
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa
File: 1de1fb3f-1157-396f-898a-42e29591f7a1.roa (raw, json)
Hash identifier: 6WRDGjmn1+J8TbORROWCVIzvVqOomCUsm0PSYMtEZq4=
Subject key identifier: 84:3C:A9:5F:22:A8:0B:04:62:FA:F0:14:5D:27:FC:17:E0:2C:39:2D
Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial: 010D0C9F4328584EDDF74382F4BD4EB1C190FF40
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa
Signing time: Mon 17 Aug 2026 13:00:11 +0000
ROA not before: Mon 17 Aug 2026 13:00:11 +0000
ROA not after: Sun 15 Nov 2026 14:00:11 +0000
asID: 2734
IP address blocks: 204.9.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dd:f7:43:82:f4:bd:4e:b1:c1:90:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
Validity
Not Before: Aug 17 13:00:11 2026 GMT
Not After : Nov 15 14:00:11 2026 GMT
Subject: CN=e86f4b96-349e-4f92-b18b-149f20def17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:5e:7f:b7:fb:f9:92:a3:3e:6e:9b:c2:df:
1d:31:22:79:2d:93:a3:33:ff:02:0e:56:98:09:c8:
af:f8:36:31:05:25:7f:f7:ef:18:d9:8d:aa:39:a7:
1f:92:a2:bd:32:51:ba:b8:ed:ea:77:1f:a5:f8:87:
80:8f:5d:4a:b0:a3:b5:75:0e:fe:4a:ba:18:e5:fb:
6b:40:a0:7d:d2:13:ce:6d:fd:e7:2e:fc:36:ec:bf:
5e:0c:fe:25:b4:94:12:65:32:39:34:9d:31:76:31:
54:44:10:97:c2:8f:61:e1:7e:91:9d:5c:3a:d5:ea:
6e:e4:a3:6c:d4:78:9f:d5:bb:25:47:04:de:c5:3a:
3d:d7:c0:41:8f:dc:dd:2d:49:6e:01:cc:7d:c6:23:
67:6d:99:5f:fa:8d:d8:fc:40:d5:f7:29:2e:f1:57:
4e:65:e1:6c:d0:4e:ad:25:7e:b3:a3:ea:01:b0:d1:
31:ff:07:b7:a6:45:c3:db:f5:72:2b:b2:ac:2d:19:
3c:21:45:e7:d5:74:fc:8e:29:be:5d:48:be:df:6b:
23:dc:1a:e9:1a:d1:7b:ba:74:62:b4:29:9f:60:36:
77:8c:bb:3d:3b:83:93:2f:a4:a2:12:40:f5:16:2d:
1d:63:1f:8a:be:eb:99:12:b7:c1:c1:11:c4:a4:91:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:A9:5F:22:A8:0B:04:62:FA:F0:14:5D:27:FC:17:E0:2C:39:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1de1fb3f-1157-396f-898a-42e29591f7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
X509v3 Authority Key Identifier:
keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:36:f2:b8:d8:d2:d8:1a:8c:4d:bd:65:a2:22:1c:3d:ac:9e:
6f:8c:0a:a0:ca:49:51:09:7b:93:c2:f3:6d:70:bd:6c:49:cc:
d1:ec:8e:ca:58:b2:be:d0:cc:4a:64:c9:c0:0a:19:ad:3d:ed:
c8:87:e1:dd:e3:31:39:2b:97:86:c9:09:d3:7c:2f:d9:b5:a8:
73:70:ba:27:8a:5d:4f:bf:a3:45:68:1c:47:ee:9b:1b:56:ce:
be:80:61:d0:80:a4:9e:88:d2:46:02:23:56:bf:8b:02:e0:b2:
97:53:ff:a1:b4:ce:a5:d1:14:33:d1:cf:55:73:dc:be:20:51:
8d:a3:cb:c6:ec:45:79:b3:76:61:07:7e:c9:16:65:5c:cf:31:
48:f8:39:0a:90:61:5b:09:d5:da:85:56:a5:42:3b:65:f3:e8:
ad:46:e4:da:ac:0b:3b:6d:b3:88:84:dd:03:4f:9c:10:c0:1c:
19:26:31:2e:b2:ef:56:49:46:92:3b:a1:c0:55:2e:5a:fc:e4:
0c:72:4d:f7:f3:82:8a:ba:db:3c:e9:16:1f:16:cb:ac:0e:16:
e0:96:2c:8d:cb:89:06:7b:d8:14:7b:2a:69:4f:77:22:93:03:
7c:58:70:b2:18:a5:fb:b6:e4:ad:6b:34:5c:9d:2c:1f:12:91:
2d:30:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:14:00 2026 by rpki-client