
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/2581b996-58f8-3643-9fbd-50918434ddcf.roa
File: 2581b996-58f8-3643-9fbd-50918434ddcf.roa (raw, json)
Hash identifier: WL7wDZ507m5SoPB3Jg56nLhqU0Ma8w2VTuRfoFHFXp4=
Subject key identifier: 8D:52:EC:7A:E3:DD:A9:BD:8B:75:5E:62:14:B4:A9:94:E6:D0:CA:5F
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584D003A51136350C6CDCE8E4580
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/2581b996-58f8-3643-9fbd-50918434ddcf.roa
Signing time: Fri 27 Feb 2026 09:59:05 +0000
ROA not before: Fri 27 Feb 2026 09:59:05 +0000
ROA not after: Thu 28 May 2026 08:59:05 +0000
asID: 16509
IP address blocks: 149.60.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:3a:51:13:63:50:c6:cd:ce:8e:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 27 09:59:05 2026 GMT
Not After : May 28 08:59:05 2026 GMT
Subject: CN=2641d9fc-ee3b-4420-8af7-41b7f1d07fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:a9:55:f3:2b:71:f2:4c:05:56:8b:62:1d:
89:18:59:df:bd:a0:c3:1a:8d:a5:6b:8d:c3:e9:ad:
b1:b1:15:d6:e4:ef:b2:82:7d:dc:ea:83:71:f3:b5:
3f:64:4e:be:9a:f3:05:f8:78:95:9f:9e:15:2c:7d:
96:ac:69:ad:45:e4:91:84:e0:a6:01:c8:cd:8e:0a:
70:4c:80:64:e9:8c:ba:36:b9:24:4f:8e:eb:90:14:
91:24:e1:01:6c:08:ab:f6:97:4b:8a:f6:2e:e1:83:
69:d9:49:32:59:c3:2a:c1:48:ff:bc:70:e5:39:3a:
59:09:7c:96:c0:29:79:1c:42:dd:8b:ae:1c:25:6a:
ee:3e:c4:a8:ed:38:f4:da:e2:c2:0e:21:07:0e:f2:
cb:94:19:b8:77:44:c3:88:4e:03:e9:b5:39:9a:79:
d5:af:1b:8e:3f:7f:8d:3e:f0:40:96:79:f4:16:0a:
00:27:13:ce:a1:8a:3d:3e:2a:5e:1e:0d:5f:00:82:
b9:9a:fe:b5:68:22:6b:11:4f:a4:40:04:39:69:e1:
ca:fc:7f:ed:07:11:91:83:dd:6b:12:11:50:cd:0c:
0c:8e:58:84:34:b6:ab:93:64:43:30:01:7c:d3:62:
5c:4e:0b:07:38:36:4c:f0:68:39:59:bc:f1:37:c4:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:52:EC:7A:E3:DD:A9:BD:8B:75:5E:62:14:B4:A9:94:E6:D0:CA:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/2581b996-58f8-3643-9fbd-50918434ddcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.60.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:8d:2c:2e:9a:06:5c:11:90:07:d2:0e:e1:aa:6a:b8:70:bb:
cc:fc:19:eb:c8:41:f1:bf:10:36:2a:9a:92:f1:16:3d:96:96:
46:9f:8f:5c:5e:cd:77:25:f8:67:ff:fa:ba:86:8a:5f:55:ac:
97:00:d7:ae:28:f0:5e:c6:f5:52:89:1a:8c:c5:6d:10:2f:3c:
87:81:35:50:79:21:f9:00:95:6b:ba:bc:05:67:2b:54:08:bf:
b3:cc:96:0a:52:60:87:8e:83:31:3c:10:cc:c6:3f:ea:35:6e:
78:cd:eb:a7:58:ba:59:61:79:65:a2:0b:b5:81:6a:23:00:e0:
64:38:c1:3e:22:b1:fa:af:12:f0:76:a2:1a:0e:81:b3:cc:10:
ec:f1:d6:d4:91:a7:55:aa:76:9b:8e:38:17:7e:cd:df:13:ce:
08:94:de:f0:8c:77:68:31:15:6b:58:83:f6:55:cf:31:f0:9d:
d0:dc:7d:9d:fc:db:93:44:d9:46:85:52:22:d9:ba:c5:47:ad:
04:fd:70:df:7c:e0:f0:61:5f:41:f5:6e:54:d9:f5:72:f3:79:
5a:c5:f6:1d:f1:cd:d9:4d:f0:e9:d5:46:58:c7:c7:8a:7d:59:
c9:56:e2:65:8e:cc:b3:9c:2e:6f:5c:af:8d:a4:a0:ca:de:b4:
69:4e:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:36 2026 by rpki-client