:e1:48:d3:96:
01:f6:72:b3:7c:2a:0f:46:8b:26:ed:8d:82:76:e8:6e:28:fd:
61:0e:9f:91:3b:b2:5d:93:a3:33:f2:9a:87:1b:70:73:77:99:
b8:44:4f:f3:56:93:b9:ab:2c:bb:f1:ba:ef:ca:ec:a4:be:f1:
8c:41:73:1d:39:3e:a6:0c:77:b2:63:71:e2:93:bd:1d:3f:b4:
a2:df:e9:49:5e:af:97:07:ff:13:e9:68:d5:30:aa:1e:50:cc:
58:ee:9f:70:c9:36:25:de:2d:01:e2:cb:56:49:bf:0b:73:0c:
10:c2:39:e4:3f:29:69:b4:f5:73:66:e3:de:2b:b5:f2:bb:f8:
7f:9f:27:bf:5f:f7:e8:82:2b:a9:96:8f:c9:4b:ee:aa:47:3e:
00:5b:99:eb:d4:ae:04:ca:b7:79:a2:00:ed:71:da:e2:ca:27:
97:9a:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 17:59:29 2026 by rpki-client