
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
File: bfb03a9d-6724-3257-b89f-a663facf63ac.roa (raw, json)
Hash identifier: ZPQ7F8w9Cv3ms81+t46Y7LQ9AXPKhXsEGKxSV4KZTUc=
Subject key identifier: 95:6A:26:70:2E:78:0E:FB:20:F7:F8:31:CA:6E:30:43:AC:74:CA:26
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F4328584F4975854F706A12EEBDC75560
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 50304
IP address blocks: 172.84.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:85:4f:70:6a:12:ee:bd:c7:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ecb85c94-8289-4460-960f-b49932e10c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:31:8b:d3:c4:9c:6e:a1:da:73:07:78:d7:
90:7d:4d:0e:41:b3:e0:76:c8:15:d3:f7:73:02:4c:
0a:8b:6e:e8:02:c8:4b:37:92:de:68:b4:72:54:3c:
1d:cb:2a:6a:4d:d7:32:92:23:58:38:17:4a:a8:8c:
96:06:95:d1:36:a7:fd:1a:1b:db:25:ea:5d:4f:86:
1b:30:91:29:cd:0c:b8:fe:e9:4a:55:02:5d:23:34:
92:b6:b1:fb:ba:bb:8d:58:56:b3:7b:88:80:e3:aa:
07:e8:ac:c6:72:81:e2:23:4b:2f:58:4e:e0:e0:21:
fc:8f:da:bc:b8:7c:0b:12:6c:6a:e7:b3:1b:3c:0e:
7b:a1:81:19:3a:bd:62:74:8f:1d:36:6c:e0:51:e2:
15:e2:2c:8d:64:dc:c1:7f:a7:88:87:79:73:52:2e:
c7:d4:e9:97:6c:6b:b5:bc:9f:0f:ba:26:e0:86:de:
fc:fc:6c:96:9c:34:96:15:b7:b6:c8:d7:8e:ab:a2:
8b:dc:a4:66:bc:c2:c3:de:29:f5:dd:1d:9d:95:18:
38:64:47:91:ac:98:bd:63:cf:a0:22:35:e5:71:13:
2c:e5:e3:18:5c:97:10:59:5f:18:ad:90:14:bd:7d:
bd:32:2d:67:7e:19:6b:02:c5:56:f4:c6:3f:af:c4:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6A:26:70:2E:78:0E:FB:20:F7:F8:31:CA:6E:30:43:AC:74:CA:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e7:b1:75:fb:ca:03:97:6a:65:bd:12:d2:c8:f8:b2:7d:13:
0d:c1:b5:6f:65:1b:a1:42:ff:f5:5d:12:fa:05:ed:28:f1:77:
95:bc:f1:96:4e:49:81:72:6e:4f:4c:66:7a:fd:17:fe:d8:f9:
83:39:63:34:50:43:e2:5f:bc:79:2b:90:16:97:b7:5b:81:d2:
7a:78:32:c2:97:2c:c6:95:e4:fc:73:c9:69:0d:c1:ca:61:c9:
aa:c3:21:51:ca:da:98:8c:2d:38:ad:f2:7e:51:82:ef:bc:07:
e1:85:86:ee:2b:24:42:5e:b4:8e:cf:dc:0b:81:1d:df:bf:16:
94:d7:b8:25:74:7b:ce:9c:91:a5:c0:37:b4:7f:96:6d:6d:32:
4b:f7:10:b5:34:ed:91:de:68:9b:b1:be:03:cc:9f:08:af:26:
27:2c:bb:83:67:49:5b:d2:97:e1:3d:4b:cf:59:60:42:d2:b7:
02:76:c4:b0:c6:bb:c9:55:e1:f4:3e:b1:d9:5a:a9:7b:4b:1d:
c2:2f:9c:0b:a2:cc:77:07:0d:16:19:6f:5f:7b:4a:43:10:ff:
1c:a5:12:72:94:58:5a:7a:57:33:90:d4:42:c0:a7:db:3f:96:
41:f7:c4:3b:f4:d4:cf:53:da:8e:02:46:17:97:1c:97:81:b1:
a8:ca:76:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdYVPcGoS7r3HVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWNiODVjOTQtODI4OS00NDYwLTk2MGYtYjQ5OTMyZTEwYzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwxi9PEnG6h2nMHeNeQfU0OQbPgdsgV0/dz
AkwKi27oAshLN5LeaLRyVDwdyypqTdcykiNYOBdKqIyWBpXRNqf9GhvbJepdT4Yb
MJEpzQy4/ulKVQJdIzSStrH7uruNWFaze4iA46oH6KzGcoHiI0svWE7g4CH8j9q8
uHwLEmxq57MbPA57oYEZOr1idI8dNmzgUeIV4iyNZNzBf6eIh3lzUi7H1OmXbGu1
vJ8Puibght78/GyWnDSWFbe2yNeOq6KL3KRmvMLD3in13R2dlRg4ZEeRrJi9Y8+g
IjXlcRMs5eMYXJcQWV8YrZAUvX29Mi1nfhlrAsVW9MY/r8RL/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVqJnAueA77IPf4McpuMEOsdMomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYmZiMDNhOWQtNjcyNC0z
MjU3LWI4OWYtYTY2M2ZhY2Y2M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFS2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDnsXX7ygOXamW9EtLI+LJ9Ew3BtW9lG6FC//VdEvoF7Sjxd5W88ZZO
SYFybk9MZnr9F/7Y+YM5YzRQQ+JfvHkrkBaXt1uB0np4MsKXLMaV5PxzyWkNwcph
yarDIVHK2piMLTit8n5Rgu+8B+GFhu4rJEJetI7P3AuBHd+/FpTXuCV0e86ckaXA
N7R/lm1tMkv3ELU07ZHeaJuxvgPMnwivJicsu4NnSVvSl+E9S89ZYELStwJ2xLDG
u8lV4fQ+sdlaqXtLHcIvnAuizHcHDRYZb197SkMQ/xylEnKUWFp6VzOQ1ELAp9s/
lkH3xDv01M9T2o4CRheXHJeBsajKdu0=
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:23:23 2026 by rpki-client