
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa
File: 2676abeb-4b9d-34be-9a16-17b5611bd27e.roa (raw, json)
Hash identifier: TVt69JOS4RCRhGde3Ys0TP1qGhuyM2S8bgWpt4amLKM=
Subject key identifier: 99:AC:09:31:7F:58:0E:CF:20:F2:0A:D2:5A:00:C7:9D:64:EA:3C:64
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA39D1675929F2352EB15F380
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 107.167.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:16:75:92:9f:23:52:eb:15:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=a11ba065-6ac5-4654-8243-c9070516c189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:63:e7:c3:c4:0e:7e:91:e8:49:ec:57:5a:
17:98:80:4f:ff:10:c8:d8:00:e1:48:bf:4c:d8:29:
c4:82:2d:11:0e:55:f3:8d:d2:ae:06:66:de:29:ab:
37:c0:6a:8b:2a:4e:49:70:44:89:56:ac:92:70:42:
0a:c7:4d:80:a0:49:d7:fa:30:b0:39:98:97:ce:c5:
7c:7e:6d:cc:5f:e9:4f:51:da:c4:fa:be:22:4e:c0:
10:dc:e0:9d:c1:63:6b:65:77:86:db:2a:99:7f:5f:
ac:87:67:17:ca:0c:3f:c1:34:aa:51:0d:a4:13:2b:
88:0e:ff:d5:65:f9:34:f4:ae:ee:f1:2f:8f:b4:98:
67:19:58:23:9a:48:a9:55:fa:2e:15:49:6a:d2:ed:
e9:a9:62:76:76:8f:ad:61:ad:af:f5:9d:80:47:44:
55:bb:f9:fb:b7:bc:5c:51:22:18:21:c2:31:db:2d:
12:96:fa:a9:b2:9b:be:00:ed:1e:be:c6:de:87:3d:
3f:88:be:99:cb:38:28:bf:8c:80:f8:63:72:1b:13:
2b:f4:b6:13:71:19:40:1a:3b:eb:c8:22:34:dc:e5:
58:4a:ee:c6:e2:90:c3:df:27:f0:bf:e7:77:c5:21:
38:bb:85:6f:f9:8f:70:72:58:41:20:f7:9f:4a:cf:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:09:31:7F:58:0E:CF:20:F2:0A:D2:5A:00:C7:9D:64:EA:3C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2676abeb-4b9d-34be-9a16-17b5611bd27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3f:02:a2:6d:85:9f:d9:35:a0:59:24:8b:28:b8:d3:a0:cb:
77:f5:3f:d1:20:6c:52:4a:30:df:75:0c:dd:0c:15:04:6e:da:
88:6e:a2:c4:18:c3:ce:52:84:2d:a1:8c:6c:92:ba:cb:f4:33:
98:cf:36:6b:7f:81:87:77:e3:b0:3f:23:3b:03:4c:e3:dd:87:
1c:ea:a0:d0:c6:56:8a:09:30:9a:d9:81:81:ee:d3:4c:c1:98:
a9:8b:41:4b:b1:4f:5e:b5:64:35:23:13:d6:11:c7:34:4a:14:
81:7d:1a:dc:da:90:2d:45:ea:2a:24:f3:7c:7d:14:41:79:54:
ae:6a:16:19:e7:c5:92:e7:c6:b8:95:52:09:7d:16:49:9b:ac:
9e:af:9f:ec:05:fb:80:e8:41:02:b3:4f:6e:4d:1a:05:b6:dc:
92:9c:b4:58:1f:58:d4:17:ff:70:a5:fd:33:08:bb:af:3d:72:
bd:ab:36:31:e3:55:45:5d:3d:42:07:9d:17:81:82:10:10:76:
17:4a:b2:cb:89:cf:62:53:c2:3a:05:74:0c:3c:e3:0d:6e:41:
43:8c:2d:cd:b0:b0:91:cf:b3:9e:18:d8:4f:e8:fe:69:f6:39:
3c:60:e8:06:6f:7f:a1:8e:f0:2b:c8:79:22:52:49:14:40:de:
48:91:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:38 2025 by rpki-client