
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa
File: bf6962bd-45db-33f1-9637-5ec4531b2b48.roa (raw, json)
Hash identifier: +Rsq9jiFUBAbaIvWpQYiHCTz23S8DDVSYT9OLTiUYr4=
Subject key identifier: 0F:EF:BD:F2:38:69:2D:0D:A1:73:ED:F0:F3:9A:5E:63:9A:1C:3E:23
Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
Certificate serial: 010D0C9F4328584F4F0809285776AD899BED0BA0
Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 30277
IP address blocks: 72.9.144.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:09:28:57:76:ad:89:9b:ed:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=0d83de2d-7212-431c-92fa-03a6bb742509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:57:60:3e:3b:d9:b2:a2:3d:e7:c1:61:38:
ca:e2:54:bf:33:34:6c:fd:17:6c:a0:6f:a0:c9:df:
81:eb:fa:08:03:64:49:e6:1e:10:56:15:2b:25:bc:
0d:39:15:8b:0b:c4:84:ed:85:6f:68:d5:b5:0b:8f:
f7:46:6a:3f:9a:0c:e7:51:5e:da:bf:83:27:60:54:
c0:16:5f:71:7e:8f:51:6f:2c:e0:df:d7:39:68:af:
36:26:36:06:29:76:23:f6:4d:70:fc:09:20:bc:d5:
bd:b0:b0:59:3b:f6:18:34:e6:ce:d5:76:93:12:69:
0f:28:d0:57:60:9a:e7:72:45:a2:fa:b5:7d:98:95:
79:3b:1e:34:c9:b4:2a:cd:10:92:e3:cc:6a:2e:34:
42:a9:05:38:9c:ab:d6:26:3d:4f:22:f7:1d:75:b5:
53:e3:6f:89:f9:f8:4e:78:3a:b6:f4:00:a3:5d:5f:
55:66:46:33:3c:bd:8b:62:2e:9c:bc:86:ef:11:46:
10:f7:2d:ab:a7:a4:07:98:e0:0c:23:55:3d:cc:76:
db:c6:62:5a:a6:3d:2e:1b:37:40:31:6f:d0:fe:22:
80:4d:1a:65:fa:ab:d0:14:9d:2c:28:e1:cf:e2:8e:
e7:19:69:d8:1e:88:fd:7c:45:cf:3d:5c:2e:9a:cb:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:BD:F2:38:69:2D:0D:A1:73:ED:F0:F3:9A:5E:63:9A:1C:3E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl
X509v3 Authority Key Identifier:
keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d6:1b:5d:6d:46:51:fc:24:2a:f7:66:82:d8:39:87:b8:9d:
ed:a4:9e:bc:54:e9:57:65:9a:3c:80:c8:4c:0a:61:2b:d8:f0:
34:79:2d:3f:9d:e8:3c:46:51:51:8b:ca:52:c2:45:bd:c2:b2:
42:93:a5:95:e5:32:f1:d1:b7:e9:4a:fb:64:fe:cf:ae:95:b4:
2a:c3:04:a9:ef:c8:97:b2:72:60:76:f8:91:70:fc:be:c1:0f:
83:c7:22:31:39:72:fe:9e:66:f8:41:7a:61:a5:47:74:af:65:
20:97:51:16:18:69:60:6b:90:af:5c:9c:c3:c8:f0:a9:12:1c:
ab:a7:11:73:9e:a7:cf:9f:fa:9f:62:7b:85:9f:29:a0:31:ab:
1b:e9:cf:09:73:ca:f8:b9:cf:86:fe:6f:c9:52:49:ea:4e:da:
92:07:3d:b0:91:26:57:ca:54:c0:6d:87:05:3a:84:ba:db:ac:
7b:ed:38:31:c4:a5:03:58:2d:e8:9c:d7:e7:35:c4:c4:82:e3:
22:53:70:6e:40:2f:c7:8a:af:b7:e6:ca:73:c3:93:2f:84:37:
73:31:14:3b:94:b7:a3:ee:65:1d:06:12:fa:8a:6d:33:47:61:
3e:a1:8f:77:19:7e:fc:fe:ff:af:01:77:ab:3e:c0:3e:fc:5d:
03:08:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:36:54 2026 by rpki-client