
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa
File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json)
Hash identifier: PnVXapgDo+2ApiRN28762V+bnomfPsQO4W7j0NFnIZA=
Subject key identifier: 21:53:90:70:FD:85:33:72:E6:23:BF:5A:C2:8D:63:65:87:E1:BF:2C
Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial: 010D0C9F4328584CCBA767260A4FD3622872AF40
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 23470
IP address blocks: 209.222.100.0/24 maxlen: 24
209.222.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:67:26:0a:4f:d3:62:28:72:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=cfe190bb-a56a-4a58-b104-0cec091eb6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:10:03:d6:8f:23:ae:d7:6d:51:4f:35:9c:
7b:05:42:be:73:c4:8f:04:80:4b:e2:3c:68:0a:1b:
48:d4:55:90:5e:dd:f3:f5:39:80:e6:19:45:1f:c0:
0a:21:82:f4:51:1b:01:ae:67:76:71:62:9a:47:09:
38:dd:06:d1:0d:6e:07:6f:38:55:29:73:06:d0:e2:
4f:b0:39:dc:82:6e:45:3d:ea:50:ff:f5:77:c0:a2:
c1:1e:30:21:0d:50:f7:be:79:ee:7a:0a:45:63:58:
d3:48:8c:9a:36:96:f6:c8:b9:72:70:3d:39:4c:56:
e6:ab:63:22:eb:c9:ca:9a:c7:71:0a:64:f9:2f:cd:
0e:5b:30:1b:a6:ad:39:dd:2a:cd:0d:2c:98:e2:d4:
c6:9c:ca:8f:ca:1f:9d:fc:d7:28:84:9f:81:5c:c2:
94:a4:19:32:7e:69:6d:06:5f:c9:64:54:7f:60:31:
5b:0c:dd:64:f7:ac:bb:28:23:f6:4e:0a:6a:e6:65:
2d:b7:fe:27:c4:96:fc:e3:c0:81:13:7e:09:e1:a1:
d0:ad:04:62:60:8f:8d:11:fd:75:fd:57:df:57:bc:
ee:bb:38:16:b1:52:61:3e:72:df:bf:af:14:33:14:
6b:f2:a8:52:d3:fe:9a:61:49:b0:e2:15:36:c8:00:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:90:70:FD:85:33:72:E6:23:BF:5A:C2:8D:63:65:87:E1:BF:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
X509v3 Authority Key Identifier:
keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.100.0/24
209.222.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:bb:57:ef:d6:6e:5f:46:78:85:7e:cf:80:35:79:fa:f7:4d:
aa:3e:4c:1c:b7:d4:f1:e2:e0:19:43:92:c4:2c:fb:3a:9d:f7:
07:00:d2:25:e9:a8:17:d0:78:b4:e7:74:ed:95:3a:f9:be:67:
ef:25:c9:ea:0e:ec:79:ff:03:a0:14:b6:85:35:69:5a:89:76:
6f:69:6f:47:a0:71:dd:74:20:c3:db:3a:09:c0:2b:83:c3:25:
e9:9b:7d:08:6f:c5:10:8b:b7:e1:c7:88:8e:b6:39:b8:34:88:
91:b4:95:86:04:a2:be:17:41:6d:48:54:f6:ad:2b:76:6f:8a:
04:d5:2d:eb:42:ce:fa:4c:93:a1:62:a9:e8:ee:cb:53:b1:6a:
7d:2b:dd:8e:19:eb:4f:9f:61:a3:f3:45:23:e2:4d:a4:80:4c:
9f:14:09:9e:44:32:ef:43:31:a9:f5:ed:c3:e2:91:49:5e:be:
9e:a4:6e:7d:23:f8:2f:53:ae:ea:db:91:ca:40:23:51:cb:90:
77:98:8e:d0:92:1f:bd:f3:31:dc:d8:7e:5b:19:3f:27:51:e4:
d8:04:7b:65:b9:08:7a:79:8e:a5:a6:86:87:06:f8:69:e6:50:
37:d2:f6:fb:07:0a:f7:c2:15:5b:a9:1b:9f:a0:0e:c6:71:d3:
55:db:cd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:46:11 2026 by rpki-client