
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
File: 09685784-f7f7-3436-990f-6353d789309c.roa (raw, json)
Hash identifier: mKM/rpd4Y+3MwmMqkcx8yxcMKgEXPRm8BK2fXzUVz0Q=
Subject key identifier: 11:DF:63:E6:F0:B6:A3:ED:B0:B9:49:A1:4B:6B:54:CA:C9:8E:86:7C
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8476E22B005FB167BD832480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 107.167.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:e2:2b:00:5f:b1:67:bd:83:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=0f75a342-e3ce-46b2-b737-bfc59b6f70fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:dd:a1:f6:5e:f4:98:e4:89:4a:70:49:e8:
c3:10:74:da:62:28:57:1c:e0:2a:de:1a:d0:43:9a:
65:a0:c7:68:f9:3d:f8:4c:a4:0a:90:b8:52:96:92:
37:78:b8:78:bd:5f:3f:22:fa:61:1a:c1:db:15:c8:
51:dd:68:39:fd:16:f9:de:d1:a1:b7:99:07:15:61:
92:7d:a6:b1:66:74:17:a7:c1:90:e6:49:2a:0d:1c:
13:4e:0c:c1:ab:cf:56:0e:71:bc:81:2d:89:b2:8e:
7e:30:c0:e9:72:0b:5f:4a:6b:6e:c7:f3:17:99:39:
72:84:ac:23:df:69:78:ef:4a:d8:f0:11:f7:75:ba:
ee:f6:99:2b:8b:98:8d:1a:b9:5d:65:d6:d6:be:95:
91:57:f5:b1:2c:af:48:f3:8d:81:20:c4:29:f3:95:
da:88:6b:f6:4d:b9:80:8d:0b:9d:7b:22:13:e4:e3:
f0:1b:88:ca:c3:3f:5f:fe:23:e6:1a:50:0a:10:b2:
4e:4e:ac:39:94:bf:04:58:fa:3d:4f:25:51:97:26:
e8:6e:98:56:83:ee:9c:f0:e8:66:c4:4b:94:f3:ea:
5e:8a:02:2f:23:c7:e3:8c:ca:3f:1a:4a:57:50:9b:
b4:64:22:13:67:e1:6c:d6:f6:3e:e2:b1:e4:60:c9:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:63:E6:F0:B6:A3:ED:B0:B9:49:A1:4B:6B:54:CA:C9:8E:86:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:83:e5:6c:9f:20:99:17:0d:b1:24:6e:56:33:aa:b7:3d:e2:
a7:33:74:29:90:ff:37:7a:90:74:70:3b:14:9a:14:3e:fa:64:
22:b5:8e:60:f4:2f:53:df:ae:0e:33:34:a9:6d:2e:a1:1c:27:
09:26:3f:e6:d0:b8:13:31:bb:a7:cc:70:d3:9c:54:35:68:97:
d0:6c:e7:85:54:7b:4b:f9:4e:74:e2:d9:1c:7f:68:cf:4b:22:
ad:91:a3:72:5e:08:9e:88:45:ec:12:21:aa:b7:97:0a:ec:12:
0b:71:8a:f3:a5:1b:90:6f:83:05:1b:5c:ac:55:4c:d0:60:e1:
fc:fe:4a:2a:71:ab:fd:c4:6e:90:90:35:21:c2:ed:f3:57:b2:
24:38:40:27:48:fc:b2:e1:c2:a8:5a:b8:45:dd:e2:86:8c:0b:
4d:19:2b:78:9e:a8:95:fc:2b:7a:c2:39:f9:3c:ed:2a:eb:8b:
9b:99:93:0f:4c:ab:eb:0a:46:e3:2e:1c:05:7f:e8:c8:49:56:
97:04:11:3a:26:89:18:a6:8c:2f:be:8c:4f:c5:63:4b:f7:78:
78:57:3f:94:a4:22:83:0a:3e:da:54:cf:47:0a:d0:b1:d5:53:
c9:de:e2:fd:7e:ac:e4:b8:c0:30:cd:d5:eb:e1:bd:9d:07:1b:
3b:8a:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:17 2026 by rpki-client