
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
File: 7cc02203-158d-396c-b655-061c5cbbf221.roa (raw, json)
Hash identifier: gFwVjSjkHsesTOSA4T4KriSFdfZot163ZKdLJE51+ec=
Subject key identifier: 0D:99:1B:79:DA:FA:42:2E:A2:ED:9F:BE:1D:C7:85:EF:9B:48:CD:45
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584CB981D88128A38D3377374A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 26004
IP address blocks: 165.254.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:d8:81:28:a3:8d:33:77:37:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=80076376-fd80-4947-a804-2f8801f7974a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:dc:51:50:e1:56:4e:c8:34:d0:4f:47:7b:
6b:d4:31:3d:fd:89:16:f6:74:26:1e:08:3f:3f:04:
1f:6d:81:7d:f9:de:e1:ad:8e:60:71:1c:5c:be:ce:
dc:76:69:e9:fb:3a:dd:ec:62:2f:26:78:a2:cb:b9:
e3:1e:aa:2a:44:9c:7a:ca:74:7b:9c:86:36:77:64:
b0:30:cf:c0:ec:c0:09:4d:ff:64:c9:92:70:5e:65:
28:d7:47:a0:12:39:32:c3:8c:61:07:a3:dd:a0:5f:
8e:4e:c2:28:71:2b:fa:94:8d:c7:6c:b6:a4:de:83:
c2:6d:11:9c:f7:94:46:04:c6:7c:b1:2d:bb:0a:1e:
ad:d3:17:f4:ec:2c:fe:65:f3:ca:4e:b1:c9:b2:f9:
bd:9a:3e:35:7b:c6:27:88:f8:6d:b5:08:f8:2d:04:
80:d7:02:97:6c:13:a8:87:be:a3:fe:56:59:48:0e:
3b:5b:40:df:77:f1:9b:fc:fe:81:00:26:29:83:9c:
97:fd:58:8d:5d:48:a0:77:40:78:af:86:58:80:02:
5d:2f:c1:6b:be:b4:79:83:40:56:8d:de:72:79:63:
36:96:91:45:f8:e3:9d:64:36:df:12:d3:61:a6:1d:
c8:1f:dc:e3:d3:19:93:57:0e:4e:34:db:b5:e8:55:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:1B:79:DA:FA:42:2E:A2:ED:9F:BE:1D:C7:85:EF:9B:48:CD:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7cc02203-158d-396c-b655-061c5cbbf221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
165.254.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9b:f9:d4:f2:48:f5:05:86:ee:3f:00:29:51:dc:27:51:1d:
1d:97:c0:41:f7:90:ea:a6:30:58:22:37:d3:4b:8e:33:cf:42:
c7:41:dc:13:db:b0:9b:71:52:af:e1:eb:b7:9c:a4:b3:d9:42:
b0:2d:85:c1:29:d8:8b:df:5c:68:be:bf:f6:17:98:3f:8a:9e:
7d:c6:13:58:ec:03:57:61:7f:29:44:a0:28:5a:c9:79:a2:db:
06:6f:bd:0b:8c:e8:3b:e1:02:98:7a:dd:83:eb:db:b1:44:8c:
2a:d7:34:29:c7:53:82:ea:0a:88:a4:21:49:73:73:14:d1:d1:
48:bd:03:1c:37:44:c1:f0:73:a8:29:0f:25:8b:33:66:82:0a:
2e:7e:cb:01:fb:51:b2:d5:24:be:7c:eb:98:a0:1a:3f:fe:d4:
91:f4:d5:80:10:17:02:1f:7b:6b:77:05:06:04:0b:00:77:fc:
f2:d8:67:30:4d:4e:b5:ea:50:27:ed:84:48:ba:02:99:6f:d4:
20:ac:0b:8f:74:39:da:ee:37:5d:4e:9d:44:9c:7c:52:79:fa:
24:87:6a:7f:95:8b:a2:c7:d1:63:f9:27:d2:e4:40:b0:8c:fc:
f8:a5:e9:3a:35:e5:b7:8d:fb:fa:3a:44:01:3d:bf:a9:5f:c5:
bb:1b:3e:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdiBKKONM3c3SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
ODAwNzYzNzYtZmQ4MC00OTQ3LWE4MDQtMmY4ODAxZjc5NzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMDcUVDhVk7INNBPR3tr1DE9/YkW9nQmHgg/
PwQfbYF9+d7hrY5gcRxcvs7cdmnp+zrd7GIvJniiy7njHqoqRJx6ynR7nIY2d2Sw
MM/A7MAJTf9kyZJwXmUo10egEjkyw4xhB6PdoF+OTsIocSv6lI3HbLak3oPCbRGc
95RGBMZ8sS27Ch6t0xf07Cz+ZfPKTrHJsvm9mj41e8YniPhttQj4LQSA1wKXbBOo
h76j/lZZSA47W0Dfd/Gb/P6BACYpg5yX/ViNXUigd0B4r4ZYgAJdL8FrvrR5g0BW
jd5yeWM2lpFF+OOdZDbfEtNhph3IH9zj0xmTVw5ONNu16FVw+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2ZG3na+kIuou2fvh3Hhe+bSM1FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2NjMDIyMDMtMTU4ZC0z
OTZjLWI2NTUtMDYxYzVjYmJmMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpf7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmb+dTySPUFhu4/AClR3CdRHR2XwEH3kOqmMFgiN9NLjjPPQsdB3BPb
sJtxUq/h67ecpLPZQrAthcEp2IvfXGi+v/YXmD+Knn3GE1jsA1dhfylEoChayXmi
2wZvvQuM6DvhAph63YPr27FEjCrXNCnHU4LqCoikIUlzcxTR0Ui9Axw3RMHwc6gp
DyWLM2aCCi5+ywH7UbLVJL5865igGj/+1JH01YAQFwIfe2t3BQYECwB3/PLYZzBN
TrXqUCfthEi6Aplv1CCsC490OdruN11OnUScfFJ5+iSHan+Vi6LH0WP5J9LkQLCM
/Pil6To15beN+/o6RAE9v6lfxbsbPsM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 11:53:27 2026 by rpki-client