
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3926390b-a6f4-373f-84a3-df67e329559c.roa
File: 3926390b-a6f4-373f-84a3-df67e329559c.roa (raw, json)
Hash identifier: GdkZRqUycS3VLe30VJiTmWLMxOE8ZWgV6G1NjYCWhhU=
Subject key identifier: 37:7F:2C:EC:6D:6F:39:35:81:8C:0F:95:E8:20:77:B6:05:25:E0:06
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584CEBC220B726C510D054117E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3926390b-a6f4-373f-84a3-df67e329559c.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 20197
IP address blocks: 204.84.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:20:b7:26:c5:10:d0:54:11:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=a29c4bb9-8433-4b58-9901-feade55c9cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:ee:87:58:6f:a5:cf:ae:59:91:0b:20:7e:
8a:cb:2d:e1:dc:3d:15:d5:b9:d4:0c:6e:76:08:2c:
89:12:ac:e5:93:0d:31:f0:d9:d4:46:ef:2c:e2:2b:
cf:66:f1:6a:ac:aa:36:ed:4c:f2:1c:d1:ac:2b:5e:
65:ac:47:24:2f:99:db:f2:76:d3:4f:fe:83:75:18:
83:45:6b:c6:d0:c4:55:2f:4e:df:31:c8:18:df:1b:
5c:81:fd:b8:f2:7a:04:9c:69:e8:02:f4:fe:a3:1b:
ad:b8:4e:86:27:82:7e:66:a8:98:b1:57:84:20:3b:
b0:02:d3:d4:f7:a2:ee:40:74:8d:c3:ba:48:8b:3a:
dc:08:6e:6f:38:14:53:6b:00:f3:71:68:b9:b0:29:
51:d5:1a:6a:db:4f:aa:31:db:14:fb:0e:c4:b0:87:
5e:f9:7f:e6:16:05:27:4e:f2:d3:06:bc:18:8c:e5:
a1:60:d5:7e:80:b8:49:3b:4e:52:60:d1:20:15:f6:
c2:2d:a1:55:a9:9d:b0:05:65:cc:2c:61:20:c6:c7:
cd:e1:31:fb:6a:2c:5c:5e:af:29:ce:a6:e0:95:9c:
77:24:a4:65:64:ca:a6:0d:7e:f2:30:0b:69:8b:89:
db:af:76:58:d4:11:b0:5d:7b:d6:1f:ee:d0:ed:03:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:2C:EC:6D:6F:39:35:81:8C:0F:95:E8:20:77:B6:05:25:E0:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3926390b-a6f4-373f-84a3-df67e329559c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0b:7c:37:33:23:1e:35:5b:f0:b3:18:f2:47:40:f7:c5:08:
7a:ab:19:a3:bb:b5:a7:e0:e6:7d:e8:0b:bc:70:25:bd:f2:17:
8d:e5:fc:cf:ca:f4:5a:20:dd:2b:cf:eb:47:b8:b0:57:c8:e6:
45:35:44:f6:ba:d4:df:c0:43:6d:62:98:83:2b:04:bf:81:61:
c6:c4:a3:c8:fb:02:a6:b7:95:cc:25:d5:9b:a1:f5:20:bd:74:
b7:78:6d:ac:d8:92:3c:a3:26:ff:85:28:7e:3d:59:19:f7:e5:
e5:d3:93:d9:ea:ce:93:30:74:09:4e:6d:c0:42:3c:34:40:38:
dc:8b:b4:8b:13:0c:96:e5:d2:9e:9a:16:82:4e:6e:2d:cb:1f:
13:2c:81:83:e9:23:f3:3a:98:62:e3:ef:3a:07:e6:dc:1e:46:
f3:f4:c4:3d:8b:5c:f8:7d:d2:20:ce:11:63:59:5a:da:f3:68:
88:f4:36:9c:07:d7:3f:b4:e1:9e:70:24:fd:3b:17:37:b6:70:
63:93:07:ab:e6:45:be:e7:a5:e0:6d:96:08:c6:65:45:b1:5e:
5d:13:61:cd:cf:b4:02:ca:09:39:53:96:8e:36:ec:c9:45:33:
2d:cb:83:2d:ff:10:23:6c:84:64:04:c4:48:71:31:7a:62:92:
80:1e:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:53 2026 by rpki-client