
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa
File: ab2f8943-9a5a-3f6e-b252-0107ff406710.roa (raw, json)
Hash identifier: 6WK25dxEuP2bbOkvGcVejcUDjIlQ7edT4oqHZNv0p58=
Subject key identifier: A1:A7:C8:AD:57:A8:95:16:76:F6:A9:7C:88:41:A0:8F:47:FC:E4:3D
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584D003C3B912E4E7D5FACE35400
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa
Signing time: Fri 27 Feb 2026 10:02:56 +0000
ROA not before: Fri 27 Feb 2026 10:02:56 +0000
ROA not after: Thu 28 May 2026 09:02:56 +0000
asID: 14618
IP address blocks: 170.139.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:3c:3b:91:2e:4e:7d:5f:ac:e3:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 27 10:02:56 2026 GMT
Not After : May 28 09:02:56 2026 GMT
Subject: CN=a3cf1584-150c-44da-848a-a4839ca8b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:49:c8:8e:28:33:36:f6:73:07:30:cf:de:
03:3d:5a:17:78:c8:ed:f8:c7:3c:c8:66:18:9b:c9:
83:43:4b:61:21:1a:4a:05:1c:1a:a7:1f:66:fd:52:
21:e3:32:1a:b1:c3:eb:d2:f1:48:c1:d6:5a:e6:59:
52:d1:e1:8a:75:f2:f5:01:91:36:69:fe:a6:f1:5a:
19:0d:54:16:6f:55:36:a7:35:3c:96:45:50:24:cf:
88:eb:14:f0:b5:72:1f:37:23:31:57:f4:15:ef:8e:
1d:f7:bf:c6:78:33:af:89:68:a2:86:cc:4b:2a:5e:
5c:5e:d5:09:70:27:0a:95:6c:62:5d:21:34:86:5f:
b1:23:d8:60:db:13:de:7e:96:37:d5:b5:9a:37:0c:
2a:cb:61:0a:63:73:d2:ac:a6:69:76:09:94:71:f0:
20:5e:02:bc:cc:d9:9b:98:c7:21:87:9c:3c:e6:2c:
83:a2:b1:cd:75:03:f4:89:29:80:de:a0:12:d3:94:
b8:50:74:49:c6:0e:bd:cc:e6:35:d3:03:14:81:06:
bc:5c:af:26:a3:67:9b:30:14:23:45:bd:c3:57:20:
c1:9a:91:c2:d8:65:f7:c9:56:98:3f:06:7b:48:76:
a6:60:c1:9e:3e:da:a3:c2:b6:5a:89:16:1f:d3:74:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:C8:AD:57:A8:95:16:76:F6:A9:7C:88:41:A0:8F:47:FC:E4:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.139.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:43:d8:a7:9a:4d:db:ab:a3:9e:e9:c1:fb:00:5a:28:e3:fd:
3a:6d:2d:de:18:46:32:cd:0a:93:49:eb:5f:19:b6:0c:7c:1d:
6f:d9:6a:a7:65:b6:b7:18:1e:f0:3a:45:66:5a:4b:ee:c3:00:
cc:c7:48:48:9c:41:c1:a5:86:af:23:04:b5:7c:6c:13:5f:53:
61:3f:69:d9:32:85:26:b1:2e:eb:17:13:e9:41:68:5a:73:8a:
0d:ef:8c:f5:26:4f:04:59:5d:75:d5:ab:31:61:1d:25:60:a7:
d9:63:75:92:a2:06:ee:d6:59:d3:e4:7b:3b:af:7d:95:49:dd:
e1:1c:e0:26:3d:ec:ad:e6:ba:38:83:3c:34:c4:af:4a:58:f3:
a1:7c:0e:c1:af:61:78:34:27:30:7d:eb:95:a4:c6:50:3f:dc:
a1:d0:d3:45:13:7a:d4:a2:ad:7f:83:f1:a0:16:08:a2:ca:09:
33:31:2c:24:f0:6e:ff:c3:ad:2e:07:7f:f8:be:f0:f8:76:95:
83:78:03:60:64:0b:e4:ee:49:04:25:f0:e6:4c:58:79:47:bd:
79:6d:3e:b6:93:1f:60:c8:17:20:de:ec:8a:4f:13:91:31:d3:
85:f5:21:c2:32:5e:57:35:d7:c7:bc:23:60:e9:e3:ef:ee:a4:
c3:1d:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:29 2026 by rpki-client