
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
File: 90ba26e3-afe9-3987-893f-1683477506b7.roa (raw, json)
Hash identifier: F3LGxXwkeaTNO46L4bEtDvQNXF4NGaVe0GDs8lGm9rk=
Subject key identifier: 8F:D5:25:3B:C8:91:B2:9E:9F:95:BD:0D:A7:D0:E7:0E:6C:73:D2:46
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584CCD0C927E6F100F4B5BB24DC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 13414
IP address blocks: 209.237.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:92:7e:6f:10:0f:4b:5b:b2:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=7dc0c1d4-b59f-4b2d-85ac-990d2becde02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:7f:88:c9:f6:48:b6:2b:d4:f1:0c:a4:f1:
46:12:9d:80:fe:cc:8a:44:42:c8:67:07:c8:02:14:
98:50:b1:e2:a7:e0:b9:c0:01:f0:2c:d5:61:17:2d:
98:3c:c1:9e:d8:8e:95:5c:cf:da:94:b9:cf:e8:a9:
bb:41:55:30:f9:5e:cf:15:79:82:2f:18:3c:9b:50:
2a:2f:b8:79:08:90:96:5b:ca:00:be:5f:c0:ca:65:
0b:00:e2:d3:75:70:3e:17:c8:d2:82:71:49:af:78:
64:35:60:d0:81:a7:6e:73:a3:28:20:28:57:eb:da:
e9:5b:0a:46:e3:ed:c2:ab:00:7c:f8:7c:3f:e9:da:
67:69:87:67:c3:e2:b1:b5:c2:0b:cb:4e:7f:64:76:
ae:35:62:50:3b:91:37:fb:cc:b3:f4:d7:a1:4d:40:
23:30:2b:a2:39:f7:10:d7:42:d5:be:d2:21:07:8b:
e3:0d:a3:cb:86:cb:de:70:e5:bd:d2:cd:b0:7d:7b:
db:ee:83:66:16:d1:88:3e:45:2a:73:12:4b:fb:2a:
e1:2b:e5:95:54:04:12:7d:ca:5a:d2:4c:b8:66:70:
68:98:ce:36:5b:aa:bb:d9:61:90:97:4a:51:1e:44:
d1:c2:a0:3b:ed:cc:d3:14:f7:81:3d:b3:e6:97:b5:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:25:3B:C8:91:B2:9E:9F:95:BD:0D:A7:D0:E7:0E:6C:73:D2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:0c:68:1c:df:71:e5:91:77:a1:f4:eb:96:0f:df:b7:19:60:
41:30:f4:1e:5e:85:18:af:be:ca:e1:bf:79:47:a1:04:20:d2:
e6:be:70:90:58:bd:80:21:bb:73:30:a2:13:9b:43:0d:c8:2d:
d6:67:e8:46:6b:1f:6e:62:f3:71:79:b7:89:08:4d:fe:fe:43:
3a:05:e8:f7:03:c1:33:d7:7f:97:16:cc:73:e5:31:42:e0:59:
d5:f5:57:c5:1e:cb:07:cf:90:23:9f:2b:2e:f9:06:b0:41:db:
c7:d2:8e:9a:87:e1:bf:9f:6d:a0:6b:f3:ce:17:1e:89:f0:19:
85:29:d0:db:74:a5:06:2a:2b:13:f7:03:bc:07:13:81:36:73:
20:d0:fa:7f:6b:90:87:8d:9b:e3:01:90:53:4b:37:1d:18:99:
a4:86:7b:ab:07:47:47:cc:9c:ee:e8:e8:d1:95:0e:1b:a4:72:
61:c1:a2:9c:c8:83:1e:59:fa:24:09:b0:26:0c:7c:0f:1e:84:
68:26:4c:48:f7:28:c3:4f:d9:1f:6e:31:c4:ee:4b:ee:e4:dc:
90:74:12:44:5a:66:a9:2d:49:3b:d2:c4:0f:56:41:e5:de:29:
11:eb:2b:a7:fb:fb:c1:f1:62:ab:6f:5b:52:bb:ec:50:38:b8:
59:d1:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:10 2026 by rpki-client