
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa
File: 58c3f291-5363-3855-b3c5-3f69313bfec0.roa (raw, json)
Hash identifier: Sre5POf0qdisKQqIByfTu0JwhI8xroQtcvZ5a6q5kN4=
Subject key identifier: 7D:10:C6:EB:12:34:A5:C0:0B:16:05:60:F7:E4:38:32:D2:76:A1:A3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C847700E7914E2C6476342F60
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 108.166.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:00:e7:91:4e:2c:64:76:34:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=b1b68201-70e2-4ede-ad75-c46423f6f5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:a2:30:05:02:c1:77:0f:9c:95:cb:a8:e9:
8d:00:3f:84:e0:fc:73:ea:5d:87:34:c4:88:46:a6:
9c:d2:88:6b:c5:dd:8f:d6:bb:d5:1b:0c:d3:37:c1:
7f:d4:4a:9f:4b:64:f1:fb:57:34:bd:49:55:2c:a1:
64:8f:b9:c3:58:11:40:16:dd:13:73:6e:fd:aa:02:
9e:c4:ab:14:2d:7a:02:b2:8d:24:16:2f:bb:74:6f:
26:be:09:37:a8:cf:ca:1e:36:47:1d:7a:8c:c0:9e:
44:96:11:ca:00:38:64:97:a9:f4:6a:9d:11:44:f8:
2d:b3:95:1b:68:ca:c5:2d:3b:7e:91:9b:06:28:2b:
82:02:68:c2:4c:48:ea:f4:7e:c1:dc:67:bf:72:e8:
67:71:39:05:54:58:a9:0b:88:26:ec:53:db:80:f5:
46:63:ed:c0:8b:18:21:38:01:d3:27:37:16:41:4a:
d2:01:3e:17:03:27:a7:2f:7f:f3:43:4f:b5:a2:24:
62:7c:3d:71:4b:8d:15:ed:7a:65:8f:46:e6:fa:8d:
17:99:7f:10:b6:de:5d:ea:f8:f1:7b:e9:e7:62:93:
da:58:12:fe:3c:33:df:51:e1:7b:a9:d9:f0:33:d8:
34:c7:5e:f9:23:94:43:71:88:b1:bd:5e:f8:e3:89:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:C6:EB:12:34:A5:C0:0B:16:05:60:F7:E4:38:32:D2:76:A1:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b4:e0:8a:ef:f0:e9:4e:6b:9b:bd:f3:0f:9d:e1:ff:dd:90:
fa:c3:16:de:b6:02:91:63:e3:dd:a2:ce:cb:c0:07:ce:e6:30:
ca:c2:74:fb:a4:e9:8a:27:82:72:64:19:fd:b0:3a:1b:39:d5:
3d:dd:25:4c:b8:57:27:49:ac:e1:12:74:fb:0b:f6:35:99:c9:
34:19:e6:fa:be:d9:cf:db:e5:5c:0a:70:0a:28:bd:41:f0:6c:
21:a0:f5:32:fd:c3:a1:ee:bc:8d:2b:e0:d6:9b:86:5b:3f:a2:
33:cc:7d:22:88:96:58:6b:ae:89:e8:ef:20:4a:3f:12:e7:aa:
f8:18:2f:71:0e:54:a1:32:08:a3:76:5f:92:42:1d:d4:2f:da:
2c:83:c8:26:a8:83:35:58:a8:aa:42:f7:b1:5d:dc:80:8d:32:
ed:f5:ce:62:d5:c9:9e:48:91:d2:30:40:63:43:7d:a7:71:ec:
e0:9e:ab:b1:2c:37:83:4f:f2:d0:f7:c8:36:9e:f0:bd:db:2a:
8f:3f:1d:aa:75:5d:3e:28:57:51:70:fb:b1:1e:a4:94:ba:57:
00:58:24:46:4a:30:d2:78:89:90:21:be:53:ff:cc:fa:43:32:
fd:ec:42:a7:76:4e:e9:a0:63:90:c1:6d:6b:0a:76:d8:5e:be:
71:9f:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:42 2026 by rpki-client