
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa
File: bd53a3c2-b425-32de-abae-cbb2ab87890a.roa (raw, json)
Hash identifier: LzcQUcbRdXXmfum8Vsn4V7U+9+/Hd6kiwDvOM//hs5Y=
Subject key identifier: 40:E6:8A:BA:6C:5B:8C:05:68:86:DC:AE:7E:D5:D2:01:8E:12:8C:C9
Certificate issuer: /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial: 010D0C9F4328584CDDCCF4064BCC095E931D7D80
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa
Signing time: Sun 15 Feb 2026 02:00:32 +0000
ROA not before: Sun 15 Feb 2026 02:00:32 +0000
ROA not after: Sat 16 May 2026 01:00:32 +0000
asID: 2055
IP address blocks: 167.96.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:cc:f4:06:4b:cc:09:5e:93:1d:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Validity
Not Before: Feb 15 02:00:32 2026 GMT
Not After : May 16 01:00:32 2026 GMT
Subject: CN=c99a58d3-baca-447a-85bc-68387b6e92e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:b0:d4:74:58:96:0f:e7:a0:b7:5c:1e:a5:
f4:0a:d8:de:c1:03:a6:f4:22:4e:87:3b:1f:83:c0:
85:27:37:10:2d:d3:1f:01:65:61:dd:95:fa:ca:3e:
26:a6:b1:5d:26:ed:7d:b7:7b:3a:ed:23:a3:a0:9b:
d9:1c:ac:21:1f:72:8e:a3:1b:8b:e8:93:88:dd:6d:
64:1d:ae:cc:12:d7:12:0e:1e:56:cd:0c:55:8e:aa:
ea:e1:a0:68:c9:02:a0:39:18:7a:f5:5d:b1:5f:42:
41:8f:b2:8f:9e:4a:cb:51:e3:d5:16:1e:be:9a:53:
c0:de:e0:f1:94:ee:6f:45:11:09:65:6c:c4:b0:4a:
e9:a8:9f:ec:34:29:92:e3:c6:58:86:0e:ca:81:ff:
13:69:33:65:8e:2f:da:bb:f2:5c:08:98:c9:32:1c:
39:92:85:91:a5:7f:85:42:1f:a3:ce:f7:68:42:8b:
0a:9b:22:f0:7b:76:c1:81:dd:62:db:c6:98:ab:36:
45:4c:ec:63:fa:59:62:df:67:e1:ca:9f:4d:77:cf:
db:d3:8f:dd:b6:b4:3d:0b:a0:3f:28:dd:da:4e:3f:
b9:c3:6c:7a:e4:b0:5d:8f:f6:b9:a5:22:4b:12:66:
b5:19:14:ee:7a:b1:b0:67:3f:8a:43:a1:85:6c:79:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:8A:BA:6C:5B:8C:05:68:86:DC:AE:7E:D5:D2:01:8E:12:8C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/bd53a3c2-b425-32de-abae-cbb2ab87890a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
X509v3 Authority Key Identifier:
keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
sbgp-ipAddrBlock: critical
IPv4:
167.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:26:51:d4:81:ce:a1:a3:74:d6:de:05:8c:21:23:fa:49:48:
69:bb:5a:90:6a:65:be:e8:8a:4d:b0:b4:6d:ad:12:b4:0c:12:
ed:5d:87:28:3d:dc:93:3f:b9:55:4c:70:99:52:98:e8:5f:56:
a6:f6:6c:91:42:83:67:48:99:95:d8:6f:f5:f3:ab:47:de:07:
9e:70:98:3f:b3:09:9d:08:6b:85:a5:24:ec:89:7c:d0:96:2f:
1d:80:30:45:cb:51:d9:22:7c:e1:51:9a:18:83:40:ce:b2:13:
2f:24:fe:40:38:9b:23:84:8d:aa:77:35:1b:83:72:c4:ba:f3:
70:6c:5a:52:37:d8:08:cb:50:3c:a7:dd:48:66:ec:4b:db:84:
62:24:f8:78:6b:0c:7f:e0:2d:1f:45:8e:7e:fa:97:ea:a7:c9:
ac:8e:42:66:30:38:9f:09:24:34:ef:47:f0:80:43:92:d3:cb:
81:a2:03:ec:78:46:2c:98:e4:cd:ab:fb:50:65:c6:64:8e:53:
df:91:d8:87:6a:aa:ad:83:2d:9a:f6:88:eb:d3:1e:f4:0f:24:
e9:ea:45:1f:95:cf:b1:10:69:b9:46:a1:cf:fe:99:9e:44:86:
d6:52:40:69:e5:49:b4:85:66:45:3a:de:bc:7f:40:09:93:e2:
12:4d:dd:93
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzdzPQGS8wJXpMdfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5
MjMxMB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
Yzk5YTU4ZDMtYmFjYS00NDdhLTg1YmMtNjgzODdiNmU5MmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoOw1HRYlg/noLdcHqX0CtjewQOm9CJOhzsf
g8CFJzcQLdMfAWVh3ZX6yj4mprFdJu19t3s67SOjoJvZHKwhH3KOoxuL6JOI3W1k
Ha7MEtcSDh5WzQxVjqrq4aBoyQKgORh69V2xX0JBj7KPnkrLUePVFh6+mlPA3uDx
lO5vRREJZWzEsErpqJ/sNCmS48ZYhg7Kgf8TaTNlji/au/JcCJjJMhw5koWRpX+F
Qh+jzvdoQosKmyLwe3bBgd1i28aYqzZFTOxj+lli32fhyp9Nd8/b04/dtrQ9C6A/
KN3aTj+5w2x65LBdj/a5pSJLEma1GRTuerGwZz+KQ6GFbHnRJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEDmirpsW4wFaIbcrn7V0gGOEozJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMWY5
NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvYmQ1M2EzYzItYjQyNS0z
MmRlLWFiYWUtY2JiMmFiODc4OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjFmOTc2ZmQtN2ZhMC00MzIzLTk3
ZmEtMzViYjg2OWE5MjMxL2IxZjk3NmZkLTdmYTAtNDMyMy05N2ZhLTM1YmI4Njlh
OTIzMS5jcmwwHwYDVR0jBBgwFoAUrpokcZiF5gtdP+4v/cqhapTgJzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJi
ODY5YTkyMzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp2AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADyZR1IHOoaN01t4FjCEj+klIabtakGplvuiKTbC0ba0StAwS7V2HKD3c
kz+5VUxwmVKY6F9WpvZskUKDZ0iZldhv9fOrR94HnnCYP7MJnQhrhaUk7Il80JYv
HYAwRctR2SJ84VGaGINAzrITLyT+QDibI4SNqnc1G4NyxLrzcGxaUjfYCMtQPKfd
SGbsS9uEYiT4eGsMf+AtH0WOfvqX6qfJrI5CZjA4nwkkNO9H8IBDktPLgaID7HhG
LJjkzav7UGXGZI5T35HYh2qqrYMtmvaI69Me9A8k6epFH5XPsRBpuUahz/6ZnkSG
1lJAaeVJtIVmRTrevH9ACZPiEk3dkw==
-----END CERTIFICATE-----
Generated at Sat Feb 28 08:20:12 2026 by rpki-client