
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
File: bfc8160e-ea00-31d5-a587-02c976b74661.roa (raw, json)
Hash identifier: phZ/lGmHK03DKDYYauulw/We7klq/3ghgrCUTMFMFIU=
Subject key identifier: 14:BC:8A:AA:A8:D9:D6:F9:CC:5F:CF:7C:C7:46:89:46:2D:54:DE:B5
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F4328584EA7902622F1266FEBFEBD1080
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 2607:e740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:26:22:f1:26:6f:eb:fe:bd:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=98e3b427-f357-419f-8347-9596db417a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:cd:73:d5:cc:ca:a4:e5:5a:4a:51:6f:d3:
33:2a:c7:1b:3d:14:56:79:c7:4b:46:8b:f7:d5:a3:
84:c5:39:80:1b:8f:4b:f9:c6:bc:60:4f:9c:71:f0:
dc:0d:85:7a:16:ce:1f:f4:8b:db:9a:7f:c7:92:b1:
b3:de:d7:cf:ed:13:8d:72:0c:f1:36:9a:2b:05:7e:
2a:7c:0f:45:1c:af:df:53:50:82:88:76:3b:76:bb:
51:27:0f:ed:00:47:5e:d7:aa:d4:1c:58:61:e0:c8:
67:78:12:6e:c8:de:cd:11:23:eb:b5:80:62:6a:48:
14:86:de:45:2a:3b:26:9d:88:6e:b5:10:fe:e3:fc:
07:88:14:a7:ca:27:2b:eb:b4:48:27:0d:68:e9:84:
fa:69:3a:ec:f3:e7:0e:6b:03:d4:cc:d3:ea:48:2f:
f9:5e:5b:da:22:76:59:b3:87:c0:52:48:f5:44:c5:
89:dc:e4:5f:87:07:88:e0:2d:68:08:58:36:73:9b:
df:f3:7b:62:39:71:36:71:72:dc:53:1f:7f:1f:0c:
1a:51:0f:9c:ef:ec:77:0f:da:60:99:24:17:a6:f1:
0b:f6:b1:33:7d:cb:55:19:dd:53:95:8a:79:e2:f9:
82:5b:16:bd:b6:42:aa:3f:d0:6f:04:15:f6:fa:23:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:8A:AA:A8:D9:D6:F9:CC:5F:CF:7C:C7:46:89:46:2D:54:DE:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:e740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:64:83:a7:09:db:8f:6e:5f:e1:a0:d1:8b:f2:85:d9:3b:00:
43:dd:62:52:e9:9e:5f:e8:9a:4f:d9:b0:f0:6b:dd:2c:da:d4:
16:14:ad:8a:dd:84:cf:b6:c4:18:1d:45:e5:0b:05:88:76:26:
47:d9:20:eb:c1:18:4e:18:79:57:3b:d6:14:51:8c:3d:27:e4:
ac:e7:02:5c:ee:d8:98:3d:4d:b7:1f:a4:80:d2:53:d1:a1:81:
89:6b:73:18:70:43:e4:00:34:76:fc:8e:72:ab:b7:78:ba:c7:
ef:6f:60:12:de:57:86:66:ec:6a:79:a0:49:87:d5:57:d9:e0:
b9:c0:c1:82:5d:ad:ae:34:09:87:1a:f0:1c:01:93:b8:3b:0c:
f8:96:f7:c3:e5:57:b0:7c:c2:6e:77:b7:d3:95:6b:61:4e:2d:
3d:0b:ce:b7:f4:bd:bf:18:d9:51:69:9d:9a:40:47:4b:6b:c3:
a1:13:c5:ac:e2:59:78:e3:36:2f:63:30:9b:46:97:4d:ea:9a:
fd:c6:c4:f7:aa:45:cc:a7:1e:77:35:4f:1d:5e:80:c9:91:14:
c1:6e:ef:36:26:18:88:97:f3:21:62:c4:9d:8f:1d:aa:5c:a2:
2c:28:21:37:d7:58:23:e7:54:30:42:63:14:44:03:53:dd:eb:
4b:80:98:ec
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCYi8SZv6/69EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OThlM2I0MjctZjM1Ny00MTlmLTgzNDctOTU5NmRiNDE3YTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6bNc9XMyqTlWkpRb9MzKscbPRRWecdLRov3
1aOExTmAG49L+ca8YE+ccfDcDYV6Fs4f9Ivbmn/HkrGz3tfP7RONcgzxNporBX4q
fA9FHK/fU1CCiHY7drtRJw/tAEde16rUHFhh4MhneBJuyN7NESPrtYBiakgUht5F
KjsmnYhutRD+4/wHiBSnyicr67RIJw1o6YT6aTrs8+cOawPUzNPqSC/5XlvaInZZ
s4fAUkj1RMWJ3ORfhweI4C1oCFg2c5vf83tiOXE2cXLcUx9/HwwaUQ+c7+x3D9pg
mSQXpvEL9rEzfctVGd1TlYp54vmCWxa9tkKqP9BvBBX2+iN4TQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBS8iqqo2db5zF/PfMdGiUYtVN61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvYmZjODE2MGUtZWEwMC0z
MWQ1LWE1ODctMDJjOTc2Yjc0NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfnQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA3ZIOnCduPbl/hoNGL8oXZOwBD3WJS6Z5f6JpP2bDwa90s2tQWFK2K
3YTPtsQYHUXlCwWIdiZH2SDrwRhOGHlXO9YUUYw9J+Ss5wJc7tiYPU23H6SA0lPR
oYGJa3MYcEPkADR2/I5yq7d4usfvb2AS3leGZuxqeaBJh9VX2eC5wMGCXa2uNAmH
GvAcAZO4Owz4lvfD5VewfMJud7fTlWthTi09C8639L2/GNlRaZ2aQEdLa8OhE8Ws
4ll44zYvYzCbRpdN6pr9xsT3qkXMpx53NU8dXoDJkRTBbu82JhiIl/MhYsSdjx2q
XKIsKCE311gj51QwQmMURANT3etLgJjs
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:48 2026 by rpki-client