
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bf5abc73-4a6f-397b-b9d2-fc02c0eba948.roa
File: bf5abc73-4a6f-397b-b9d2-fc02c0eba948.roa (raw, json)
Hash identifier: Bt3QSILsP1ukMe26GT0czW7Z949ChZXC1YorYneY1OU=
Subject key identifier: 44:E3:F7:F7:F2:10:2A:3C:CE:95:DA:B5:04:E9:61:F5:1A:D9:CE:A3
Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial: 010D0C9F4328584D5FC15CD0D9B818A46AC96020
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bf5abc73-4a6f-397b-b9d2-fc02c0eba948.roa
Signing time: Thu 02 Apr 2026 15:12:58 +0000
ROA not before: Thu 02 Apr 2026 15:12:58 +0000
ROA not after: Wed 01 Jul 2026 15:12:58 +0000
asID: 12025
IP address blocks: 148.51.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:c1:5c:d0:d9:b8:18:a4:6a:c9:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Validity
Not Before: Apr 2 15:12:58 2026 GMT
Not After : Jul 1 15:12:58 2026 GMT
Subject: CN=09e96db3-fc0c-4404-a16e-7975f6572b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0b:4f:ae:b0:0b:4c:7a:d0:38:8c:34:ac:3e:
0e:39:b9:fa:13:e8:52:02:56:ec:16:cd:8d:ea:09:
95:40:99:27:ac:42:64:04:a5:58:9c:e4:85:9f:c4:
2c:cb:f1:af:6b:5e:60:96:1f:e4:1e:3e:fa:c6:1a:
26:45:9b:5f:5c:b9:dc:72:a2:62:3b:e9:b0:11:cb:
0a:2e:6c:89:15:16:a7:61:e5:4d:dc:08:da:ad:df:
ad:66:9e:18:d8:ad:98:e9:aa:d7:9d:a5:9a:a1:05:
e2:5d:d6:c5:c5:fe:aa:fb:95:18:12:64:38:b5:6b:
fc:a2:36:40:c3:a6:11:8a:81:33:72:b1:76:44:fd:
7b:29:e2:dd:4c:c9:fe:1d:42:e8:8c:43:12:06:da:
b4:e8:80:fd:f3:8f:77:74:0b:0d:70:bb:1b:37:5c:
95:5b:a6:05:16:e9:28:72:39:76:10:46:ba:b1:77:
28:2a:8c:63:3b:4c:89:54:a6:75:c6:4d:70:59:0c:
9f:44:9f:11:bc:22:88:6e:a7:01:1e:fa:0b:84:f8:
a8:6f:b6:59:b9:58:ee:40:0d:b2:28:b0:46:16:a0:
25:f6:ae:35:ff:75:d5:05:3e:3d:04:8d:c9:b3:87:
bc:bf:f2:a2:1d:0c:fd:c4:c6:f0:a3:e9:d1:9c:ef:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:F7:F7:F2:10:2A:3C:CE:95:DA:B5:04:E9:61:F5:1A:D9:CE:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/bf5abc73-4a6f-397b-b9d2-fc02c0eba948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
X509v3 Authority Key Identifier:
keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
sbgp-ipAddrBlock: critical
IPv4:
148.51.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:1e:fb:9c:37:7a:81:4a:97:e0:5f:8e:9c:22:02:6a:44:08:
b0:11:8d:00:68:3d:8c:a9:20:e1:a8:22:2f:23:31:84:9c:08:
53:00:c8:88:c5:ea:54:ca:87:c6:65:1b:7f:d8:89:04:ef:ed:
fb:45:fb:7f:44:b6:d0:f8:66:41:79:bd:b9:d5:bd:a4:9f:84:
88:01:86:20:8f:21:70:30:ea:00:7c:a0:ff:c6:9e:b8:1d:61:
27:43:a1:67:e0:c3:e9:64:02:4f:9f:c7:1b:c1:14:b9:79:d3:
f5:4a:e7:02:e6:6e:c1:c8:7d:e2:be:bb:6d:82:40:79:2d:ac:
ae:22:3c:76:13:80:65:d1:7e:a7:2f:ed:d6:af:b7:d7:04:b5:
c7:35:78:d9:f4:9d:dc:98:26:74:9d:11:ad:21:40:8e:5f:42:
7d:0d:73:88:02:f1:55:56:77:0a:6e:4c:d3:83:a5:af:15:46:
33:ce:ba:e1:c8:bd:65:1d:17:8a:7b:1f:18:cc:3a:95:5f:1f:
73:2c:74:5e:17:36:fe:fc:d3:70:81:94:99:61:7c:c4:1f:f9:
26:f9:46:93:d4:b1:e9:71:8c:87:7c:e6:22:2f:6f:e7:60:6d:
95:ee:55:3a:a0:93:16:87:d4:44:ef:b8:b5:ec:3d:40:5e:28:
f1:7e:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:03 2026 by rpki-client