
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa
File: 4277c72e-b98e-3190-9bb7-21098d80e07c.roa (raw, json)
Hash identifier: duhhNjnm0AAlU+o3d7Ll9JX1cba0xFqvEtbIhA3Xd50=
Subject key identifier: 29:47:2F:C0:74:F2:1C:24:E4:E3:2E:99:10:2B:2C:C2:3F:75:A7:9D
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584CDF32B07F94B09B9E7B2D9D00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 25645
IP address blocks: 209.42.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:b0:7f:94:b0:9b:9e:7b:2d:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=8f5308d0-3166-4522-b72f-9a8c2cbbb08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:31:bf:38:56:ce:79:b6:f8:db:1f:e4:6a:
7f:91:85:8a:e9:5f:fe:9b:ed:49:71:e6:d3:a2:ef:
2d:3b:92:37:d0:b6:5b:89:19:6f:48:99:ee:99:fc:
03:c6:73:a0:4b:6e:2a:38:ff:e6:81:02:b4:c2:b2:
49:cd:ea:20:e8:10:79:f1:23:9c:3c:74:20:24:2a:
8c:a1:f6:e3:ff:68:ce:f2:a4:0c:16:10:f0:db:f1:
75:90:2a:bd:b0:d3:97:58:25:26:ef:1d:27:24:b2:
e8:ac:37:7b:60:57:07:39:80:57:0e:da:da:9e:71:
8b:47:18:a7:a5:fb:00:b6:dc:dc:5d:38:e0:0f:ef:
57:34:ea:5e:10:16:51:f5:0d:d1:f3:d7:48:ab:a9:
5e:d4:18:a6:ec:d5:8d:36:40:5b:eb:b8:27:15:e0:
30:e3:dc:76:73:83:b7:f5:08:f9:24:1e:2f:b8:98:
11:3d:ab:ca:52:c0:64:7c:57:34:94:21:74:cf:ac:
9a:3a:9b:8d:41:92:8c:55:d1:d5:e0:41:d0:fa:79:
c4:57:c0:b1:af:b7:ae:31:12:53:f0:1f:be:80:0d:
aa:b1:d3:91:a5:9a:a3:70:03:e5:7f:bd:8c:ff:9f:
5f:65:38:ab:1d:af:67:97:19:d9:8d:5f:10:14:9c:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:2F:C0:74:F2:1C:24:E4:E3:2E:99:10:2B:2C:C2:3F:75:A7:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
209.42.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a3:ff:65:5f:7d:7f:49:b2:ea:8b:dd:e6:63:d9:ac:66:38:
b5:d6:12:8d:f7:e7:46:c4:44:74:f3:9f:23:21:91:2a:ba:b8:
ea:4c:0e:99:ec:6e:22:2a:08:f1:00:f8:91:e4:c6:8c:83:4f:
b5:8f:de:f9:f4:03:23:ea:73:2f:37:a3:56:53:50:21:ca:c4:
e2:8f:b6:bf:1a:b3:51:50:33:ed:62:80:27:fb:ef:61:ad:8a:
b5:14:67:d0:b2:6b:5c:27:fa:03:02:01:e1:00:d7:06:c2:f3:
62:16:8a:82:cb:07:c0:d2:34:c1:92:b2:30:62:9a:62:a3:16:
59:ed:4e:22:e9:2f:76:e7:6e:92:6d:0b:33:c0:63:b4:0f:60:
d6:27:02:ec:60:ac:cd:df:48:38:6e:be:42:d0:18:a4:f8:86:
bc:79:4e:d0:2f:33:d4:49:d1:93:3b:6f:15:16:9c:49:35:a8:
de:58:fb:9c:c0:2b:32:00:fe:ae:9e:24:9f:aa:e5:ba:b4:cb:
8a:ec:31:2a:cb:05:02:6d:6b:48:1e:44:00:4b:6e:b8:bf:6f:
a9:18:00:ab:35:a6:fc:3f:51:54:f8:1a:31:bd:ad:63:98:1d:
42:48:27:1f:ce:8b:d0:0f:94:48:70:01:c6:84:05:27:92:c3:
a2:f0:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:20 2026 by rpki-client