
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa
File: bfd3961a-a871-3f89-902e-5f5403f87c57.roa (raw, json)
Hash identifier: /j1R2Va+TsXNlDvGB6JrIfymfwkpkSPn8OAmRz9pBYY=
Subject key identifier: 5C:17:97:8A:97:74:71:FE:04:65:37:4C:D9:64:E8:E5:FA:DC:AD:C0
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584DA8158292BC2809DB98371C80
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 393878
IP address blocks: 64.18.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:82:92:bc:28:09:db:98:37:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=dad187b4-ebfc-450f-b58e-cdd2d1b2e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:79:dd:de:3e:29:bb:11:39:8b:e8:a0:55:
aa:99:24:ae:8f:3d:64:67:4a:c5:fe:f8:3e:e1:53:
d5:b2:cc:b0:42:60:04:22:d3:4e:4a:34:5b:cd:19:
89:40:27:c2:bc:6e:d6:3c:02:a8:11:7a:ff:c1:9d:
89:c4:90:4a:3c:22:17:a5:74:c2:2d:69:6c:b7:fe:
1e:37:c6:4e:e0:fc:ce:32:41:d6:0c:a8:5a:77:89:
25:05:65:93:85:9e:2a:5b:02:49:18:39:9a:cc:68:
61:0c:7b:6a:3d:05:f9:f7:ec:14:13:4d:d0:ae:75:
07:aa:75:a9:f7:54:8b:4a:e0:b0:8b:a8:9b:19:43:
b0:29:9d:1c:b9:89:95:89:b5:cb:12:fd:97:2b:36:
0a:e5:3f:71:73:a1:c7:c6:28:dd:a5:5c:00:ff:d4:
59:2d:67:cc:8c:56:88:d2:9e:cc:2c:57:12:bb:98:
94:af:61:a0:c2:74:68:8f:3d:11:c3:4c:01:28:61:
06:42:04:98:48:f7:b3:5a:45:6e:fd:5f:de:a3:ad:
1c:24:bb:06:9d:ac:1e:24:8c:84:5b:e8:87:ae:9d:
a6:9b:65:71:da:09:56:a2:cc:11:b4:46:d9:ff:d3:
f1:06:00:e6:8b:be:4f:2b:2f:9e:81:81:ab:2b:07:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:97:8A:97:74:71:FE:04:65:37:4C:D9:64:E8:E5:FA:DC:AD:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/bfd3961a-a871-3f89-902e-5f5403f87c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.18.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:15:92:fe:62:ea:54:7d:b2:85:56:88:34:87:e1:91:1d:66:
8f:f2:24:74:f5:a6:0a:e9:e8:5b:26:14:0d:36:9d:08:12:2b:
62:61:a3:98:cb:32:19:86:e2:71:20:aa:7e:26:3d:44:7a:4f:
e5:1f:fd:1c:57:21:61:1a:82:c5:6a:a2:7d:50:f4:b5:1e:bf:
47:ba:ea:2c:13:ec:01:bc:3f:34:82:03:5a:29:f4:61:6c:6b:
c9:1c:0f:0f:52:cc:49:82:1f:11:e7:9b:85:ea:2a:49:9e:59:
d2:0c:bf:47:3c:d7:d2:fb:c5:47:e8:e3:70:b9:97:11:74:89:
63:9a:d4:14:da:78:95:a4:0a:a0:55:b4:1c:f5:a9:b3:3d:a4:
0b:99:0a:cb:95:6b:f9:1c:47:a1:52:72:07:3d:1c:3c:15:16:
86:8c:37:54:df:4b:9b:9b:b5:92:42:44:af:70:48:d2:ea:70:
8d:7f:fb:d5:e2:20:17:48:a3:eb:7f:a8:f8:33:74:4a:af:a8:
89:10:08:48:94:ec:f9:bf:6c:aa:86:96:a4:a7:33:d9:16:16:
35:61:87:63:92:fa:8b:fe:09:93:de:3c:2d:4c:d7:80:7f:8e:
fd:2e:94:04:1e:52:35:d9:ba:da:11:12:06:73:50:59:61:18:
46:bd:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:38 2026 by rpki-client