
$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS204966.roa
File: AS204966.roa (raw, json)
Hash identifier: 6FgIgINWaJ4R2PO4fm6KhPXEsCG67DlXGii6VksdUxk=
Subject key identifier: 4B:90:63:AA:26:EF:E7:5E:D7:2C:98:5C:92:86:63:61:C2:DD:66:17
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 0E2F93F8A73646862EA4B061D104D290352D3B34
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS204966.roa
Signing time: Sun 06 Sep 2026 14:33:33 +0000
ROA not before: Sun 06 Sep 2026 14:28:33 +0000
ROA not after: Sun 05 Sep 2027 14:33:33 +0000
asID: 204966
IP address blocks: 207.180.21.0/24 maxlen: 24
207.180.35.0/24 maxlen: 24
207.180.53.0/24 maxlen: 24
216.75.141.0/24 maxlen: 24
216.75.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 01:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2f:93:f8:a7:36:46:86:2e:a4:b0:61:d1:04:d2:90:35:2d:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: Sep 6 14:28:33 2026 GMT
Not After : Sep 5 14:33:33 2027 GMT
Subject: CN=4B9063AA26EFE75ED72C985C92866361C2DD6617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:4c:f0:b1:13:b1:2b:14:ce:22:5f:f3:5b:
76:43:94:94:6b:c4:62:f2:b7:11:21:26:86:cc:68:
6d:1c:c7:18:d5:cc:0a:19:18:2f:e9:40:dd:5b:7f:
73:56:93:e8:f2:7a:9e:d9:92:07:cd:79:01:6c:a8:
1c:1e:60:9e:59:5f:6f:ac:da:65:2b:5f:3c:b8:21:
7e:ac:70:bd:fc:9c:09:a2:ce:96:44:f3:ac:96:10:
94:70:c6:02:02:cb:89:36:49:0e:88:ce:26:14:05:
24:9c:05:43:ed:a9:94:3d:7a:42:0d:0d:b3:4f:54:
08:a0:21:8f:7b:51:70:cf:4e:8e:66:d6:70:f7:9d:
66:a3:77:4a:cf:9d:19:38:c4:84:53:19:34:22:aa:
4c:c3:45:10:85:ee:aa:f7:cf:dc:7f:b2:9e:91:93:
9a:bf:ef:c5:9b:10:3b:94:ff:28:f6:8d:68:74:4e:
56:08:c0:59:7a:ab:ae:a1:89:78:e3:13:53:a6:2d:
a9:97:3f:99:a1:71:94:a6:64:c6:e9:ab:2e:4f:4c:
3c:b4:b5:70:de:27:af:5a:6c:66:1d:97:c5:44:d9:
2b:1f:a6:df:38:dc:b8:d0:7d:c6:81:92:72:7e:84:
cb:4a:3e:95:44:4d:9c:6f:aa:bb:93:54:bb:8e:20:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:63:AA:26:EF:E7:5E:D7:2C:98:5C:92:86:63:61:C2:DD:66:17
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS204966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.180.21.0/24
207.180.35.0/24
207.180.53.0/24
216.75.141.0/24
216.75.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fd:6a:4e:3f:81:9a:18:82:5a:35:3e:70:f2:35:d3:ab:4d:
87:98:8e:47:24:ba:0f:b2:6c:a5:ca:aa:94:c4:1d:69:2b:eb:
a8:94:7f:c9:11:fc:ca:2e:9b:32:c3:e2:f6:34:90:da:1d:3d:
77:f0:a1:da:48:66:9f:c2:8a:a1:32:9a:79:7e:74:bc:6d:5d:
6b:2b:a2:d5:4c:97:39:85:d0:6c:ab:2d:cd:a2:9b:5b:37:1c:
99:31:10:68:e8:33:33:85:60:69:26:53:aa:50:f3:1f:47:37:
c2:5b:bb:a1:cf:ac:70:36:38:04:43:30:76:d9:4e:76:c2:d5:
20:93:b3:f0:d2:7a:1e:4c:df:d1:10:e1:d1:f2:9d:fa:19:98:
0b:83:55:bf:5d:ad:45:f1:dc:12:3c:7c:a4:c0:67:5b:20:fd:
de:5a:81:81:c1:88:b7:58:59:69:f9:ae:2e:64:c2:6b:c6:1f:
cc:57:bc:e7:c6:ed:e8:7f:ad:4c:b0:5d:0e:50:b8:cb:c1:ab:
28:9f:5b:f2:5b:55:6c:63:e4:70:32:d8:33:fb:41:df:a5:f8:
29:6b:b8:34:94:8e:e2:aa:f9:bc:cf:20:d7:d5:08:8c:2b:5c:
6d:66:53:73:0a:56:de:9f:21:dd:36:ce:2e:a6:59:27:a3:f5:
26:0b:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:23:24 2026 by rpki-client