
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
File: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (raw, json)
Hash identifier: /06L66ktsqKuqO3Nj6ZmdSxTAUC5NbWcGA2T5PiE61E=
Subject key identifier: 04:35:88:D8:22:AF:1E:AA:5F:CC:A7:F5:68:44:7E:8B:52:A7:E0:15
Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Certificate serial: 010D0C9F4328584DB1DAC9C01F6BEA82B4A732C0
Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 54013
IP address blocks: 198.231.26.0/24 maxlen: 24
198.231.27.0/24 maxlen: 24
204.75.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:c9:c0:1f:6b:ea:82:b4:a7:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=7951be35-383d-4b80-b38e-e58260f7993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:1c:f7:e4:be:48:cc:21:20:b0:ff:26:c8:
3d:fd:47:4a:0d:c1:f6:05:70:f0:8c:24:1d:cf:bc:
7c:09:dc:3d:bd:f2:26:43:58:18:e6:96:c7:81:b4:
2b:e5:90:16:06:28:fe:99:cc:ec:55:b0:a5:c6:fd:
6f:d5:38:e0:56:65:ab:cc:10:ec:da:2f:97:30:6f:
16:5d:9e:43:15:7d:64:a8:f5:ea:a0:26:26:0e:23:
9e:a4:48:4b:72:31:7f:74:d9:7b:59:66:c3:3d:9a:
01:f0:20:ca:c0:d2:01:e8:0b:a3:34:31:9d:d6:fe:
64:fc:b8:58:98:e2:60:88:08:89:9b:d5:e7:2f:b9:
2f:35:07:42:2c:d7:1e:d4:35:ce:6d:ce:70:4e:cb:
57:0b:a6:9f:77:be:58:f6:23:92:76:34:51:44:1c:
8e:7f:72:de:ef:cc:88:c5:a3:c8:34:75:13:fc:a1:
2c:94:26:a6:d7:e0:b4:c5:7c:1d:6e:e0:b5:3e:f0:
c8:04:03:8b:d6:33:aa:b1:ed:78:ab:9f:e8:7a:71:
24:39:06:2a:94:70:88:a6:b1:10:db:94:dd:fc:a8:
98:b9:af:bd:f4:71:fb:af:61:f5:60:2a:9d:60:02:
d6:cb:2f:ae:38:d1:43:7b:15:50:74:5a:d4:5f:f7:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:35:88:D8:22:AF:1E:AA:5F:CC:A7:F5:68:44:7E:8B:52:A7:E0:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl
X509v3 Authority Key Identifier:
keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.231.26.0/23
204.75.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:45:9d:8e:03:15:83:2d:61:41:95:72:e4:d0:2a:26:53:03:
06:f9:20:5b:3a:58:dc:f8:fc:eb:4c:0c:ad:ca:56:86:62:67:
3c:e7:57:ce:77:6e:8f:2b:88:b4:9a:5b:ee:ba:35:bb:e6:45:
24:ee:ca:b4:70:a5:0a:3a:63:a9:b0:d7:fd:14:4d:4c:00:47:
0c:04:c3:d5:ef:32:18:bf:f7:fd:9d:a6:87:3c:73:51:3a:63:
91:03:26:b3:dc:5a:b2:bc:59:95:cf:fa:cd:8c:90:b3:a0:0e:
35:24:56:09:99:ad:e6:02:22:b8:e4:8e:9f:e1:38:52:ea:f5:
c6:0d:7e:60:78:d4:14:4c:06:e0:67:54:fa:77:1f:d9:ae:65:
da:1e:a9:04:45:ef:40:90:e9:84:a6:5f:6f:a3:c8:0e:0d:54:
0c:76:0f:1e:25:e6:41:b0:48:a1:7f:08:2f:57:b1:a4:74:62:
5e:a1:e8:d1:a5:8c:4a:b3:97:0a:b7:1a:5d:3f:3e:6a:7f:1e:
93:e2:26:f9:49:66:31:b1:1f:11:38:90:94:12:ef:9e:4d:ca:
1a:1c:16:ec:50:a4:82:03:ce:77:0b:ea:1e:65:d9:9f:4b:62:
f3:9b:21:a1:a5:4e:26:67:f5:15:3f:a8:94:d4:98:85:de:20:
c9:cf:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:15 2026 by rpki-client