
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
File: f880db5b-e47b-395f-bff3-27346670e7a5.roa (raw, json)
Hash identifier: FXfNvTGejJ23K58XQgHgBgvVCRSg06FzU6DNrd2Fez4=
Subject key identifier: 99:3B:04:E5:5A:85:B3:B3:ED:21:74:17:98:BC:AD:D6:09:D2:15:2D
Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial: 010D0C9F4328584CFDE7A50469F74366DE43F580
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 209.127.216.0/24 maxlen: 24
209.188.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e7:a5:04:69:f7:43:66:de:43:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=bca913a1-89c1-4c9c-8921-4ba9329fb85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:32:68:2a:3c:a2:b9:b8:94:ec:0e:54:8a:
72:b8:ab:96:2e:b2:bb:1f:09:ea:de:b7:f3:ac:23:
5d:3c:13:38:56:20:ee:1f:b8:5a:06:f0:1d:3a:a1:
18:6c:86:bf:b4:46:58:20:6a:37:83:90:0c:99:dc:
ac:ee:09:b5:0d:84:ff:1e:1b:d4:14:68:7d:c7:de:
cd:26:f6:ba:3d:00:a9:4a:ed:aa:21:85:75:c2:0f:
07:bb:47:c0:1e:1c:bc:57:e1:7f:32:29:ae:55:9d:
e2:95:96:07:24:21:d3:43:ca:5b:46:33:55:1e:41:
86:d7:bd:3a:7d:de:95:8e:fa:f2:09:fd:69:0a:d9:
97:e3:7c:bc:1b:68:d1:57:b7:0d:6f:29:5c:55:ad:
3e:b1:99:9c:6a:c8:97:3e:33:22:dd:95:c7:0f:a8:
be:5d:31:3c:f2:7c:b4:5e:93:be:4c:4e:8e:5e:05:
a4:ca:63:44:7b:6c:4a:89:c3:8b:63:82:22:c8:91:
21:5e:c2:50:e3:bf:a1:28:7b:2d:7e:f1:e6:49:62:
9a:94:b7:b6:af:87:c9:06:6e:f8:14:e6:b2:be:83:
23:2b:11:1b:0c:1c:3d:25:05:fa:55:93:59:b0:aa:
29:af:4d:96:07:fe:db:81:c9:bb:04:26:e6:b1:df:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:04:E5:5A:85:B3:B3:ED:21:74:17:98:BC:AD:D6:09:D2:15:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
X509v3 Authority Key Identifier:
keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.216.0/24
209.188.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:2e:7d:41:ed:35:b9:ab:cf:9a:c7:c7:b7:09:a6:44:a3:6a:
18:0d:7b:02:2c:c7:17:ae:99:68:ca:35:fb:9c:5d:6e:8d:0d:
71:5c:7b:8b:b0:8b:74:ea:a8:38:25:1f:1d:25:14:bc:e2:dc:
01:e8:1e:3b:ff:37:06:49:55:37:75:73:f6:47:84:8e:8c:89:
4d:da:57:35:69:cc:55:82:b7:f4:fa:5d:e6:a8:8a:da:86:ab:
63:75:30:44:67:0e:d6:19:00:cd:79:e2:48:3b:cf:88:50:99:
a1:1a:a4:5e:ea:d8:f4:f5:5b:8a:4f:55:d7:6f:94:75:90:ae:
23:ad:a7:39:a9:c9:38:8e:14:7d:de:b9:15:6a:0c:d1:1f:ae:
e6:00:e4:85:55:26:0d:74:9d:dc:5c:84:1a:09:dd:b2:f0:9f:
39:b7:8c:5e:87:41:b8:c8:22:6b:9a:69:d0:ee:1f:b1:2e:ce:
54:34:ce:9e:c6:2e:af:2b:0b:da:87:9c:11:3c:3e:fb:4d:37:
3a:79:b0:fc:e4:ae:d0:79:02:61:9f:fe:bc:a0:41:50:df:b6:
00:21:53:85:0c:c1:64:f7:7e:17:b1:69:6d:1e:9f:a3:76:68:
2c:ea:f9:c1:29:b5:79:78:0b:3a:5e:a1:40:84:5e:09:a6:95:
7e:11:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:44 2026 by rpki-client