
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa
File: bcf62835-8319-39c6-80fb-960ad2427989.roa (raw, json)
Hash identifier: hQ8CLB5l/MWxgD5iUb+/difTxVyosVKU3wp9hnXWXqk=
Subject key identifier: C5:5F:86:C6:9A:86:22:64:45:AE:13:C6:3B:68:84:8A:A3:CF:04:E2
Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial: 010D0C9F4328584CF862AD82F923A570911C8B00
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa
Signing time: Tue 24 Feb 2026 14:33:56 +0000
ROA not before: Tue 24 Feb 2026 14:33:56 +0000
ROA not after: Mon 25 May 2026 13:33:56 +0000
asID: 14537
IP address blocks: 67.211.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:62:ad:82:f9:23:a5:70:91:1c:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Validity
Not Before: Feb 24 14:33:56 2026 GMT
Not After : May 25 13:33:56 2026 GMT
Subject: CN=80ad4a1e-5826-4a6c-a705-faaa1463eef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:18:63:8e:14:8c:50:2c:13:13:61:fd:7c:
a4:37:65:38:af:d4:16:01:d3:9b:c3:e1:f2:6e:ed:
51:0a:36:ec:0b:c7:f2:47:ed:c2:e0:b2:38:53:79:
d2:2b:79:ed:cb:44:52:18:91:d3:26:b6:4a:19:38:
72:c4:ee:ff:10:ad:7a:93:f4:7f:40:17:24:af:fe:
85:f5:1d:a9:b7:45:c1:57:e6:49:15:d9:c3:56:83:
cd:2f:43:ff:cd:48:c3:60:94:56:24:6e:dd:cd:ef:
bc:3c:02:f9:3e:32:a3:64:be:a0:03:07:3c:bc:fb:
e5:38:2a:c4:e1:40:41:c5:68:d5:35:91:1b:95:25:
af:ef:1a:c9:08:9d:53:cf:10:61:c4:a7:04:2d:16:
ff:c8:be:07:7f:bd:ce:2c:65:c9:04:8e:81:a6:6b:
11:b9:65:0e:62:4d:39:b9:73:9f:a1:79:03:73:15:
d4:27:29:26:97:b8:6a:e7:c5:a3:f1:b3:67:c1:29:
f7:d1:28:f6:b2:4c:72:63:9b:d0:5e:de:d7:cb:bc:
7f:4f:04:21:40:4b:79:8f:6f:87:55:25:c4:ef:f3:
d5:78:fc:d0:75:73:f0:52:d6:cd:ec:8e:1f:f1:04:
cc:4e:3b:d4:3c:c3:14:a0:ec:49:7e:5d:ef:11:0f:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:86:C6:9A:86:22:64:45:AE:13:C6:3B:68:84:8A:A3:CF:04:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/bcf62835-8319-39c6-80fb-960ad2427989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
X509v3 Authority Key Identifier:
keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.211.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:2c:7d:ec:c7:bb:b1:47:d2:7d:6b:1c:2d:dc:7d:65:4a:f7:
12:0f:19:a5:22:cc:50:e8:15:81:7e:32:50:f4:53:a6:65:76:
1d:35:fd:5e:59:cb:bd:38:b9:b7:35:62:c0:a6:92:40:49:b2:
ee:64:50:c5:4b:6d:7f:2a:d2:2c:e0:30:65:17:c1:2f:39:f2:
b2:bf:90:6e:89:f5:41:cf:b7:63:31:9c:4e:a4:10:75:c1:6b:
2a:28:fd:fd:c0:32:7a:13:28:50:49:15:f6:c7:f2:ca:55:6c:
89:b2:48:7d:18:27:9e:5d:ef:4a:dc:8b:f9:4c:4c:f1:b7:a6:
93:26:88:7d:9f:41:39:bd:94:e9:c9:f6:b5:53:e3:46:9f:ea:
89:1b:6f:34:13:29:b8:10:a0:d9:f0:73:09:4d:e8:27:aa:48:
25:e4:5c:4e:8d:1c:66:e7:09:01:b0:28:66:af:06:86:65:58:
b8:2a:c4:34:4c:f5:29:20:8e:35:dd:76:71:d2:91:a0:c7:60:
af:82:4c:5a:7e:8c:55:8b:26:20:d7:65:99:93:13:16:c6:b5:
8e:c5:a7:de:f3:a1:2f:f2:1d:a2:15:dc:44:4c:f0:60:36:8c:
73:7f:d3:52:56:15:16:36:f7:40:ca:30:fc:f1:e0:4d:6d:c9:
28:75:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:06:41 2026 by rpki-client