
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa
File: cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa (raw, json)
Hash identifier: YUXMab565CC5OPVwas4P4d5P78wgOLjM+KvhOpY0y2c=
Subject key identifier: 12:06:85:D9:01:D7:D4:D2:7D:3E:5D:E9:E5:2A:47:EF:B2:BF:74:66
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F4328584D4D5A334E5DAD82C2B7D25630
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 54203
IP address blocks: 209.107.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:33:4e:5d:ad:82:c2:b7:d2:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=bb4e77cc-9f76-4507-9fc4-c17b0fc1939b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:c8:ff:64:d6:cc:34:e3:80:e6:51:6f:d9:
ec:1e:6c:e1:64:94:8e:a1:35:1e:3f:34:55:17:8d:
1c:2d:7f:05:3e:0f:96:3c:2d:00:f2:52:4c:fc:a6:
6e:c2:64:ac:1c:d3:4d:a5:37:46:19:b7:7c:06:a7:
98:23:5b:73:c7:f9:e1:4c:57:2a:fe:8c:fc:94:9c:
8d:6b:63:6e:d9:25:ed:b5:db:ab:c2:ba:d6:fc:9a:
8a:11:7a:0e:9a:56:6a:73:d0:42:1f:2c:72:e4:e2:
85:b5:a4:db:e7:78:5e:ea:e5:26:a0:49:a0:1a:cb:
6b:45:20:12:12:ed:24:2c:7a:3b:63:a6:f7:06:e5:
30:cd:30:e6:61:db:28:45:94:d1:87:c5:1f:67:d5:
2b:c4:34:68:4d:63:c6:4b:e5:22:46:30:70:bf:c0:
74:15:5b:8a:9e:10:25:84:2d:b2:81:b7:da:8c:87:
75:f4:e0:eb:ca:4c:4b:50:d4:d0:88:76:01:8d:47:
50:2c:f9:c3:3e:f1:d3:1f:f8:fa:7e:f2:25:b7:d3:
3e:ec:55:0c:d2:37:64:49:79:9a:ca:11:56:62:68:
f2:1b:d9:7a:08:3a:69:ac:bb:ec:1e:cf:dd:e2:ae:
bf:59:a7:65:a1:8c:ac:35:8d:ac:cb:d2:4f:12:0a:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:06:85:D9:01:D7:D4:D2:7D:3E:5D:E9:E5:2A:47:EF:B2:BF:74:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:80:14:c7:41:67:53:6f:40:2f:3d:d0:3e:76:78:55:df:89:
22:26:ce:f4:4e:43:d6:12:b4:e3:e2:f6:7f:78:0f:eb:98:6c:
b4:8b:96:c8:31:61:4e:de:dd:bb:8c:9d:f5:97:6a:b4:4c:98:
f1:6e:b2:86:f4:5f:3e:51:81:a2:c2:b4:fb:e0:b5:f7:71:8b:
ec:be:62:ce:98:21:84:e6:fa:f0:71:d7:a5:5f:87:c3:11:a4:
ff:af:25:fb:0d:c0:c4:b5:4d:32:36:19:58:64:07:d2:59:53:
f1:cc:a3:cb:6a:14:9f:42:77:9a:ab:9a:83:c0:80:32:ff:d5:
12:e0:d4:d8:87:2e:41:1a:f4:7f:bd:15:58:bc:2a:db:f9:c3:
bf:15:de:c1:06:69:25:7c:31:8b:9e:5f:52:95:e9:03:87:d2:
f5:c0:26:c1:53:68:49:dd:ac:29:5c:c1:be:e9:ba:4a:3f:09:
ff:5c:b5:8a:28:2c:73:6f:ea:c0:e3:e3:80:74:47:a7:ec:a2:
cc:a6:cc:58:ed:cd:81:60:e3:61:19:d1:0d:4e:1e:aa:ca:57:
5d:b4:1a:c3:f9:e8:fa:fa:2d:1c:92:71:b6:1b:b8:b3:f7:f9:
d3:1a:f4:a9:9a:9b:f4:61:4a:77:e2:88:75:28:91:43:1b:0a:
db:3c:ac:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjNOXa2CwrfSVjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YmI0ZTc3Y2MtOWY3Ni00NTA3LTlmYzQtYzE3YjBmYzE5MzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjnI/2TWzDTjgOZRb9nsHmzhZJSOoTUePzRV
F40cLX8FPg+WPC0A8lJM/KZuwmSsHNNNpTdGGbd8BqeYI1tzx/nhTFcq/oz8lJyN
a2Nu2SXttdurwrrW/JqKEXoOmlZqc9BCHyxy5OKFtaTb53he6uUmoEmgGstrRSAS
Eu0kLHo7Y6b3BuUwzTDmYdsoRZTRh8UfZ9UrxDRoTWPGS+UiRjBwv8B0FVuKnhAl
hC2ygbfajId19ODrykxLUNTQiHYBjUdQLPnDPvHTH/j6fvIlt9M+7FUM0jdkSXma
yhFWYmjyG9l6CDpprLvsHs/d4q6/WadloYysNY2sy9JPEgpK3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIGhdkB19TSfT5d6eUqR++yv3RmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvY2ZlYjhkMzQtZTJlNS0z
NGYzLTliNDMtYWYxYmVlYjM0NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiAFMdBZ1NvQC890D52eFXfiSImzvROQ9YStOPi9n94D+uYbLSLlsgx
YU7e3buMnfWXarRMmPFusob0Xz5RgaLCtPvgtfdxi+y+Ys6YIYTm+vBx16Vfh8MR
pP+vJfsNwMS1TTI2GVhkB9JZU/HMo8tqFJ9Cd5qrmoPAgDL/1RLg1NiHLkEa9H+9
FVi8Ktv5w78V3sEGaSV8MYueX1KV6QOH0vXAJsFTaEndrClcwb7puko/Cf9ctYoo
LHNv6sDj44B0R6fsosymzFjtzYFg42EZ0Q1OHqrKV120GsP56Pr6LRyScbYbuLP3
+dMa9Kmam/RhSnfiiHUokUMbCts8rMA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:58 2026 by rpki-client