
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
File: ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa (raw, json)
Hash identifier: Q6+fbEOtYGOIBRRB6WxDS5Ewtl0MMvAwZF8zCoVHRq8=
Subject key identifier: D6:6B:29:FF:7C:D4:7E:66:7B:A7:D5:B3:24:E8:37:E3:49:D3:D0:07
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584BA39D17C9FA1632925935B7DC
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
Signing time: Sat 25 Oct 2025 13:00:39 +0000
ROA not before: Sat 25 Oct 2025 13:00:39 +0000
ROA not after: Fri 23 Jan 2026 14:00:39 +0000
asID: 30036
IP address blocks: 107.167.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a3:9d:17:c9:fa:16:32:92:59:35:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 25 13:00:39 2025 GMT
Not After : Jan 23 14:00:39 2026 GMT
Subject: CN=90196414-459d-4801-b205-21d470b4024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:09:99:88:00:f8:44:57:16:bc:4d:d8:36:
d1:0f:f7:4d:46:f8:cc:de:db:23:ee:91:f7:71:50:
28:40:99:64:af:e4:eb:c0:38:cb:3f:97:fc:13:56:
90:08:2c:4f:4f:1a:f2:dd:e0:55:39:48:a8:26:35:
b3:34:08:b1:46:8d:ad:3f:76:27:5c:60:2c:c9:4e:
49:5a:1e:6d:78:b1:ff:09:4a:98:76:cf:96:b1:d4:
3c:67:b3:82:1f:22:9c:fe:c6:f6:1d:8b:f6:8e:ff:
cf:ee:52:8c:40:cc:80:ae:72:38:df:4a:91:da:0d:
17:62:36:75:fc:63:48:91:c7:c9:22:df:05:ec:81:
71:13:89:6d:4a:39:7a:ba:62:4f:d2:7a:4b:81:a6:
3e:4f:99:dc:b4:18:ee:f0:63:42:56:d2:df:92:0f:
6e:ae:b6:07:e8:bf:d3:9c:51:3a:88:5b:f8:cf:78:
5b:d0:a9:6e:3a:3a:d5:a3:83:c4:bb:9f:b7:69:71:
db:1d:a1:b5:ca:68:b3:d4:37:63:ec:80:c6:97:b9:
a4:00:af:92:41:3b:49:5c:55:1e:56:f5:59:d4:83:
0d:52:0b:3d:8e:c5:d6:cb:8b:f5:12:70:c1:4b:f6:
9b:1a:d0:98:a1:5e:4e:56:84:83:6a:b7:09:71:e9:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:29:FF:7C:D4:7E:66:7B:A7:D5:B3:24:E8:37:E3:49:D3:D0:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:7f:e9:e9:1b:6b:47:2f:2c:57:1b:96:ba:4c:b5:08:42:24:
fa:a3:d2:7f:cc:d7:ba:51:8b:49:3f:c5:c1:85:db:8d:f1:4b:
7e:23:2b:4d:82:65:fb:a4:90:95:7b:08:9c:36:4e:01:2f:c7:
9f:c1:75:f5:64:bf:b4:22:c7:8c:91:08:7f:6b:6d:fb:6d:2e:
a3:fd:87:34:b2:8f:f1:6b:7b:eb:88:65:37:07:da:6c:73:04:
de:fd:24:de:b5:94:9f:37:cc:71:e3:05:f8:c5:95:8d:2c:14:
d9:43:59:cc:ff:4b:04:d1:b4:fc:09:fa:7a:bb:c5:84:ec:97:
7e:d4:0e:97:d0:92:95:e6:89:ff:f9:0f:1a:fc:32:a4:2b:bb:
be:64:1c:ea:fb:29:d1:dd:3a:09:1c:c2:8f:9b:db:2c:ea:db:
c4:3a:c2:43:6d:fb:58:ad:ac:e9:ae:d9:ee:94:e9:f0:b5:84:
3d:bd:a9:23:70:51:ea:77:67:0f:60:65:bc:f6:ff:8f:17:84:
82:7a:1a:9e:b4:38:c5:a8:4a:3e:64:9e:77:b9:f6:0d:f1:c7:
99:e9:a9:f8:46:6f:1c:21:44:03:1c:35:6b:47:5c:48:ca:be:
eb:0a:65:68:74:0c:51:d3:19:8d:fb:f4:d6:11:6f:d6:16:15:
eb:ec:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:39 2025 by rpki-client