
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa
File: 70aa9e99-3ca0-38c7-9e56-0c7576209409.roa (raw, json)
Hash identifier: 48g+GUH+A6tqQVKiaBu5KxSPCCNCVTvOQtC5KM24b24=
Subject key identifier: 52:D5:46:6E:95:4A:64:28:5D:D1:25:DD:2C:CE:20:8E:91:62:F7:2A
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584D52EF7E3547363F89E2651680
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa
Signing time: Sun 29 Mar 2026 01:00:24 +0000
ROA not before: Sun 29 Mar 2026 01:00:24 +0000
ROA not after: Sat 27 Jun 2026 01:00:24 +0000
asID: 14340
IP address blocks: 129.77.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:ef:7e:35:47:36:3f:89:e2:65:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Jun 27 01:00:24 2026 GMT
Subject: CN=a715a065-b0c9-417d-ba7b-5c2a0a51c2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:cf:33:30:44:9f:bb:2a:b5:89:54:c2:e3:
e4:25:47:31:e3:00:a5:89:41:ed:94:00:53:f2:a9:
a6:b5:55:ff:ef:77:a4:c2:5b:bb:90:5f:b9:20:46:
c5:13:e7:41:73:06:2c:d3:3b:b1:b0:d4:ed:45:e5:
3d:e4:a8:67:dc:6d:79:cf:67:f8:9c:2f:ab:28:b6:
5e:b7:1b:5c:aa:1c:89:ae:29:2b:2a:a4:dc:1e:06:
ac:41:95:54:ab:df:8e:4f:32:95:f9:04:4d:b9:91:
68:d4:a6:b6:d1:3f:92:df:10:b9:95:d7:e3:65:31:
06:e3:51:35:67:1b:b0:a3:ae:52:45:3f:5d:3f:e7:
55:c3:15:3e:ef:3a:14:25:91:7e:3d:5a:16:ab:c7:
15:fe:bd:33:17:96:d0:b4:2e:13:cc:63:b3:28:34:
6a:df:ac:cd:4f:28:47:6a:f8:04:80:ea:be:4f:cd:
11:f0:62:65:90:22:47:7e:b4:51:16:5b:49:ab:1a:
13:a3:0f:2a:26:9b:1c:5b:2e:6e:2d:ad:ce:fb:fe:
39:2f:2a:85:ee:57:33:a0:04:44:da:a7:d3:5d:1f:
7b:dd:29:3c:3d:b0:85:76:4d:a7:f0:79:bc:0f:0f:
db:02:a3:21:74:65:0c:dd:f4:84:f8:6c:5b:a7:f2:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:46:6E:95:4A:64:28:5D:D1:25:DD:2C:CE:20:8E:91:62:F7:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.77.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:5b:d2:fd:e5:da:68:36:b3:78:13:d5:80:e2:04:0c:f3:08:
db:3b:25:cb:6e:3c:b6:45:da:62:fa:86:c0:24:ad:07:c5:62:
a0:9b:e9:00:61:0c:97:21:04:fd:ef:51:50:c7:72:c7:a1:d0:
34:19:fc:33:39:22:58:a7:a2:8d:28:22:4c:5d:ce:c2:16:40:
4b:bd:21:6f:d6:de:9d:64:41:4c:45:64:dd:c5:af:7b:09:64:
b8:6a:d9:88:a5:98:b6:7f:97:5c:f5:55:c7:f0:8d:55:0d:99:
f0:12:ea:27:f5:e6:70:e1:8c:21:33:a0:cd:03:98:f2:56:fb:
70:6c:fb:eb:62:44:7d:1b:bf:95:97:22:96:e1:e6:8a:fa:ef:
e9:1b:69:e2:c4:ac:cc:ba:11:28:52:a4:09:39:8a:b9:02:b4:
7c:93:80:46:b7:26:c6:55:3f:50:2b:07:42:c4:65:0f:11:36:
a4:cc:29:64:4b:3b:ae:51:3a:93:56:0b:2c:12:3d:4b:4c:05:
50:2c:a4:5e:b1:f9:5f:fe:2f:c2:be:5b:a4:dc:e9:71:d8:ec:
d8:6c:bc:5b:8c:80:1c:c2:44:b8:cc:e0:e2:91:d4:67:56:ac:
fd:94:c3:56:61:b4:a1:6c:ef:48:ae:d5:d2:83:23:82:20:1e:
8c:35:69:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:39 2026 by rpki-client