
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
File: cf21e818-cdaa-34fe-9d02-e17860ab533d.roa (raw, json)
Hash identifier: fVWSnqLOuocgM6BTsbxi5G+E0ebF6hVxfzFRKoCEw9M=
Subject key identifier: 0B:08:89:C3:4E:C9:CC:EE:5B:5D:C7:61:59:7B:8D:68:A1:DF:71:93
Certificate issuer: /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial: 010D0C9F4328584EA7874F2A4390FEB28CCBFA00
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 0
IP address blocks: 204.209.76.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:4f:2a:43:90:fe:b2:8c:cb:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9458c4a4-79d8-4aa5-ae56-b7db42f5bd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:73:4a:9f:0a:85:a2:d3:35:c4:46:f8:eb:
71:a1:78:37:5f:58:5c:0b:c3:df:76:ae:0e:30:dd:
99:21:d6:9f:6f:3f:e6:07:1f:7d:41:ad:0e:00:51:
52:23:73:1e:ba:e7:fe:f0:81:05:e0:da:f0:ec:e1:
d7:38:30:a7:18:89:11:c7:56:bb:a4:03:93:70:d4:
20:ad:74:ce:e0:0e:9d:9a:6d:7b:b1:bf:5e:7b:ae:
ca:8a:c2:33:ca:ec:63:a4:b6:f2:19:3a:ef:54:37:
ee:62:30:f6:7e:32:d3:f5:9a:fd:33:14:0b:72:ac:
54:c0:31:c7:65:5e:74:d3:1c:db:80:12:fa:c8:07:
3d:5f:2e:8c:82:13:76:08:ff:7b:f5:ac:53:1c:a4:
c7:ed:ae:3c:dd:be:86:f8:60:94:58:a9:31:9a:0a:
b4:ba:be:20:ea:a3:d5:1c:06:65:e3:b3:04:a3:05:
a2:47:b1:52:c9:6a:ff:7b:d0:51:fa:05:8d:aa:e5:
c1:3d:c6:d9:22:bf:c3:80:e4:48:56:b9:36:99:64:
fc:f2:65:c0:24:6d:7b:d3:21:a0:8c:53:3a:f8:97:
4a:a0:1f:83:28:2b:78:36:ff:eb:d5:7b:15:c8:17:
9b:da:36:69:3b:14:17:24:5e:8b:69:5f:d7:80:54:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:89:C3:4E:C9:CC:EE:5B:5D:C7:61:59:7B:8D:68:A1:DF:71:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/cf21e818-cdaa-34fe-9d02-e17860ab533d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
X509v3 Authority Key Identifier:
keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:26:23:2f:a4:bd:4b:25:45:b9:55:3f:9c:18:b2:87:34:d3:
9f:86:b9:08:99:8a:d9:57:72:78:7d:0d:71:a7:2e:97:7d:eb:
33:79:c3:aa:d2:4e:06:7f:26:f9:27:79:f9:b6:7f:f6:74:62:
c7:a7:2d:3d:df:0e:db:7c:a3:45:5f:1b:59:07:58:45:3f:8e:
78:cf:db:23:d9:a9:db:d2:77:dc:d3:db:04:fb:8a:b0:b6:35:
7f:46:98:4a:fb:7d:46:7c:8f:7d:6d:4d:0d:d3:05:aa:e6:7c:
66:0c:64:44:13:a0:88:87:73:eb:4f:2c:b4:3f:83:57:af:55:
3c:2f:43:f5:13:c1:e0:2c:b5:36:c4:1a:a9:2e:32:7e:86:9d:
fd:2f:aa:fb:34:56:8c:c0:27:98:e1:a0:d5:9e:0b:2b:e9:21:
2c:0a:2c:16:27:3f:ba:04:03:45:26:b3:d6:3a:45:37:4e:ec:
9e:1b:4d:3e:94:e1:56:ac:0c:a6:38:55:64:be:d9:fd:57:48:
f5:fe:f7:9b:97:da:47:7d:7d:90:5f:86:62:a1:f2:12:21:ef:
a5:a2:84:0d:e9:a4:02:8f:a4:66:c7:ac:12:50:e9:42:bc:f5:
9e:4a:c3:01:34:ea:22:8e:9c:c8:f5:44:cf:42:67:aa:30:f4:
7d:c0:2f:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh08qQ5D+sozL+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDA1YWUwNzAtZTllOS00ZDNjLWI0NDktODY4NDI2ZmYy
MzAzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTQ1OGM0YTQtNzlkOC00YWE1LWFlNTYtYjdkYjQyZjViZDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3dzSp8KhaLTNcRG+OtxoXg3X1hcC8Pfdq4O
MN2ZIdafbz/mBx99Qa0OAFFSI3Meuuf+8IEF4Nrw7OHXODCnGIkRx1a7pAOTcNQg
rXTO4A6dmm17sb9ee67KisIzyuxjpLbyGTrvVDfuYjD2fjLT9Zr9MxQLcqxUwDHH
ZV500xzbgBL6yAc9Xy6MghN2CP979axTHKTH7a483b6G+GCUWKkxmgq0ur4g6qPV
HAZl47MEowWiR7FSyWr/e9BR+gWNquXBPcbZIr/DgORIVrk2mWT88mXAJG170yGg
jFM6+JdKoB+DKCt4Nv/r1XsVyBeb2jZpOxQXJF6LaV/XgFQQowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsIicNOyczuW13HYVl7jWih33GTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVh
ZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0MjZmZjIzMDMvY2YyMWU4MTgtY2RhYS0z
NGZlLTlkMDItZTE3ODYwYWI1MzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDA1YWUwNzAtZTllOS00ZDNjLWI0
NDktODY4NDI2ZmYyMzAzLzQwNWFlMDcwLWU5ZTktNGQzYy1iNDQ5LTg2ODQyNmZm
MjMwMy5jcmwwHwYDVR0jBBgwFoAU+SE6MwHvAr4Jvp3/wgjkvb025GAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MDVhZTA3MC1lOWU5LTRkM2MtYjQ0OS04Njg0
MjZmZjIzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQmIy+kvUslRblVP5wYsoc005+GuQiZitlXcnh9DXGnLpd96zN5w6rS
TgZ/Jvknefm2f/Z0YsenLT3fDtt8o0VfG1kHWEU/jnjP2yPZqdvSd9zT2wT7irC2
NX9GmEr7fUZ8j31tTQ3TBarmfGYMZEQToIiHc+tPLLQ/g1evVTwvQ/UTweAstTbE
GqkuMn6Gnf0vqvs0VozAJ5jhoNWeCyvpISwKLBYnP7oEA0Ums9Y6RTdO7J4bTT6U
4VasDKY4VWS+2f1XSPX+95uX2kd9fZBfhmKh8hIh76WihA3ppAKPpGbHrBJQ6UK8
9Z5KwwE06iKOnMj1RM9CZ6ow9H3ALwY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 21:47:17 2026 by rpki-client