
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
File: cf21e818-cdaa-34fe-9d02-e17860ab533d.roa (raw, json)
Hash identifier: ph/8FfIGzo0fQPjmZ4FohVx9aoSB2hV5ujUX088AFm0=
Subject key identifier: D3:9D:84:71:C8:5B:16:EB:50:42:50:9F:AA:18:B8:88:E3:97:1C:3F
Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial: 010D0C9F4328584CEBC22430B35B94B783D6F638
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 0
IP address blocks: 204.209.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:24:30:b3:5b:94:b7:83:d6:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=c92e7574-05ea-454f-a9e5-d0e4b243fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:9c:9f:b0:39:fe:b5:6d:bc:05:e4:fa:af:
59:dc:34:5b:e4:3b:49:a1:80:8b:65:bd:75:e7:5f:
64:7e:a4:95:00:36:b5:66:b4:6b:2e:1f:06:78:86:
0e:0e:03:44:b3:9a:10:5a:cf:54:f0:7d:0e:e9:ef:
f9:4d:73:ef:b5:77:6f:6c:1b:bd:c1:73:77:ce:4f:
97:4e:86:4c:ca:1b:e4:a6:9c:8a:ee:b1:df:31:f5:
c8:53:2b:2e:f8:6b:96:04:b3:7d:ce:56:c8:2c:47:
23:bb:38:ee:50:5b:c1:f0:6f:7f:96:bf:92:5d:9a:
c0:eb:ea:58:bf:b9:77:bf:8f:fe:6d:18:ac:b3:9b:
7f:84:07:85:4a:cd:4a:bd:6a:89:6e:71:71:ab:dd:
be:f4:10:b5:71:7f:97:78:d4:44:6a:c9:8c:ef:bb:
03:b3:58:6b:65:9d:1c:0d:f1:50:b9:54:16:da:63:
1b:fa:c9:f5:fd:67:ea:65:89:fe:f7:3e:f1:b8:00:
37:c9:76:36:85:e1:af:12:21:be:d0:9e:17:73:b7:
9c:c5:02:7e:f0:53:9c:ee:6b:54:bd:df:8e:14:66:
31:50:45:8a:b5:b1:06:8e:df:e9:57:c1:4a:b1:fc:
05:88:32:51:c9:1e:31:df:89:02:e3:b8:a6:88:46:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:84:71:C8:5B:16:EB:50:42:50:9F:AA:18:B8:88:E3:97:1C:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
X509v3 Authority Key Identifier:
keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:97:d1:4e:02:95:09:3a:f1:12:37:9f:e1:ba:d4:50:e4:48:
96:d1:dd:32:5d:7b:3c:e1:c3:61:4f:7b:da:f7:6b:14:78:04:
03:b5:f1:34:2e:36:e4:90:7d:81:02:b2:39:4f:48:73:83:f2:
ad:34:fc:92:b8:44:cd:3b:1e:ec:fd:1c:e1:20:5d:86:70:27:
83:ea:72:cb:a0:8d:fc:cd:04:10:2e:68:1e:ef:ab:21:f8:d8:
a4:25:4c:de:46:ec:2a:26:24:54:ae:5d:68:5c:4c:73:16:36:
db:8c:53:6a:e7:9e:9f:51:3a:ca:1c:70:62:23:09:ad:c7:85:
7c:6a:a4:bd:f4:21:23:b0:39:4e:ea:56:a2:f2:b4:a6:22:b7:
b8:cf:f5:fb:2c:0b:33:a5:18:b4:4b:2c:66:92:97:88:ee:91:
d3:41:88:ca:71:ee:0d:8a:66:01:53:75:a0:f6:7b:a6:53:2d:
01:51:95:26:b4:a7:ef:9e:b4:2a:0a:b8:67:2d:a0:7e:54:f0:
27:2f:74:b7:af:bc:1b:bc:4f:ce:25:fc:df:31:9f:0b:35:30:
b6:7b:54:1f:43:a0:eb:19:29:5b:be:59:f2:79:2b:e8:f5:9d:
c0:e5:bf:55:35:ff:d9:62:23:04:f7:cf:63:ab:8d:e8:a2:32:
f8:4b:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:39 2026 by rpki-client