
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
File: 3f3eb481-0305-31c7-9a7c-52b014c01721.roa (raw, json)
Hash identifier: TzSgSuZDQZjc3sEaHIuGYWZJqrcIGfuMTQNdC1aRJbM=
Subject key identifier: 70:DB:46:14:57:00:8B:45:BE:6F:A2:62:FE:A5:99:0E:07:28:74:09
Certificate issuer: /CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Certificate serial: 010D0C9F4328584DB1DAC9659355E8645F52F0E0
Authority key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 15026
IP address blocks: 198.160.96.0/19 maxlen: 24
198.160.96.0/20 maxlen: 20
198.160.112.0/21 maxlen: 21
198.160.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:c9:65:93:55:e8:64:5f:52:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=2114672f-427a-4fa0-8295-1f164d4f82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:96:5f:c3:dc:7a:ef:24:f2:c3:33:a1:90:
cb:84:10:e2:18:92:cb:e4:fc:d3:11:2b:ab:94:4a:
8c:05:bb:00:72:91:7d:0c:53:10:47:e5:0d:48:dc:
0b:4a:2e:72:8b:2d:37:cb:b6:6b:f3:f1:f3:46:60:
29:f0:41:bd:f6:9f:a7:3a:69:75:0b:29:d2:cc:49:
af:1e:fc:3c:20:39:cb:d0:b1:ad:37:90:20:90:df:
74:26:3c:40:51:67:f1:71:1c:4b:f7:58:1e:31:47:
77:b7:ba:31:7e:48:c7:20:3e:c0:aa:e7:a8:73:ed:
61:84:6c:68:d8:89:17:30:49:f2:0a:33:34:fe:d2:
67:36:c5:8d:33:fc:a4:1f:3a:c6:00:4d:31:8a:71:
46:ca:e3:88:53:c9:e0:6a:cf:43:e8:62:c8:9b:cb:
c3:d0:37:68:6e:fb:ab:2c:98:c8:2d:19:b5:c8:fa:
17:2d:ea:2b:9f:6d:85:04:37:9a:84:85:fe:0a:fb:
39:7d:e7:ad:e4:df:e9:db:45:67:ed:98:94:27:b6:
40:9c:55:a2:d4:6b:cc:5e:ea:87:d9:18:a2:c1:b7:
44:a1:a0:c9:32:58:f7:17:de:5e:2c:80:00:e2:64:
42:b7:f0:eb:78:42:61:59:5f:d5:67:51:e4:80:cc:
09:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:46:14:57:00:8B:45:BE:6F:A2:62:FE:A5:99:0E:07:28:74:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d9:e8:f4:9c:f0:c6:04:3e:31:28:65:ba:6a:e8:c4:3a:33:
0b:7e:d5:fd:43:d2:20:27:8e:5f:2e:59:59:08:54:6d:4a:07:
9d:70:5c:8d:41:ea:72:2e:85:13:24:6c:b9:6e:00:0e:97:c3:
35:ed:ac:bb:f0:d6:ac:f6:06:db:fe:d2:0a:69:67:2c:fd:e0:
43:91:3c:b0:7f:52:5d:ba:e8:fc:d7:2b:c1:5e:78:42:be:80:
96:0a:4d:dc:90:a6:aa:9b:92:73:81:94:67:a7:8e:4e:0b:93:
94:83:e1:a5:a7:f8:41:26:4d:dd:02:d5:b0:92:14:a9:a5:d3:
7e:09:7d:06:3f:70:8a:cb:ed:24:4e:9c:ef:fc:29:ba:9f:7c:
85:fa:16:b2:98:d7:35:a0:b5:a3:c6:83:1f:64:b6:f2:dd:df:
95:b7:c2:e8:a4:f5:0c:4c:50:f5:c8:ed:e4:73:a7:37:60:cb:
3d:da:30:a5:b1:97:33:b9:bb:88:d6:7c:aa:8d:12:cd:22:a2:
9d:07:bc:bd:0f:35:4f:01:6e:61:be:ec:3b:f0:e8:be:c6:04:
b1:a4:49:82:12:af:c7:5f:42:c1:49:b2:e4:88:fb:1e:ed:06:
b2:19:e8:df:45:67:72:51:44:58:80:1f:e0:1a:19:a9:0e:ca:
4d:07:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:50 2026 by rpki-client