
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa
File: bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa (raw, json)
Hash identifier: 42YLJsKwpSRdmkzTH9izKa6ywwB+EOVYVu5DpiOzeRs=
Subject key identifier: 28:BF:04:08:C9:6D:2C:31:15:82:82:CA:12:43:27:C8:30:5D:CC:E0
Certificate issuer: /CN=813b9a12-50ed-45ab-a965-73c5f633a2d0
Certificate serial: 010D0C9F4328584CBE4A450C826C4E9411763680
Authority key identifier: D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa
Signing time: Tue 03 Feb 2026 19:07:52 +0000
ROA not before: Tue 03 Feb 2026 19:07:52 +0000
ROA not after: Mon 04 May 2026 18:07:52 +0000
asID: 214483
IP address blocks: 23.149.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:be:4a:45:0c:82:6c:4e:94:11:76:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813b9a12-50ed-45ab-a965-73c5f633a2d0
Validity
Not Before: Feb 3 19:07:52 2026 GMT
Not After : May 4 18:07:52 2026 GMT
Subject: CN=03e85de1-c545-4cde-a66a-37c41f6ed4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:ec:88:10:18:c6:bd:ab:2d:23:17:6c:d3:
81:e1:01:1d:6e:08:f6:a0:eb:6a:f1:da:6d:a5:fc:
af:1d:57:d8:5f:81:06:30:8c:09:c8:be:7f:85:f1:
14:92:3a:b4:b5:23:dd:5a:3a:22:a9:cd:32:48:d6:
77:09:76:4e:01:98:14:b3:70:68:fe:11:81:55:00:
0e:c5:a1:3e:a2:c4:18:70:bd:33:02:71:e8:6c:22:
8d:43:1e:0b:2c:13:6b:13:a0:07:84:f7:75:74:d2:
bb:e0:80:a5:fd:f5:d7:38:2a:f5:5f:f1:f3:03:0d:
18:89:a5:ec:04:0c:06:aa:90:d4:30:1e:5a:a7:55:
2a:c5:8d:ff:30:ce:09:3d:1d:38:d7:6d:28:a4:d3:
5e:32:46:9f:00:5f:e6:81:ab:13:e1:59:22:b9:2a:
b4:90:08:3d:d0:11:e9:40:14:9c:80:7e:38:ee:c4:
f7:e7:ce:d4:9e:66:75:62:96:f1:51:7b:66:e0:69:
c3:e6:7d:18:0e:eb:b1:df:c9:44:56:55:9c:38:2b:
6d:d7:be:a0:60:cd:db:53:d5:fa:31:f3:77:f6:0b:
59:ef:67:67:9d:bb:be:e8:ca:55:e8:6b:5f:c1:2f:
76:3e:a2:1a:47:8d:c4:ef:c7:f5:bb:52:1b:0a:ac:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:04:08:C9:6D:2C:31:15:82:82:CA:12:43:27:C8:30:5D:CC:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl
X509v3 Authority Key Identifier:
keyid:D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:93:cf:85:e8:11:7d:ec:7a:a4:11:3d:d2:c9:50:36:d2:88:
28:4c:a9:62:29:93:d4:49:c3:20:e8:86:6d:de:3b:8a:6a:55:
0d:71:c9:b9:ef:23:b3:33:fe:0e:cf:11:f1:3c:59:56:ba:37:
60:f9:bb:b8:04:6b:38:93:72:8b:46:fa:05:63:86:e8:07:11:
b5:de:b5:f3:f0:06:dd:f9:a5:11:04:49:75:49:51:f6:4a:2f:
3f:7c:9d:c6:0f:70:0d:7f:84:2e:35:7d:64:11:82:01:83:60:
e7:86:5a:38:98:59:f2:db:f6:2e:20:9c:35:a4:be:9b:d1:2c:
54:64:4a:f8:2f:cb:2f:86:c7:63:69:71:01:85:b4:54:6b:1e:
83:a5:0c:32:e5:d1:10:e6:21:87:49:f6:8b:a5:23:80:66:46:
54:6a:96:5b:79:96:8a:45:49:ea:5c:93:52:93:0e:9b:f8:41:
0e:c8:d0:01:ec:5b:6a:61:57:73:e1:7c:a2:f3:7f:07:16:cd:
41:b7:b4:20:97:e8:05:cb:15:7d:b3:58:06:00:9c:24:ba:c9:
03:29:e8:73:15:d5:10:f2:e6:94:34:06:28:34:d4:44:bc:a7:
47:3a:56:c6:be:51:11:00:83:25:8f:df:31:7a:3d:a3:6e:64:
f6:23:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:36 2026 by rpki-client