
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
File: ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa (raw, json)
Hash identifier: kiD5BHWqHCbaOx1wN3QMDEXYn2mwkPCvehN4WaiXSrY=
Subject key identifier: B1:8A:65:08:D7:49:49:86:08:19:48:FF:97:89:A5:E9:A2:79:40:80
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C8476E1C5A4F9FB60F90D4C80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 107.167.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:e1:c5:a4:f9:fb:60:f9:0d:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=f6ab9788-0acb-4781-9efa-377bd75196b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:35:a7:a8:85:81:b0:1c:ae:c5:aa:07:02:
63:7b:1f:e8:ff:7a:78:12:cb:28:59:4c:75:4f:ea:
ea:36:7b:b1:51:c2:3e:a6:21:3d:8a:cb:af:ac:2c:
47:28:41:60:b3:67:8f:7d:f6:7f:9d:b5:14:71:4e:
90:42:50:db:f0:f2:87:cb:d1:a8:5b:6b:f0:cb:27:
e7:7d:77:59:1a:31:ea:13:68:54:71:b3:3d:a9:f1:
1a:ce:18:07:37:cb:c6:42:3d:ae:e1:7c:b0:75:c8:
ac:7c:0e:69:6e:3c:5e:5a:36:70:a7:50:6a:2e:68:
23:32:08:d6:bc:54:3e:aa:b8:8a:89:92:50:b9:d1:
f8:01:7c:1a:55:7f:08:33:da:96:50:7c:18:32:ae:
a8:4f:82:86:8c:dd:c6:4a:ba:9b:2f:af:d4:ce:3a:
f6:04:27:f6:ba:8b:c6:e6:48:c7:c1:af:18:8d:9b:
72:49:15:f7:b4:56:d9:ef:75:1f:99:7e:5d:00:96:
d9:20:93:c4:4a:e3:0a:d0:97:55:be:91:06:c9:27:
73:9e:62:71:24:47:b8:d4:c7:61:20:ec:c5:f0:88:
24:d6:31:7a:e6:96:70:5a:78:56:ea:d4:cc:8a:a4:
26:5a:6d:78:2a:21:92:a9:d5:9c:fb:67:93:d9:c1:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:65:08:D7:49:49:86:08:19:48:FF:97:89:A5:E9:A2:79:40:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba21cea2-4c1d-32bc-ac65-8207e236eedf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:97:13:d0:4e:38:f9:3c:6e:e6:25:1e:72:b5:2d:57:a5:06:
f8:bc:a2:64:00:90:ff:82:37:89:1c:15:95:3e:b2:c7:d8:6b:
31:c4:73:e5:81:57:f7:f6:96:36:d2:a6:b8:c8:59:06:dc:33:
94:2a:16:7a:27:91:a2:d6:89:3e:fa:5b:5f:96:d9:b8:af:43:
0c:76:f1:8c:00:73:ce:a3:a1:7d:b9:be:1c:c9:4d:7c:de:86:
98:b6:97:37:28:97:a7:e8:a4:97:53:b2:8a:79:2c:11:8f:46:
fa:2f:c9:9d:c8:7e:21:5a:9a:2b:0e:13:73:c1:fd:40:98:ac:
9f:24:3b:fe:63:c5:d5:cf:47:ac:10:0f:24:e4:1f:c7:7c:63:
72:3a:b5:6b:ed:27:53:38:62:10:77:85:8a:36:a9:3c:fc:b6:
9f:45:0d:da:5b:cf:33:96:8c:22:c9:4a:03:c4:f5:80:a7:10:
17:56:48:68:c6:66:e8:9e:11:87:d9:ad:ce:6c:14:e8:5e:b8:
5c:28:c7:a1:cb:a3:25:7c:6e:5c:34:b3:d1:20:92:a5:3c:cb:
f3:66:40:a5:ac:7b:99:13:ad:ed:c7:4b:8b:d5:e8:62:b4:b9:
cc:5c:db:6d:22:fb:cc:9b:77:43:e2:cd:16:8d:f0:73:13:a0:
fa:bc:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:45 2026 by rpki-client