
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa
File: ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa (raw, json)
Hash identifier: U39kyoMk1hEY3TnvoADVpaSeR5dPnIRKzqoY+NTl9jI=
Subject key identifier: F2:36:0A:9C:CD:29:2F:21:95:8B:F3:67:B7:A4:2E:74:25:D4:55:C5
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F4328584F0ED23853400910910EDA32F0
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 35908
IP address blocks: 66.186.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:38:53:40:09:10:91:0e:da:32:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=642ed148-5806-436c-8c56-4615a54b8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:77:7e:8a:e7:85:99:f7:a9:d2:f3:6b:71:
e9:4e:14:be:8b:4a:55:f6:76:d4:9e:9d:c6:47:ca:
fd:70:cf:f1:85:5d:e9:e9:61:7c:79:91:bd:42:31:
39:24:af:a4:20:7a:39:16:f0:78:8c:8d:4c:4a:60:
4d:c5:5e:ba:a2:83:57:fd:84:1f:5a:74:16:ea:08:
23:e4:cd:32:e9:7d:50:cf:dd:7a:41:f4:73:73:bb:
04:3b:8f:f3:e9:56:e3:84:dc:cf:11:0b:ef:23:84:
f7:e6:9d:54:2f:3e:1a:c3:c2:70:7b:46:3c:2f:af:
f0:54:44:37:f8:5c:c5:46:d5:c2:a0:21:89:17:66:
71:ca:24:43:c4:d7:9b:d1:a0:23:8f:a2:21:ab:77:
fa:b9:c4:6e:2a:6a:56:ad:54:aa:68:c7:a3:26:9d:
ad:81:d1:e7:42:97:45:5b:6c:af:ff:52:4f:31:f3:
ae:eb:7f:8b:4f:be:a7:46:7b:b2:98:ab:ef:20:cd:
c9:1d:c3:ea:15:01:59:d4:10:e3:41:bc:3e:c4:32:
06:95:b0:d7:f3:d4:f1:e5:40:1b:9b:4a:04:08:82:
70:23:7f:35:d7:75:35:77:c7:28:9e:dc:15:61:00:
d5:2c:b0:57:39:d9:ee:7e:14:6d:29:f1:f6:e5:27:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:36:0A:9C:CD:29:2F:21:95:8B:F3:67:B7:A4:2E:74:25:D4:55:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/ee2cee80-6692-307f-a0ee-39ee3e61fd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
66.186.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:cf:5d:de:c1:3d:af:58:b4:a2:20:d2:f9:14:85:1f:fb:f8:
f1:0e:58:6e:39:61:ac:dc:46:c7:99:0f:3b:3d:e1:57:4c:c6:
b5:bf:2e:3e:fe:bd:1a:4b:06:38:62:8a:03:7c:b6:31:22:f7:
9f:11:15:36:9f:75:68:2e:fe:dc:6e:6b:7a:7e:c5:5e:52:91:
ad:1b:8b:b7:bf:f8:c8:8b:0d:a8:13:14:9e:3e:36:0c:53:bf:
d5:fc:1c:fd:d8:ab:57:c8:d9:d2:1d:8c:b6:d7:f4:01:2d:6b:
c4:32:d1:d0:1a:97:8f:3f:e3:91:6f:b1:b0:bf:f0:22:9a:f0:
ac:5d:e8:6a:0e:c9:42:ef:50:df:e4:d2:d7:93:22:51:e1:4a:
33:5e:48:4a:9b:90:6c:12:f0:f6:f3:4c:86:4f:ba:e2:99:7b:
2f:62:8a:8e:4b:d5:d7:1c:53:13:1d:ac:78:9f:83:35:3b:d1:
ce:d2:82:ec:be:ac:be:5a:fd:a8:dc:83:93:0d:41:f8:f5:75:
ca:cb:f7:f9:cb:90:e0:a9:4c:5a:bc:e9:ac:5f:5a:ca:1d:60:
b2:dd:0d:cd:59:af:2c:aa:e9:7e:db:2e:33:1e:91:18:5b:76:
81:69:c6:b5:45:2f:bd:6e:b7:14:57:35:6e:b3:b8:41:83:e5:
7c:00:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:10 2026 by rpki-client