
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfa7682-aaab-3b45-ad97-9c1f733bb18c.roa
File: bdfa7682-aaab-3b45-ad97-9c1f733bb18c.roa (raw, json)
Hash identifier: QZgAvVokidKJmja7ecxafKrY3Pg2I0tSeG4HUpblCL0=
Subject key identifier: 62:20:DA:90:02:11:99:1D:D9:77:A2:EB:50:8F:82:1A:8D:C9:8C:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E76142D494C3D8950A020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfa7682-aaab-3b45-ad97-9c1f733bb18c.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 98.45.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:76:14:2d:49:4c:3d:89:50:a0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=b3e65e88-4604-4f21-9e02-7d4608bc0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:2d:58:04:21:7b:65:c2:1f:0b:da:0b:d9:
4b:e6:be:a4:ff:a1:97:81:8a:0a:52:7d:25:64:56:
29:00:c7:ed:5c:16:9d:d8:b3:43:c6:07:de:7f:76:
60:4c:79:60:c2:0f:b6:52:a0:9e:11:1f:92:bc:e6:
02:af:f6:e5:11:41:56:b7:71:9f:a9:33:f5:88:65:
f3:2e:92:d7:0f:92:80:21:66:a7:a3:41:19:de:3c:
90:ea:a7:97:2c:73:7e:1a:86:ed:54:6e:a4:d1:23:
55:36:ee:39:ec:47:44:a7:01:ed:84:ab:33:4c:e6:
60:db:46:f1:d1:79:0e:1b:64:e1:ed:c3:41:7d:ce:
b0:9c:ac:4d:b2:b9:fa:37:ac:86:94:84:4b:b4:9c:
76:8e:80:13:c6:21:b4:99:b0:29:a8:f4:cd:40:6c:
34:bb:8f:a7:3d:bf:a7:2f:32:1d:e3:93:db:20:d2:
09:6f:54:c6:a0:39:2a:32:6b:06:7b:18:3c:d2:49:
df:4f:b1:2a:b9:95:56:ab:8e:1c:f0:b4:a2:a8:41:
14:59:cf:9a:c0:02:20:21:5c:79:15:72:2c:18:44:
0c:c8:29:86:d5:9f:a3:d2:b8:90:8b:86:5d:3f:16:
08:43:d1:20:da:54:6d:d3:21:b8:09:42:60:bb:0a:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:DA:90:02:11:99:1D:D9:77:A2:EB:50:8F:82:1A:8D:C9:8C:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdfa7682-aaab-3b45-ad97-9c1f733bb18c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.45.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:6c:5b:f1:3a:66:76:f2:bc:ba:3b:fc:6e:8b:29:23:64:51:
08:de:7e:25:ae:1b:33:96:15:4c:a5:a6:2e:a7:fb:dc:a0:39:
1c:e3:bb:d6:88:0a:da:06:1b:88:19:f6:85:da:4e:8c:9b:a3:
2a:95:fe:9a:0e:41:46:25:70:a3:b9:77:49:a1:b3:58:12:05:
1f:e0:51:91:93:ad:d3:8d:b8:9c:d4:e4:db:bb:77:59:db:06:
1d:7b:8c:e6:4d:95:d0:ec:c3:68:11:70:d1:8f:de:78:f3:49:
91:1a:92:af:0a:57:07:53:2f:a1:f4:66:7e:26:e9:4d:0e:84:
eb:a0:e6:eb:5d:04:76:98:34:88:83:23:61:31:ef:b1:f2:1c:
26:33:8d:a6:88:6c:2e:47:a7:88:41:5b:c5:73:56:8c:9b:e0:
92:12:78:16:e3:4f:de:a4:80:03:54:03:96:f5:2a:d1:99:42:
a2:bd:87:93:09:84:2c:10:ac:21:a9:1f:29:b6:dc:0e:80:4e:
f9:1d:1f:51:56:cc:10:c5:f7:21:1a:0b:e1:23:83:3a:5c:c1:
4c:f0:68:59:50:5a:5d:ee:ff:f9:65:4b:04:1a:14:b6:78:d7:
77:ed:c1:90:88:63:71:f2:8b:df:bc:85:0f:7d:00:a9:8a:23:
7f:46:b4:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnnYULUlMPYlQoCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjNlNjVlODgtNDYwNC00ZjIxLTllMDItN2Q0NjA4YmMwZjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUAtWAQhe2XCHwvaC9lL5r6k/6GXgYoKUn0l
ZFYpAMftXBad2LNDxgfef3ZgTHlgwg+2UqCeER+SvOYCr/blEUFWt3GfqTP1iGXz
LpLXD5KAIWano0EZ3jyQ6qeXLHN+GobtVG6k0SNVNu457EdEpwHthKszTOZg20bx
0XkOG2Th7cNBfc6wnKxNsrn6N6yGlIRLtJx2joATxiG0mbApqPTNQGw0u4+nPb+n
LzId45PbINIJb1TGoDkqMmsGexg80knfT7EquZVWq44c8LSiqEEUWc+awAIgIVx5
FXIsGEQMyCmG1Z+j0riQi4ZdPxYIQ9Eg2lRt0yG4CUJguwqtswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIg2pACEZkd2Xei61CPghqNyYxRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRmYTc2ODItYWFhYi0z
YjQ1LWFkOTctOWMxZjczM2JiMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYi3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9sW/E6ZnbyvLo7/G6LKSNkUQjefiWuGzOWFUylpi6n+9ygORzju9aI
CtoGG4gZ9oXaToyboyqV/poOQUYlcKO5d0mhs1gSBR/gUZGTrdONuJzU5Nu7d1nb
Bh17jOZNldDsw2gRcNGP3njzSZEakq8KVwdTL6H0Zn4m6U0OhOug5utdBHaYNIiD
I2Ex77HyHCYzjaaIbC5Hp4hBW8VzVoyb4JISeBbjT96kgANUA5b1KtGZQqK9h5MJ
hCwQrCGpHym23A6ATvkdH1FWzBDF9yEaC+EjgzpcwUzwaFlQWl3u//llSwQaFLZ4
13ftwZCIY3Hyi9+8hQ99AKmKI39GtNI=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:03:32 2026 by rpki-client