
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bbafbfb5-21c3-3bec-ac10-2d9b9e26cf4d.roa
File: bbafbfb5-21c3-3bec-ac10-2d9b9e26cf4d.roa (raw, json)
Hash identifier: KLMJc6xqKEgvpgXBKySU6Fw+DmXdiHAC1mVMnIfGz5w=
Subject key identifier: DA:3D:A1:A0:BB:1D:4D:6F:8A:3D:BB:42:5F:90:E8:0D:A2:65:53:0E
Certificate issuer: /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial: 010D0C9F4328584DA6B00A16265A93ACEAEB0F00
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bbafbfb5-21c3-3bec-ac10-2d9b9e26cf4d.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 143.223.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:0a:16:26:5a:93:ac:ea:eb:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=72cb21be-195a-41b1-b62c-5ae08af43c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:2c:31:42:d5:88:c0:14:60:01:65:01:24:
ac:b0:e3:ed:9f:c5:52:c6:ba:dc:c5:ec:76:59:c0:
01:c1:83:56:ac:c8:3e:cc:fc:2e:85:96:3b:32:3c:
da:c2:34:6c:5e:6f:ad:9e:c8:42:47:97:52:38:24:
b7:61:46:64:4c:56:f9:9a:88:d4:1c:73:4a:df:a1:
51:c0:28:6b:a9:09:ec:b4:fc:ca:e0:87:cf:af:a5:
40:d8:e3:2f:fd:11:ae:a2:b1:77:05:1c:cb:31:81:
69:eb:d7:05:75:85:41:76:16:e7:e8:2a:8c:0d:16:
25:51:92:08:a1:d7:bf:18:1b:ae:c8:f9:3e:24:5c:
ca:a8:af:b5:53:33:b2:3c:5a:c2:a8:41:3f:1e:cb:
9d:e4:a2:3a:e1:13:f5:2e:e9:72:54:b7:9c:55:0a:
6e:8f:cd:fb:9b:c5:4f:42:f5:46:1a:a0:cd:33:3a:
49:7b:d2:52:b9:84:35:18:7e:19:02:a3:34:d9:2a:
15:ee:e9:b7:76:f4:54:9a:35:39:f4:e9:a6:a0:27:
46:79:7e:0c:82:27:1a:9e:1c:85:5c:e5:ef:26:67:
c2:b2:cf:37:0e:b1:8a:f3:47:3d:95:0f:54:df:98:
f6:50:e0:40:99:f0:3a:e6:66:a3:cc:cb:12:fb:3c:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:A1:A0:BB:1D:4D:6F:8A:3D:BB:42:5F:90:E8:0D:A2:65:53:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/bbafbfb5-21c3-3bec-ac10-2d9b9e26cf4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
X509v3 Authority Key Identifier:
keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:21:b2:52:2d:15:15:41:60:e7:08:d9:0b:2d:fb:cb:4c:86:
39:b6:ed:20:33:1b:2c:9e:5c:bb:5b:c4:04:19:93:85:06:85:
b3:42:34:4b:16:81:9b:1c:b3:1d:9f:aa:74:77:94:f3:81:38:
08:88:1b:0e:48:a4:f2:9a:98:1e:bf:b4:db:ec:29:e8:3f:c7:
a8:0b:4a:6d:eb:3b:b1:c0:ca:26:ad:c8:d3:02:cd:23:c8:13:
a7:e5:ce:8d:5d:1c:08:ac:bd:1c:d3:0d:74:68:26:ff:5a:d9:
48:c9:3c:20:6c:33:bd:8f:ec:a5:99:eb:01:10:5a:36:68:fd:
ba:f6:e0:4d:98:c9:e0:a7:86:ba:46:86:9e:05:50:f6:a0:06:
31:dd:90:80:e5:70:64:0f:6d:0d:ea:50:34:82:fa:31:72:e2:
b8:5d:a6:86:ec:13:77:88:f6:31:99:10:36:ab:69:ed:7e:77:
13:7a:8c:6c:ba:0e:26:5e:3f:69:44:33:e9:0b:29:cb:3f:6d:
02:9b:1a:9d:d2:5f:9a:8b:36:87:bb:f0:2a:bb:e4:af:49:d6:
a7:5b:b2:82:bc:1a:85:1f:ab:2b:45:1b:17:07:45:6a:1a:c1:
a7:0b:c5:68:03:aa:dd:91:a0:b5:ee:0e:cb:82:65:7e:4e:43:
20:de:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:03 2026 by rpki-client