
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db65ff48-1bca-3777-9329-fa33d33aaf70.roa
File: db65ff48-1bca-3777-9329-fa33d33aaf70.roa (raw, json)
Hash identifier: 5Q/DPNOQXBun2A0xYHH0jbOH/TfaLheHTKd3qJEc3Fc=
Subject key identifier: E9:04:AF:57:D6:64:20:25:90:F6:B9:A8:3F:E3:3D:E4:E8:8F:AC:A8
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584C847703FF941905E0F03D86E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db65ff48-1bca-3777-9329-fa33d33aaf70.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 107.167.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:03:ff:94:19:05:e0:f0:3d:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=f23662a9-53f5-4d86-b13c-40274bea54a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:eb:40:a8:b2:05:c6:bb:36:bb:4a:74:93:
27:be:aa:02:18:e3:80:5b:52:0b:23:7b:51:91:fc:
3c:79:5d:be:70:84:d1:32:b7:17:fb:56:33:ad:bd:
a6:34:9b:56:2d:54:75:e5:a2:79:3e:cd:25:fe:0d:
0d:66:a3:43:4f:c8:6f:e4:8e:88:06:95:0a:65:0f:
d9:01:ab:40:87:47:fe:4a:a0:74:d7:d5:73:43:5b:
5a:a5:c6:5c:f8:a2:7e:2f:9d:10:c5:14:3e:ae:b2:
43:2b:5e:f0:6f:cf:2d:39:80:75:57:cf:23:f3:ea:
ae:2b:cf:80:28:eb:5c:ee:f4:c0:b8:8c:69:e7:2e:
0b:47:f0:d1:41:60:e2:46:ef:98:0e:05:ea:61:86:
f6:8e:2a:da:be:29:a7:8e:78:92:30:eb:e5:ab:9b:
ff:fe:ca:a3:7a:3d:fa:93:7a:44:50:02:6e:64:2f:
2e:47:8b:8c:01:99:a4:08:67:ce:64:99:7a:e6:73:
1d:1d:66:f1:75:10:ef:ef:98:d4:21:e0:fd:b1:9a:
63:4e:ce:22:6d:0d:dd:68:74:a7:f5:53:08:1f:36:
b7:84:89:9c:fd:97:6d:25:05:02:11:a3:d3:83:b4:
95:60:e1:d8:24:68:39:74:39:a8:81:f1:8b:21:5b:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:AF:57:D6:64:20:25:90:F6:B9:A8:3F:E3:3D:E4:E8:8F:AC:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db65ff48-1bca-3777-9329-fa33d33aaf70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:5f:e1:ce:28:53:b6:df:f7:f3:e3:c6:46:94:31:55:ba:7d:
2f:91:0b:48:15:2a:90:ca:0e:55:c7:64:40:b9:ec:2e:f8:b8:
e7:da:4a:89:b9:61:f4:56:86:07:0b:be:4f:e0:83:1c:21:d6:
22:19:3d:99:a7:4f:bd:c5:aa:b6:01:77:ca:71:30:0f:a1:3a:
fa:78:a6:ce:11:60:0e:80:a4:b3:89:64:2f:e7:05:3a:18:48:
53:5c:2b:6a:a0:70:4e:10:2d:1c:f3:e6:c4:59:ff:cb:aa:22:
d1:1f:90:c7:c9:ab:07:6c:57:52:5a:1f:59:a1:d4:9d:34:30:
30:f0:db:d0:ff:74:94:26:1b:70:dc:3d:8b:e9:00:b4:7d:08:
6b:68:a0:b7:ee:61:c8:f6:9c:ed:62:82:04:4a:fa:57:44:5d:
7b:70:74:4c:2e:20:59:d5:5f:05:b9:cd:3f:0b:36:0a:86:ed:
93:3f:59:e7:8f:2a:f0:ae:10:ef:d4:31:3d:3e:58:04:77:9f:
72:4d:f1:c2:2e:e5:58:1a:cd:76:12:27:a8:cd:8c:5b:14:ae:
67:3f:eb:8b:e2:19:ce:72:24:45:b1:d4:f4:cc:26:7f:02:61:
a2:b9:97:16:1e:00:39:6b:f9:29:d1:d3:d4:5f:fd:c9:f2:35:
9a:3a:1e:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwP/lBkF4PA9huAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
ZjIzNjYyYTktNTNmNS00ZDg2LWIxM2MtNDAyNzRiZWE1NGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3DrQKiyBca7NrtKdJMnvqoCGOOAW1ILI3tR
kfw8eV2+cITRMrcX+1Yzrb2mNJtWLVR15aJ5Ps0l/g0NZqNDT8hv5I6IBpUKZQ/Z
AatAh0f+SqB019VzQ1tapcZc+KJ+L50QxRQ+rrJDK17wb88tOYB1V88j8+quK8+A
KOtc7vTAuIxp5y4LR/DRQWDiRu+YDgXqYYb2jiravimnjniSMOvlq5v//sqjej36
k3pEUAJuZC8uR4uMAZmkCGfOZJl65nMdHWbxdRDv75jUIeD9sZpjTs4ibQ3daHSn
9VMIHza3hImc/ZdtJQUCEaPTg7SVYOHYJGg5dDmogfGLIVufsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkEr1fWZCAlkPa5qD/jPeToj6yoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGI2NWZmNDgtMWJjYS0z
Nzc3LTkzMjktZmEzM2QzM2FhZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6feMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNf4c4oU7bf9/PjxkaUMVW6fS+RC0gVKpDKDlXHZEC57C74uOfaSom5
YfRWhgcLvk/ggxwh1iIZPZmnT73FqrYBd8pxMA+hOvp4ps4RYA6ApLOJZC/nBToY
SFNcK2qgcE4QLRzz5sRZ/8uqItEfkMfJqwdsV1JaH1mh1J00MDDw29D/dJQmG3Dc
PYvpALR9CGtooLfuYcj2nO1iggRK+ldEXXtwdEwuIFnVXwW5zT8LNgqG7ZM/WeeP
KvCuEO/UMT0+WAR3n3JN8cIu5VgazXYSJ6jNjFsUrmc/64viGc5yJEWx1PTMJn8C
YaK5lxYeADlr+SnR09Rf/cnyNZo6HsY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:11 2026 by rpki-client