
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5e3bd242-69b2-3ca1-9ff0-e9a91798cc7e.roa
File: 5e3bd242-69b2-3ca1-9ff0-e9a91798cc7e.roa (raw, json)
Hash identifier: LDjt83WHr4DHXZRuJR3ZAr58UtgYd/4M+CJ4GiKHpBQ=
Subject key identifier: 4B:6F:87:84:0D:E1:DB:CD:55:67:76:7C:40:9C:70:0E:1F:4C:F5:5E
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584EA78F11DC12B75B87442575A0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5e3bd242-69b2-3ca1-9ff0-e9a91798cc7e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 170.139.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8f:11:dc:12:b7:5b:87:44:25:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=12e33f02-e048-4ad4-9f83-59dc3aa4338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:46:31:3f:db:f8:3c:7c:8b:b1:01:69:fc:
9b:cc:0a:a7:dc:93:41:b5:be:18:64:f9:87:5c:2a:
a9:b6:de:da:0f:8e:ca:b1:1b:55:99:86:c5:99:7f:
53:80:16:9d:c0:fc:ee:65:4a:b7:49:6d:b9:ce:00:
72:27:64:84:5e:7c:ca:03:53:03:9f:09:09:93:ff:
ce:f4:1a:07:75:43:52:1b:4f:4d:59:1c:8a:71:5a:
0c:ec:90:55:bc:6e:45:3c:f4:de:0a:b7:df:ea:a0:
0d:9a:c3:c5:b1:74:4d:0b:11:6f:8a:68:55:ef:1e:
22:c4:f0:c6:40:93:46:e1:29:ee:99:c3:0e:05:f2:
63:97:e4:a9:fc:5d:85:8e:ca:c2:29:82:5e:93:e1:
e9:db:90:e1:91:15:09:96:09:7e:55:38:13:2c:b3:
9b:57:76:7e:0b:f4:6c:db:35:d6:90:ca:99:c4:08:
97:29:a0:58:63:9b:4d:8f:32:db:f7:9b:bf:5a:3d:
90:b4:7e:a7:e9:37:5c:eb:0d:d8:06:33:95:f6:dd:
47:1c:bf:a1:28:71:c7:69:2f:29:6a:72:4e:04:d7:
06:a9:d5:a2:d7:7a:78:38:fd:90:6a:11:7f:19:f9:
2b:3f:4d:5b:f2:d9:69:3a:2c:08:15:9e:52:ea:43:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:87:84:0D:E1:DB:CD:55:67:76:7C:40:9C:70:0E:1F:4C:F5:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5e3bd242-69b2-3ca1-9ff0-e9a91798cc7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.139.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:8d:c5:1f:31:68:6f:b8:d6:f1:18:e8:b3:25:68:18:de:5c:
74:ea:25:e3:46:fd:86:11:f3:34:4e:4e:1f:c7:1c:5b:04:2e:
23:b2:29:e1:18:73:4c:fb:a8:12:98:ca:95:68:9f:59:79:5c:
ab:63:a4:01:c1:02:4c:7e:4d:07:81:0d:92:c1:ac:02:c9:46:
a5:62:b0:53:ab:4f:3f:bb:35:18:32:95:86:df:1d:b0:26:60:
d1:3b:53:de:85:fa:64:53:10:a3:35:92:32:d2:c2:3d:45:ec:
70:0b:42:29:23:a9:31:3f:6b:5e:69:07:e1:20:13:81:ab:06:
2b:0d:7d:98:fb:81:a3:52:b1:57:0e:5d:47:e7:66:4c:49:6d:
6c:19:4d:61:e3:42:08:62:6b:c5:d3:6f:bc:34:99:94:eb:5e:
5b:b5:df:76:9c:15:75:e5:9c:0a:d4:e4:be:c6:02:e2:fc:66:
2a:98:bd:05:c6:6e:a3:73:8d:4b:dc:8c:56:4b:98:e0:a5:a2:
dd:ee:4e:32:49:ec:40:40:43:5e:13:b4:76:da:1f:6b:c4:92:
6e:1f:6f:46:c4:4f:69:88:18:81:ae:ef:d2:0b:bd:96:fb:ba:
ad:34:e4:6c:91:c1:98:0e:b6:b5:7a:3a:71:1c:64:07:7a:ca:
48:9d:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:54 2026 by rpki-client