
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa
File: bff72f8d-18a6-3d12-b7fc-152051c197d6.roa (raw, json)
Hash identifier: x+9lv2sXd1alQdNP6ti1laWgeVYv+lxGn3v/mdhFkWw=
Subject key identifier: 30:CE:3E:E4:B0:AC:BC:F4:D0:26:14:3C:F9:9D:AD:5B:B5:91:F9:46
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584F0D6CD7DA16FFA01772B96EC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 54113
IP address blocks: 140.248.254.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:d7:da:16:ff:a0:17:72:b9:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=fe8d8e47-66b7-4e82-bf75-e203c03000fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:d5:9a:d6:9c:a4:92:66:1d:27:bb:fe:0f:
98:dd:54:7e:44:bc:52:7f:3a:73:54:04:79:b9:48:
28:8f:7e:cf:b2:61:2d:82:d0:fa:ee:42:ef:00:aa:
77:35:a2:df:23:37:8d:30:43:44:8f:a1:a5:58:ec:
47:5f:98:38:a9:63:78:4f:6f:b3:88:41:2f:40:4f:
e9:67:ec:c6:2b:2f:b5:93:61:75:60:82:98:57:df:
c1:33:0c:db:7f:3c:eb:01:72:dc:7e:44:cd:0b:ce:
13:7f:98:c1:8d:71:b2:17:57:b0:72:84:2f:f2:f8:
e6:67:d0:c0:62:4b:f4:c8:87:ea:3a:6e:64:51:78:
25:08:48:89:bf:ea:d9:c0:8b:bc:0f:d8:19:58:fa:
3f:c7:7b:58:b6:af:8a:07:63:ce:8a:6b:17:63:c6:
16:4f:f9:dd:78:06:d5:c8:a1:09:e4:8b:3b:1d:01:
80:c2:09:bd:fa:c7:35:b1:5b:4e:28:31:4f:db:3e:
7a:cd:79:e2:8c:53:43:96:ca:52:a6:ee:d6:bc:c4:
7d:ea:df:a8:5b:de:84:df:16:78:a2:bf:8a:23:22:
19:0e:39:e6:b4:4f:0d:16:3d:6d:88:ae:a8:70:2c:
18:07:af:2c:92:07:c4:24:86:02:e9:f5:5c:38:a9:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:3E:E4:B0:AC:BC:F4:D0:26:14:3C:F9:9D:AD:5B:B5:91:F9:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bff72f8d-18a6-3d12-b7fc-152051c197d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.254.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f3:35:48:4a:70:b1:88:38:06:ce:30:6a:01:24:01:49:45:
6c:5b:ca:3f:99:8c:4d:43:22:db:eb:9e:76:4d:c5:eb:cf:35:
25:fe:92:09:14:b2:80:1d:b8:e6:d3:ab:0a:a8:80:9d:df:20:
9f:94:24:c5:1c:ba:0e:de:09:04:e1:07:40:52:3a:55:cf:45:
d2:db:5c:54:ce:c8:9b:8b:96:a3:74:66:0e:05:ea:5c:4c:4f:
db:8f:34:6c:87:88:51:4f:bf:65:92:4f:42:da:79:fa:90:7c:
22:d0:4c:0e:ce:c3:5a:28:0b:bc:04:b3:8c:d3:e8:df:7a:03:
84:6d:54:39:91:2f:15:40:b6:10:13:8b:05:26:40:9c:43:8a:
36:35:96:d8:e3:47:5b:66:ef:45:a7:d0:6b:11:91:07:0a:24:
f5:30:d5:24:a3:56:a3:47:58:29:76:54:21:ad:23:32:84:3e:
96:3f:7d:13:20:38:bc:31:00:98:bd:6c:14:5a:f7:22:28:13:
b1:10:52:29:17:eb:75:99:92:b9:14:57:3b:6a:d3:f8:8f:bb:
57:72:92:a7:90:ac:d5:82:a8:36:5f:18:2b:f2:ec:f0:5d:52:
27:1a:b3:eb:5f:a5:2b:28:1d:de:5d:90:a7:80:60:5a:4c:08:
57:84:a8:e5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8NbNfaFv+gF3K5bsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZmU4ZDhlNDctNjZiNy00ZTgyLWJmNzUtZTIwM2MwMzAwMGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzHVmtacpJJmHSe7/g+Y3VR+RLxSfzpzVAR5
uUgoj37PsmEtgtD67kLvAKp3NaLfIzeNMENEj6GlWOxHX5g4qWN4T2+ziEEvQE/p
Z+zGKy+1k2F1YIKYV9/BMwzbfzzrAXLcfkTNC84Tf5jBjXGyF1ewcoQv8vjmZ9DA
Ykv0yIfqOm5kUXglCEiJv+rZwIu8D9gZWPo/x3tYtq+KB2POimsXY8YWT/ndeAbV
yKEJ5Is7HQGAwgm9+sc1sVtOKDFP2z56zXnijFNDlspSpu7WvMR96t+oW96E3xZ4
or+KIyIZDjnmtE8NFj1tiK6ocCwYB68skgfEJIYC6fVcOKnfxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDDOPuSwrLz00CYUPPmdrVu1kflGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmZmNzJmOGQtMThhNi0z
ZDEyLWI3ZmMtMTUyMDUxYzE5N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj+gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAu8zVISnCxiDgGzjBqASQBSUVsW8o/mYxNQyLb6552TcXrzzUl/pIJ
FLKAHbjm06sKqICd3yCflCTFHLoO3gkE4QdAUjpVz0XS21xUzsibi5ajdGYOBepc
TE/bjzRsh4hRT79lkk9C2nn6kHwi0EwOzsNaKAu8BLOM0+jfegOEbVQ5kS8VQLYQ
E4sFJkCcQ4o2NZbY40dbZu9Fp9BrEZEHCiT1MNUko1ajR1gpdlQhrSMyhD6WP30T
IDi8MQCYvWwUWvciKBOxEFIpF+t1mZK5FFc7atP4j7tXcpKnkKzVgqg2Xxgr8uzw
XVInGrPrX6UrKB3eXZCngGBaTAhXhKjl
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:10 2026 by rpki-client