
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json)
Hash identifier: i4oem4Yc9FngkwNSa8A/exTKaUqPQ/CxCCsop13QAM4=
Subject key identifier: 77:A9:B9:6B:D4:C0:49:22:AD:33:8E:18:D6:EE:FD:BB:32:DA:DC:D6
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584DB1DACA9981DE3E11AD4A9880
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 10397
IP address blocks: 162.244.96.0/24 maxlen: 24
162.244.97.0/24 maxlen: 24
162.244.98.0/24 maxlen: 24
162.244.99.0/24 maxlen: 24
162.244.100.0/24 maxlen: 24
162.244.101.0/24 maxlen: 24
204.16.48.0/24 maxlen: 24
208.67.12.0/24 maxlen: 24
208.67.13.0/24 maxlen: 24
208.67.14.0/24 maxlen: 24
208.67.15.0/24 maxlen: 24
208.85.128.0/24 maxlen: 24
208.85.133.0/24 maxlen: 24
208.85.134.0/24 maxlen: 24
208.85.135.0/24 maxlen: 24
209.42.166.0/24 maxlen: 24
209.42.191.0/24 maxlen: 24
209.209.128.0/21 maxlen: 21
209.209.139.0/24 maxlen: 24
209.209.140.0/22 maxlen: 22
209.209.141.0/24 maxlen: 24
209.209.144.0/20 maxlen: 20
209.209.160.0/20 maxlen: 20
209.209.163.0/24 maxlen: 24
209.209.167.0/24 maxlen: 24
209.209.176.0/22 maxlen: 22
209.209.180.0/23 maxlen: 23
209.209.181.0/24 maxlen: 24
209.209.183.0/24 maxlen: 24
209.209.184.0/24 maxlen: 24
209.209.186.0/23 maxlen: 23
209.209.189.0/24 maxlen: 24
209.209.190.0/23 maxlen: 23
209.250.32.0/19 maxlen: 19
2607:b600::/48 maxlen: 48
2607:b600:1::/48 maxlen: 48
2607:b600:2::/48 maxlen: 48
2607:b600:4::/48 maxlen: 48
2607:b600:5::/48 maxlen: 48
2607:b600:6::/48 maxlen: 48
2607:b600:8::/48 maxlen: 48
2607:b600:10::/48 maxlen: 48
2607:b600:12::/48 maxlen: 48
2607:b600:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:ca:99:81:de:3e:11:ad:4a:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=bfee6143-3a59-424a-a7d6-f33567ee4d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:ab:37:1d:2c:aa:86:15:16:0c:6d:94:b1:
ea:fd:12:c2:76:10:bf:b9:f8:13:c5:f4:8c:a1:f2:
a7:25:22:1a:e6:37:a5:3a:a5:59:d5:1b:7c:4e:39:
da:a2:3b:95:17:45:7a:58:72:65:e5:32:f1:23:e8:
bd:d9:f4:72:6c:d9:50:1b:ec:66:05:5f:5d:92:05:
ef:a5:07:0a:07:36:93:2f:a0:13:c8:bf:79:64:fe:
e7:45:46:a8:1d:44:36:ce:f7:80:04:50:f3:88:8c:
14:7d:6e:85:fb:17:a0:67:c4:fb:84:9f:42:65:e4:
4a:06:54:01:2d:dc:47:c3:99:0e:dc:ec:df:cb:81:
c9:cf:b5:e5:73:76:a7:85:a3:bb:c5:03:b8:52:89:
18:5c:a5:e3:65:1f:4d:cf:9c:b4:6a:22:9c:df:97:
26:99:31:46:b1:aa:44:3d:86:da:38:0c:1d:47:15:
c3:f7:6d:9c:28:ef:20:75:21:de:ec:cc:d5:c5:65:
20:fd:06:d7:1f:5b:71:b1:1f:5e:12:c8:ec:b6:1b:
3f:f1:f8:64:a1:75:c9:f5:eb:cc:7f:54:22:20:64:
d8:21:71:65:4a:e8:83:b7:d2:1f:00:a3:7a:ac:53:
d4:e3:4f:d4:c8:31:ce:15:3f:66:73:95:82:1f:8a:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:B9:6B:D4:C0:49:22:AD:33:8E:18:D6:EE:FD:BB:32:DA:DC:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.96.0-162.244.101.255
204.16.48.0/24
208.67.12.0/22
208.85.128.0/24
208.85.133.0-208.85.135.255
209.42.166.0/24
209.42.191.0/24
209.209.128.0/21
209.209.139.0-209.209.181.255
209.209.183.0-209.209.184.255
209.209.186.0/23
209.209.189.0-209.209.191.255
209.250.32.0/19
IPv6:
2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff
2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff
2607:b600:8::/48
2607:b600:10::/48
2607:b600:12::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:94:a4:08:fa:1f:6a:d8:bf:8e:97:55:86:6e:a5:7d:94:3b:
a8:04:23:94:0c:3d:c5:c2:dd:b2:6d:8d:10:78:bc:32:ec:d4:
a9:55:42:c2:5f:50:fc:59:07:52:e9:91:06:b7:af:5d:8f:e9:
16:f3:45:7f:31:da:89:e5:ee:fd:a0:a3:a2:5b:04:f8:c1:e4:
62:4f:95:45:35:37:96:f8:54:b2:12:62:24:b1:67:93:c8:72:
d4:8c:a9:ce:aa:bb:33:e7:0a:d6:db:17:b3:15:ff:5b:0e:67:
56:c6:5c:bf:f6:db:ab:35:a7:2c:60:94:4e:18:99:e3:fc:07:
55:63:22:e2:b8:4f:55:dc:97:01:b7:da:d0:3c:68:ee:d4:c1:
bb:70:71:ea:c9:71:83:ed:34:d4:cd:e7:c9:43:e3:08:30:76:
01:eb:03:d4:98:cf:80:a2:11:03:54:5e:83:79:ec:bb:f0:c4:
69:22:57:b7:22:99:0e:79:7b:6a:30:1e:02:cb:cb:0d:c3:50:
bf:1a:87:f2:c9:dd:cb:0e:9c:d1:0d:93:1b:d4:6e:48:09:24:
6b:85:3f:75:ff:ce:b8:c8:62:0c:10:86:67:22:43:8e:0f:61:
9c:ed:b2:6d:03:8c:dc:47:84:42:c6:ca:a5:bb:1b:fc:dd:91:
64:b5:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:03 2026 by rpki-client