
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa
File: bca291d0-d607-33d2-a2ce-47c04785d564.roa (raw, json)
Hash identifier: irFHq3nAhqGa+Ov0QxeXz9LWGIxJPR/EOUcuXDMz5FE=
Subject key identifier: 29:6B:04:D1:F4:F3:A9:7B:71:FD:A7:18:F4:EE:93:EC:28:96:CD:85
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA798AA45B376344AB408F800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 209.107.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:aa:45:b3:76:34:4a:b4:08:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1d7b5c3c-8b16-4ef4-a283-5f462f6c03cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:ac:fd:37:81:79:0d:5e:e5:65:1b:94:98:
48:ea:d5:9a:7a:a8:99:40:68:da:69:f4:7b:33:a3:
3d:b0:9a:55:0b:fb:fd:46:10:6c:a9:36:82:97:05:
07:21:f6:88:5a:be:1d:43:8d:0c:e3:c5:2a:9f:ba:
96:ee:44:d6:d2:7e:9e:bf:64:61:f8:53:45:e2:87:
53:a5:61:9b:86:7d:ff:ed:f6:e4:12:e3:5e:2f:70:
7c:70:40:3b:bd:ce:59:c4:df:ea:36:01:46:6d:6a:
d5:c8:42:99:51:45:d2:c5:eb:50:5b:86:5d:a5:f2:
14:98:78:7f:cb:76:b1:be:af:87:7c:46:de:0b:8a:
a8:30:e7:55:85:55:86:32:4c:88:92:32:43:5b:ad:
6b:9a:b1:f6:fb:46:ce:41:51:5b:52:c2:90:6c:39:
24:44:ec:1e:c9:b9:14:ab:1a:72:80:2a:bb:64:1b:
03:72:dd:93:e5:6f:cd:3e:21:5f:f6:87:98:db:5e:
29:f0:68:6c:0d:0a:b7:12:d9:5f:b9:50:d1:73:de:
af:f9:5c:6c:38:61:62:8f:f4:5d:1e:27:9f:5a:6b:
3d:bf:cf:58:bd:f2:b5:7c:74:b5:df:76:37:f5:37:
86:d2:cc:70:e1:1a:a1:a2:ad:42:c3:3d:ce:25:79:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:04:D1:F4:F3:A9:7B:71:FD:A7:18:F4:EE:93:EC:28:96:CD:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bca291d0-d607-33d2-a2ce-47c04785d564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:d2:f9:6a:04:d0:46:3c:95:1e:a8:01:c8:37:e2:27:be:a5:
fd:5a:0f:c3:4f:71:a4:8e:29:c4:05:1d:cd:63:61:2d:70:61:
26:49:1d:2e:6d:b4:f5:61:ca:89:37:1d:38:ad:ac:77:f9:b9:
33:0f:51:3f:be:40:3a:1e:00:8a:51:c4:21:16:a4:29:ca:64:
c6:09:a2:a3:af:b8:f5:54:47:14:e2:5d:00:bb:9d:ec:e6:cb:
3e:bd:ad:67:5f:f4:88:5a:76:45:bb:e2:ba:d4:0f:67:cc:e7:
22:13:9f:0d:1b:de:2b:e6:37:97:85:09:b1:89:48:82:ca:da:
e6:44:d9:c8:15:e1:bc:f5:f5:b6:2e:9b:41:5c:57:22:e7:b8:
23:03:ed:d7:5b:d5:3b:b2:68:49:89:0f:82:ba:f2:cf:6b:8f:
89:b6:73:10:e9:19:21:57:dc:ce:30:d9:55:0e:3a:dd:70:37:
57:24:dc:0d:d2:69:89:d6:03:a6:fa:78:24:15:ab:f6:67:e2:
77:fe:88:ed:6a:4a:18:c8:60:ff:e0:61:4d:c3:6c:d4:06:c7:
93:54:e0:b4:d2:92:9f:a4:e1:fa:de:52:23:3d:a6:31:5c:46:
b1:fe:ef:4f:8e:02:3a:b3:15:60:8a:46:0d:65:9c:97:b6:77:
e2:da:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:32:10 2026 by rpki-client