
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf29137a-c9c6-3da3-91b0-72ad9c5fd2f1.roa
File: bf29137a-c9c6-3da3-91b0-72ad9c5fd2f1.roa (raw, json)
Hash identifier: OEttiiIYZsU4WGo4+rguQJZGNLwWp6Yd3BlQcx1cgAE=
Subject key identifier: 69:30:01:49:9D:D9:AB:43:29:91:1B:1D:46:01:A0:E3:66:9D:91:0D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584D83CB1208FE3989A70DD51340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf29137a-c9c6-3da3-91b0-72ad9c5fd2f1.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 577
IP address blocks: 207.35.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:cb:12:08:fe:39:89:a7:0d:d5:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=9a65bb7d-87f2-41c1-8cde-2b73b5d0db5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:44:75:3d:6e:92:fb:b5:ba:cb:6c:5a:ae:
64:17:ba:38:c7:a7:d7:74:a7:6f:c5:ad:f9:05:ba:
36:43:1d:1d:5c:bc:99:72:34:bb:f8:79:d8:52:46:
0d:45:a6:e7:1d:5c:09:b9:df:ca:85:22:1d:b0:35:
ec:4d:4f:4e:b4:55:a8:f9:0b:4f:85:00:f1:5e:4e:
45:5f:77:91:6b:d3:ff:09:f4:a3:5b:93:59:d8:3d:
b5:76:7f:22:d5:a5:1a:b4:c7:f1:de:94:f0:78:d8:
d4:f1:7b:5e:0b:6c:c3:26:5b:8b:a1:d7:8f:2b:d5:
f6:9d:b2:53:98:98:de:02:f1:42:53:e4:3e:e5:65:
8e:2b:c8:f8:ac:94:b6:ce:4f:c7:73:28:2e:f0:5e:
33:f8:23:a1:25:33:4b:e0:e7:26:fe:26:cd:16:32:
d3:15:03:08:4d:89:67:d4:33:4d:06:a2:bc:73:94:
2b:28:95:ad:c2:aa:b6:5a:64:48:ed:34:b6:93:53:
d8:21:71:14:99:bc:39:a0:95:50:24:29:bd:65:b2:
87:a7:dc:2b:44:2c:0f:47:1d:cf:62:ef:b0:1f:8b:
e3:45:92:fe:05:87:c3:01:90:8c:e0:4c:89:fd:0e:
3c:2a:53:0d:e7:6e:bd:b9:fa:01:c2:9f:9a:22:ea:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:01:49:9D:D9:AB:43:29:91:1B:1D:46:01:A0:E3:66:9D:91:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf29137a-c9c6-3da3-91b0-72ad9c5fd2f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:38:14:40:f9:20:39:77:f2:1d:c8:e1:d3:5a:cf:58:66:3a:
03:92:dd:be:5d:9b:81:e6:5e:91:e0:43:32:48:aa:db:5b:28:
8c:82:25:54:15:2c:98:e3:cf:cb:46:e1:fb:ac:6b:f2:4c:51:
31:c2:13:19:bb:0b:e8:14:66:05:f8:99:15:18:c3:71:9c:57:
f1:d0:9f:df:b7:e0:6e:b1:9f:79:fe:85:4f:1c:84:3d:57:24:
fe:86:7f:61:eb:68:de:97:f5:8a:b4:71:55:5f:8d:f8:1e:58:
66:d9:dd:22:e4:39:c5:8b:a7:4d:6c:f8:b2:f6:dc:86:d6:56:
22:45:95:2f:29:96:78:55:d1:21:9c:0e:3b:ae:e0:ba:28:3a:
ee:72:9d:c1:8c:b1:9c:64:b9:8c:a1:61:26:63:5a:92:f7:da:
06:cf:07:1a:8f:e9:ef:9c:07:2e:f6:18:3e:8a:76:d9:5b:ad:
0d:e5:a1:06:90:19:89:5b:e0:b3:38:bd:ca:36:d8:25:96:ee:
83:e1:8f:1d:c2:e2:0a:b5:4c:b4:d5:e6:57:7c:bc:44:0e:fa:
62:b4:5c:74:8a:b7:70:2f:b2:fa:82:f3:0b:83:22:40:ed:72:
40:dd:4e:a2:3b:c7:49:08:ec:be:a2:03:03:c5:d9:fe:d0:0d:
72:bf:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:50 2026 by rpki-client