
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa
File: bd300894-a5be-32ac-baec-de7c22b9cdb4.roa (raw, json)
Hash identifier: D8ghyLctdopNyNrAcJ/qktwEQmMijFFPxqlJ8f0UnUs=
Subject key identifier: 76:CC:9D:62:BD:15:BD:35:87:57:FD:41:3D:03:0E:2D:4E:25:33:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4978DE3241B450276F21889C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33667
IP address blocks: 76.20.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:78:de:32:41:b4:50:27:6f:21:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=6f862469-a5a9-46a3-8a73-95a768087c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:eb:6d:ac:ea:ec:f6:13:d9:67:e5:71:73:
f9:d5:d6:9c:11:9d:0f:95:a4:8d:e2:50:3a:42:bd:
f4:12:18:18:4f:fd:66:3f:a2:c3:6c:5d:31:27:50:
1b:78:fe:3d:9d:f5:89:64:39:75:87:0d:6d:55:3e:
22:15:c2:d7:8f:33:47:3a:97:91:85:df:17:a2:5b:
d8:7f:75:da:b5:84:5c:00:77:71:c4:5b:24:71:39:
13:b4:c4:34:56:e9:b4:0f:2f:d4:97:9c:9f:88:ea:
93:7c:2e:f1:52:4a:d3:ab:a8:71:f7:8e:63:80:e8:
ec:ed:84:83:5f:3e:99:31:0d:8c:d0:05:a9:0b:1f:
86:fe:ff:37:04:7f:04:7a:1d:2d:60:3a:c6:b5:21:
eb:c1:0b:cc:74:ef:53:7c:42:4a:0c:3d:c8:90:28:
01:6d:38:d6:a6:6e:8a:bc:32:84:13:42:f0:ad:be:
92:51:ec:a8:5f:d9:c5:40:1a:85:38:4e:dc:ab:ba:
e8:af:48:af:0b:3e:05:ad:95:ba:c6:ef:79:53:24:
64:36:37:94:e3:5b:d2:7d:2b:d4:f8:fb:23:b9:3a:
c2:05:a4:5d:43:67:21:ab:f9:2c:39:1c:4d:54:98:
b7:56:6f:1e:57:96:bd:27:e9:a5:2d:16:ab:93:fb:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:9D:62:BD:15:BD:35:87:57:FD:41:3D:03:0E:2D:4E:25:33:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd300894-a5be-32ac-baec-de7c22b9cdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.20.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:97:f7:79:a4:5c:53:08:0f:d4:ab:64:07:7e:93:35:ad:96:
c8:c9:e6:2c:6b:ef:64:ec:26:4c:bc:53:6f:88:11:96:0b:3e:
d9:7b:58:b5:e7:e9:15:be:5d:31:72:88:6d:9a:87:15:bc:95:
f3:05:b8:ef:98:9c:e0:1c:4a:e0:86:8f:ee:b1:be:a3:c0:3e:
91:f7:10:89:51:3e:ed:70:a5:d8:42:b6:81:87:46:bc:eb:ca:
54:50:ce:07:d8:d3:e8:c2:c8:84:77:43:7d:7f:b9:15:61:e8:
bb:65:ef:9b:e2:38:d4:15:1c:d0:ec:b5:74:2f:e2:b1:74:75:
5e:c9:d3:5a:7b:fa:f6:1b:0f:69:1a:02:c1:d4:63:e6:3d:97:
51:ee:c7:4d:c7:8e:1e:5d:37:fd:84:ec:f0:a3:1d:94:67:f4:
03:66:e1:e5:1c:e9:41:1c:4a:09:71:2f:97:2f:c3:3b:0a:5f:
bd:ac:2a:1f:eb:23:f0:db:6c:a5:69:a4:0f:35:ae:3c:48:8f:
bd:16:80:b0:94:7a:8f:42:b6:7d:75:06:19:fb:88:4c:ce:18:
16:03:e0:5e:5b:93:f5:67:ac:c5:8f:0e:20:cf:9a:7e:53:ba:
07:89:16:a5:29:fd:9f:46:92:00:1f:e7:64:6b:4a:d4:ff:8f:
35:33:2d:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeN4yQbRQJ28hiJwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmY4NjI0NjktYTVhOS00NmEzLThhNzMtOTVhNzY4MDg3YzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Djrbazq7PYT2WflcXP51dacEZ0PlaSN4lA6
Qr30EhgYT/1mP6LDbF0xJ1AbeP49nfWJZDl1hw1tVT4iFcLXjzNHOpeRhd8XolvY
f3XatYRcAHdxxFskcTkTtMQ0Vum0Dy/Ul5yfiOqTfC7xUkrTq6hx945jgOjs7YSD
Xz6ZMQ2M0AWpCx+G/v83BH8Eeh0tYDrGtSHrwQvMdO9TfEJKDD3IkCgBbTjWpm6K
vDKEE0Lwrb6SUeyoX9nFQBqFOE7cq7ror0ivCz4FrZW6xu95UyRkNjeU41vSfSvU
+PsjuTrCBaRdQ2chq/ksORxNVJi3Vm8eV5a9J+mlLRark/tOSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbMnWK9Fb01h1f9QT0DDi1OJTODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQzMDA4OTQtYTViZS0z
MmFjLWJhZWMtZGU3YzIyYjljZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTBRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACX93mkXFMID9SrZAd+kzWtlsjJ5ixr72TsJky8U2+IEZYLPtl7WLXn
6RW+XTFyiG2ahxW8lfMFuO+YnOAcSuCGj+6xvqPAPpH3EIlRPu1wpdhCtoGHRrzr
ylRQzgfY0+jCyIR3Q31/uRVh6Ltl75viONQVHNDstXQv4rF0dV7J01p7+vYbD2ka
AsHUY+Y9l1Hux03Hjh5dN/2E7PCjHZRn9ANm4eUc6UEcSglxL5cvwzsKX72sKh/r
I/DbbKVppA81rjxIj70WgLCUeo9Ctn11Bhn7iEzOGBYD4F5bk/VnrMWPDiDPmn5T
ugeJFqUp/Z9GkgAf52RrStT/jzUzLRQ=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:57:37 2026 by rpki-client