
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bd10844a-123d-3490-bb2a-7ceee45ed458.roa
File: bd10844a-123d-3490-bb2a-7ceee45ed458.roa (raw, json)
Hash identifier: A49EU2yeTfMXlwZbzjL+Xk2WUZivXQhf8zlhfl/T7+c=
Subject key identifier: 9D:CA:D8:EF:7B:BE:65:BB:7F:26:C8:D0:B6:73:B5:94:76:74:4F:5F
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584F0C0779DE739D8FED8F223780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bd10844a-123d-3490-bb2a-7ceee45ed458.roa
Signing time: Thu 03 Sep 2026 01:00:12 +0000
ROA not before: Thu 03 Sep 2026 01:00:12 +0000
ROA not after: Wed 02 Dec 2026 02:00:12 +0000
asID: 270128
IP address blocks: 204.157.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0c:07:79:de:73:9d:8f:ed:8f:22:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Sep 3 01:00:12 2026 GMT
Not After : Dec 2 02:00:12 2026 GMT
Subject: CN=b3825612-9347-485a-b7ad-032e2297c817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:7d:b3:a0:f0:00:9e:d5:4e:26:63:a6:31:
bd:04:86:db:33:9c:63:49:d4:9d:f1:af:c1:0c:b1:
b0:fc:ec:33:2a:33:a1:8d:7a:55:e2:46:41:94:7b:
31:59:a5:41:dc:59:31:2a:b9:13:c9:43:9d:a2:7d:
5c:cf:f7:be:4f:d0:32:be:1e:6a:02:26:90:5a:97:
ee:37:be:3c:f1:3a:d6:39:49:37:27:c9:13:b5:0e:
b0:af:80:81:a8:93:1b:3b:da:72:36:47:83:2f:32:
54:18:75:c0:69:4a:c8:63:6f:e5:d9:7b:26:0a:34:
91:56:f2:ff:1a:c0:f5:e6:67:23:05:d0:4f:71:f4:
fb:f9:a0:2d:fe:9d:ae:31:2e:3d:0c:2f:87:10:91:
65:64:42:09:59:c4:34:65:36:5d:72:58:ae:8a:4a:
bb:11:d2:0d:73:78:96:9b:ff:eb:1f:27:13:6a:fe:
7d:bf:bd:05:9e:1f:09:cb:8b:f4:d1:c2:60:95:5b:
49:e9:8b:0f:6e:3f:e8:0f:3b:e4:b9:e7:8a:20:78:
6d:49:fa:74:d2:05:ad:b6:ff:69:c0:f4:7b:75:bc:
af:df:55:46:55:0a:b0:d0:42:2c:39:89:dc:b2:93:
b6:48:e9:41:c9:73:15:c3:21:ac:e0:e7:e3:42:11:
5a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:D8:EF:7B:BE:65:BB:7F:26:C8:D0:B6:73:B5:94:76:74:4F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bd10844a-123d-3490-bb2a-7ceee45ed458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
204.157.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:0e:48:5d:d7:5c:40:8c:28:65:5c:05:8b:ec:ae:39:a8:66:
6d:87:0f:10:32:cb:fc:78:88:c2:65:09:30:b5:c7:ff:f0:46:
cd:cb:f3:f5:d4:93:6e:41:74:c5:24:9d:69:39:0f:ba:8b:4c:
11:cf:33:07:0a:42:ef:0b:b9:2a:1b:06:39:b5:98:1e:50:45:
5d:fa:ad:6e:97:57:66:57:c7:5e:51:65:b4:6a:44:f6:6a:8b:
61:1e:29:d0:87:ef:f6:6a:51:a8:74:35:fe:14:e9:a0:35:47:
66:ff:c0:2f:6c:43:12:18:80:16:3b:36:ff:c4:cf:11:0f:a4:
91:3d:7f:25:57:9c:e4:20:67:04:b5:ef:4d:33:b0:fa:e7:dc:
54:d4:b1:9e:d8:a6:11:84:6f:ca:d4:c2:13:75:29:82:16:fa:
9b:62:b4:6a:55:08:09:24:b4:5f:14:29:e2:d3:11:72:ef:d2:
46:a2:b9:31:76:45:8c:e8:01:98:ca:70:ff:99:f3:86:9c:7f:
22:6e:94:7f:c0:9e:11:c3:21:34:53:00:4d:41:51:34:e2:bb:
b9:3a:09:84:d8:38:96:3d:81:d7:49:4b:14:4b:6c:ec:10:c8:
36:03:1d:9f:8f:dc:d7:90:5b:40:ec:d4:b1:77:46:a9:78:35:
5b:eb:68:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB3nec52P7Y8iN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk
YjM4MjU2MTItOTM0Ny00ODVhLWI3YWQtMDMyZTIyOTdjODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSl9s6DwAJ7VTiZjpjG9BIbbM5xjSdSd8a/B
DLGw/OwzKjOhjXpV4kZBlHsxWaVB3FkxKrkTyUOdon1cz/e+T9Ayvh5qAiaQWpfu
N7488TrWOUk3J8kTtQ6wr4CBqJMbO9pyNkeDLzJUGHXAaUrIY2/l2XsmCjSRVvL/
GsD15mcjBdBPcfT7+aAt/p2uMS49DC+HEJFlZEIJWcQ0ZTZdcliuikq7EdINc3iW
m//rHycTav59v70Fnh8Jy4v00cJglVtJ6YsPbj/oDzvkueeKIHhtSfp00gWttv9p
wPR7dbyv31VGVQqw0EIsOYncspO2SOlByXMVwyGs4OfjQhFa1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3K2O97vmW7fybI0LZztZR2dE9fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmQxMDg0NGEtMTIzZC0z
NDkwLWJiMmEtN2NlZWU0NWVkNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJ1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkOSF3XXECMKGVcBYvsrjmoZm2HDxAyy/x4iMJlCTC1x//wRs3L8/XU
k25BdMUknWk5D7qLTBHPMwcKQu8LuSobBjm1mB5QRV36rW6XV2ZXx15RZbRqRPZq
i2EeKdCH7/ZqUah0Nf4U6aA1R2b/wC9sQxIYgBY7Nv/EzxEPpJE9fyVXnOQgZwS1
700zsPrn3FTUsZ7YphGEb8rUwhN1KYIW+ptitGpVCAkktF8UKeLTEXLv0kaiuTF2
RYzoAZjKcP+Z84acfyJulH/AnhHDITRTAE1BUTTiu7k6CYTYOJY9gddJSxRLbOwQ
yDYDHZ+P3NeQW0Ds1LF3Rql4NVvraHU=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:26 2026 by rpki-client