
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa
File: bfbeda47-5352-36b9-9050-ef69094c1c65.roa (raw, json)
Hash identifier: ruYNC50YFgdKhLSU6OZeoSVRNDYYCD+rAlXQ2UfraEI=
Subject key identifier: 52:3E:51:C2:6D:98:71:92:62:5B:F7:AB:5A:CE:2D:6F:9D:6A:D1:A5
Certificate issuer: /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
Certificate serial: 010D0C9F4328584EA791BBDA3FDC43FE4AC9A300
Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 400387
IP address blocks: 64.25.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:bb:da:3f:dc:43:fe:4a:c9:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=aa2c9012-c906-44ce-9fac-c4e8e992b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:2b:47:3c:da:b8:c6:cb:ad:c6:9e:14:46:
48:18:ca:0f:4f:7a:31:f1:2d:e1:91:1f:89:23:58:
e3:b8:9d:e8:cd:fd:5e:83:cc:2a:5a:96:7b:fb:10:
c5:5f:0a:2d:92:16:fa:2f:d0:42:7f:17:7f:8c:07:
1c:76:20:a1:90:97:e7:8c:c4:75:ec:06:8c:81:ee:
40:61:1e:21:84:78:5b:8a:b5:30:92:27:7d:0f:ea:
c4:70:4e:72:76:d4:4d:34:1b:7f:5b:27:7f:eb:7a:
28:50:9d:00:a9:86:26:9e:f7:5a:ce:b0:02:12:c0:
b1:a5:98:d4:03:e8:f6:d8:7f:37:ae:10:f7:2b:f0:
ef:c8:a4:70:34:32:c4:cd:37:20:d3:a9:1b:2a:1f:
94:68:92:7a:64:3f:79:bb:91:f1:47:3f:5a:75:0f:
3c:0d:28:a5:1d:1c:31:52:53:7d:83:d4:1d:ff:65:
52:1d:2f:73:85:d3:8b:f5:9b:78:67:eb:8b:30:9d:
10:4f:44:e3:09:fb:00:29:87:97:56:f6:1d:2e:5c:
cf:c6:ed:46:11:40:76:7f:6d:25:07:1c:cb:5d:ef:
a4:8a:2a:77:ef:9b:6d:f4:0f:83:fe:39:22:f4:66:
1a:e9:a3:86:b2:3c:ad:ca:a2:7e:25:cf:1d:3b:3a:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:51:C2:6D:98:71:92:62:5B:F7:AB:5A:CE:2D:6F:9D:6A:D1:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/bfbeda47-5352-36b9-9050-ef69094c1c65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl
X509v3 Authority Key Identifier:
keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
sbgp-ipAddrBlock: critical
IPv4:
64.25.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:bf:d1:10:f7:3e:4f:82:77:7f:33:cc:27:01:3a:3a:d3:7d:
92:c5:0f:b9:c4:29:6f:3d:eb:f2:c0:9d:76:a1:45:7e:a3:65:
0f:7e:7b:74:2f:39:53:ab:7a:6b:76:07:88:13:14:1f:3f:dd:
00:e3:af:0f:3b:e4:35:bc:9c:26:94:a0:ac:8e:ea:09:6d:e2:
b9:d5:54:70:f0:a3:cd:e0:60:1a:23:bd:50:5b:b4:1b:42:e7:
55:39:93:fe:78:55:1e:34:37:c4:3c:c9:5d:13:a1:62:e3:28:
d2:d5:de:66:af:58:bf:c6:9f:8b:0d:3e:ee:46:94:58:63:54:
11:55:6f:37:96:7a:89:83:bb:34:5a:1c:61:c2:64:cd:51:fa:
4c:02:67:42:12:ba:05:05:e0:b6:e0:c2:17:f6:e0:03:b3:25:
fe:3f:45:39:f5:2d:a0:02:5b:e0:e4:92:58:94:78:ca:51:32:
af:fb:f4:91:48:95:14:c1:2c:94:d4:3a:9b:fb:6a:6f:a4:b7:
a7:26:12:02:8d:24:5e:7f:15:3b:60:7a:9a:e4:2f:4a:0a:ec:
0b:d0:fd:5f:0f:b7:6d:20:5d:ca:c7:a5:66:14:70:49:01:97:
d8:90:d2:d3:2f:de:2c:71:c2:9a:d8:c3:ba:3a:e9:1e:44:db:
15:23:35:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbvaP9xD/krJowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM2YjJkYmItZTdkYi00YjYwLWIxZDktOTQ5ZDJlZGJh
NmZlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWEyYzkwMTItYzkwNi00NGNlLTlmYWMtYzRlOGU5OTJiMTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf4rRzzauMbLrcaeFEZIGMoPT3ox8S3hkR+J
I1jjuJ3ozf1eg8wqWpZ7+xDFXwotkhb6L9BCfxd/jAccdiChkJfnjMR17AaMge5A
YR4hhHhbirUwkid9D+rEcE5ydtRNNBt/Wyd/63ooUJ0AqYYmnvdazrACEsCxpZjU
A+j22H83rhD3K/DvyKRwNDLEzTcg06kbKh+UaJJ6ZD95u5HxRz9adQ88DSilHRwx
UlN9g9Qd/2VSHS9zhdOL9Zt4Z+uLMJ0QT0TjCfsAKYeXVvYdLlzPxu1GEUB2f20l
BxzLXe+kiip375tt9A+D/jki9GYa6aOGsjytyqJ+Jc8dOzo8ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI+UcJtmHGSYlv3q1rOLW+datGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZi
MmRiYi1lN2RiLTRiNjAtYjFkOS05NDlkMmVkYmE2ZmUvYmZiZWRhNDctNTM1Mi0z
NmI5LTkwNTAtZWY2OTA5NGMxYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDM2YjJkYmItZTdkYi00YjYwLWIx
ZDktOTQ5ZDJlZGJhNmZlLzAzNmIyZGJiLWU3ZGItNGI2MC1iMWQ5LTk0OWQyZWRi
YTZmZS5jcmwwHwYDVR0jBBgwFoAUTxBMP5Rf2+ujYdsZ237a7ZZpkekwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZiMmRiYi1lN2RiLTRiNjAtYjFkOS05NDlk
MmVkYmE2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABq/0RD3Pk+Cd38zzCcBOjrTfZLFD7nEKW896/LAnXahRX6jZQ9+e3Qv
OVOremt2B4gTFB8/3QDjrw875DW8nCaUoKyO6glt4rnVVHDwo83gYBojvVBbtBtC
51U5k/54VR40N8Q8yV0ToWLjKNLV3mavWL/Gn4sNPu5GlFhjVBFVbzeWeomDuzRa
HGHCZM1R+kwCZ0ISugUF4Lbgwhf24AOzJf4/RTn1LaACW+DkkliUeMpRMq/79JFI
lRTBLJTUOpv7am+kt6cmEgKNJF5/FTtgeprkL0oK7AvQ/V8Pt20gXcrHpWYUcEkB
l9iQ0tMv3ixxwprYw7o66R5E2xUjNU8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:45:50 2026 by rpki-client