
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/7ab7669b-7c44-35e1-a081-fcafc8f8d797.roa
File: 7ab7669b-7c44-35e1-a081-fcafc8f8d797.roa (raw, json)
Hash identifier: xJ1U8GbohRWDfpTU8wnPbPnJItuFP8SbQ2RMh9ghNc0=
Subject key identifier: 69:2A:76:DD:80:E5:A4:97:38:E2:6A:CB:41:28:39:C0:D8:36:72:FB
Certificate issuer: /CN=2baf1904-1ea5-4310-80f0-f2a38cbeb95d
Certificate serial: 010D0C9F4328584D74701E5E0F6E5E21CA9C3080
Authority key identifier: 90:92:C8:7A:EC:60:67:D0:2F:96:70:AE:13:97:47:F4:22:AB:BC:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/7ab7669b-7c44-35e1-a081-fcafc8f8d797.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 12230
IP address blocks: 204.9.189.0/24 maxlen: 24
2602:f478::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:70:1e:5e:0f:6e:5e:21:ca:9c:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baf1904-1ea5-4310-80f0-f2a38cbeb95d
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=bc37cec3-b2db-4bd8-b643-b7939122f2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:58:c9:b3:85:ca:75:62:b2:1a:b8:5c:6e:
ee:a0:bb:78:94:45:66:de:dc:61:38:bf:b6:c8:3c:
57:68:be:cb:02:85:9e:22:5d:fd:d3:5f:d4:d4:90:
4f:da:7f:ce:38:4f:a3:6b:a5:86:12:47:8f:83:e1:
05:9a:4b:26:29:d5:5b:2c:30:5f:c6:a5:09:76:b3:
68:85:4b:79:9f:14:9f:4c:11:92:f1:a9:3b:3a:3e:
7b:d7:37:0e:d9:58:72:75:69:e1:1a:29:18:e8:2c:
7f:0f:53:c6:92:8e:68:66:87:ab:a9:db:52:35:be:
a3:cd:ef:cb:a0:94:ba:00:66:91:da:84:a6:f9:11:
3f:12:72:76:9a:cf:a7:89:84:95:66:de:86:c2:d1:
92:c9:60:f7:92:0d:09:b8:f4:8f:c7:3b:b3:54:31:
1e:df:ac:41:f0:da:60:90:1b:be:2d:67:14:7e:21:
07:f3:0b:c0:3b:a0:0e:39:58:49:ec:2d:e9:66:ec:
2c:bf:76:66:68:ec:95:08:4c:af:50:a1:77:d8:e9:
49:75:13:19:d3:c4:b8:41:79:2a:fe:3e:2e:4a:e1:
b4:2b:c0:bf:23:ab:32:6b:c9:ba:81:04:cb:85:1b:
35:14:16:6e:81:1a:7d:50:b7:e9:da:1a:90:ff:cf:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:76:DD:80:E5:A4:97:38:E2:6A:CB:41:28:39:C0:D8:36:72:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/7ab7669b-7c44-35e1-a081-fcafc8f8d797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.crl
X509v3 Authority Key Identifier:
keyid:90:92:C8:7A:EC:60:67:D0:2F:96:70:AE:13:97:47:F4:22:AB:BC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2baf1904-1ea5-4310-80f0-f2a38cbeb95d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.189.0/24
IPv6:
2602:f478::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:f2:cd:cb:2b:38:c3:83:1f:7c:45:2e:4d:69:75:03:4e:c2:
49:5f:08:3b:d1:42:cf:c4:2d:63:2b:cf:46:5d:77:f9:78:3a:
b4:57:b7:f1:2b:6f:35:12:a6:20:17:7f:b1:d8:f0:fd:51:46:
0e:6c:e4:3d:b5:f1:e8:6c:65:bb:fa:d2:6b:b3:8e:54:13:7b:
ff:84:00:6e:c2:08:4f:5d:c7:19:54:3c:e4:74:78:e5:c0:1e:
a7:61:5f:8c:27:5e:44:72:70:8a:3d:fa:87:05:46:04:ef:07:
d6:ea:a9:8b:e3:60:dd:0b:03:d8:ca:97:95:a7:0b:51:d3:b4:
53:47:4c:a4:3b:e8:e5:71:03:b9:f5:23:dc:f8:0b:d9:1b:6d:
fb:45:5a:fd:83:69:a2:88:bc:5c:ca:72:63:45:9d:64:9a:e2:
c4:6e:5d:7f:d9:4a:40:00:5f:0d:11:43:47:4c:9e:89:8e:38:
ad:ab:1a:da:64:35:fc:41:ea:99:54:cf:7a:bc:48:c6:d1:d4:
ea:2a:07:be:95:0e:28:fe:54:e8:c0:30:38:cd:e1:2b:c1:58:
80:19:9e:02:1e:5a:39:41:b8:73:12:86:31:68:3a:c6:9d:16:
9d:6a:ac:d1:e6:d2:47:27:78:21:25:ce:d4:bc:d3:aa:05:81:
89:8f:23:08
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE10cB5eD25eIcqcMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJhZjE5MDQtMWVhNS00MzEwLTgwZjAtZjJhMzhjYmVi
OTVkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
YmMzN2NlYzMtYjJkYi00YmQ4LWI2NDMtYjc5MzkxMjJmMmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeVYybOFynVishq4XG7uoLt4lEVm3txhOL+2
yDxXaL7LAoWeIl3901/U1JBP2n/OOE+ja6WGEkePg+EFmksmKdVbLDBfxqUJdrNo
hUt5nxSfTBGS8ak7Oj571zcO2VhydWnhGikY6Cx/D1PGko5oZoerqdtSNb6jze/L
oJS6AGaR2oSm+RE/EnJ2ms+niYSVZt6GwtGSyWD3kg0JuPSPxzuzVDEe36xB8Npg
kBu+LWcUfiEH8wvAO6AOOVhJ7C3pZuwsv3ZmaOyVCEyvUKF32OlJdRMZ08S4QXkq
/j4uSuG0K8C/I6sya8m6gQTLhRs1FBZugRp9ULfp2hqQ/8+WSQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGkqdt2A5aSXOOJqy0EoOcDYNnL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYmFm
MTkwNC0xZWE1LTQzMTAtODBmMC1mMmEzOGNiZWI5NWQvN2FiNzY2OWItN2M0NC0z
NWUxLWEwODEtZmNhZmM4ZjhkNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmJhZjE5MDQtMWVhNS00MzEwLTgw
ZjAtZjJhMzhjYmViOTVkLzJiYWYxOTA0LTFlYTUtNDMxMC04MGYwLWYyYTM4Y2Jl
Yjk1ZC5jcmwwHwYDVR0jBBgwFoAUkJLIeuxgZ9AvlnCuE5dH9CKrvPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYmFmMTkwNC0xZWE1LTQzMTAtODBmMC1mMmEz
OGNiZWI5NWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzAm9MA4E
AgACMAgDBgAmAvR4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCl8s3LKzjDgx98RS5NaXUDTsJJXwg70ULP
xC1jK89GXXf5eDq0V7fxK281EqYgF3+x2PD9UUYObOQ9tfHobGW7+tJrs45UE3v/
hABuwghPXccZVDzkdHjlwB6nYV+MJ15EcnCKPfqHBUYE7wfW6qmL42DdCwPYypeV
pwtR07RTR0ykO+jlcQO59SPc+AvZG237RVr9g2miiLxcynJjRZ1kmuLEbl1/2UpA
AF8NEUNHTJ6JjjitqxraZDX8QeqZVM96vEjG0dTqKge+lQ4o/lTowDA4zeErwViA
GZ4CHlo5QbhzEoYxaDrGnRadaqzR5tJHJ3ghJc7UvNOqBYGJjyMI
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:11:58 2026 by rpki-client