
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00325c48-ef89-3a5c-bd3a-c69bae74b5b0.roa
File: 00325c48-ef89-3a5c-bd3a-c69bae74b5b0.roa (raw, json)
Hash identifier: yjWYBgQPjwgZUieDue+/7bwbL53stIc1m6GlNa5Kca8=
Subject key identifier: 82:91:34:01:D7:6D:DF:17:22:BA:50:A3:08:8A:17:14:06:46:CC:7B
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BCB619DEFE72DCBE11FF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00325c48-ef89-3a5c-bd3a-c69bae74b5b0.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 97.64.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:b6:19:de:fe:72:dc:be:11:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8ca257d1-cbc1-4831-89be-d27965b2fde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:96:01:8f:46:6a:8d:bc:e8:33:82:4e:07:
eb:d4:00:df:6a:d7:df:4b:82:92:8a:36:07:6d:0c:
d0:b6:bd:30:02:de:d0:31:f8:79:95:ed:af:fc:85:
08:e2:ef:0e:85:29:71:7e:c5:87:a4:4b:89:87:90:
4d:b5:25:19:7b:05:ac:39:5b:07:8f:7c:57:41:47:
8a:31:b9:10:70:0c:bf:27:be:29:10:9c:8c:3a:31:
ab:2d:aa:06:c5:21:98:46:fa:0e:c0:c9:0d:f4:df:
75:27:2e:7d:73:1e:a9:5d:27:4a:41:dd:69:2b:95:
b5:5d:72:31:b3:42:16:d5:de:ae:42:15:4b:75:a1:
94:69:5c:8c:d0:be:b0:17:86:d2:81:8b:60:a7:3a:
ae:82:3a:47:7f:fc:ef:0c:56:07:5f:f1:57:c0:7d:
e0:6f:16:ff:5b:2a:34:cd:ae:34:eb:d1:54:75:f8:
df:93:01:cd:38:f6:83:51:df:fb:78:8f:0c:75:85:
d7:05:90:44:00:2a:60:62:66:ce:40:66:1c:1d:1c:
ec:0f:e1:07:4a:3e:fb:9c:e9:34:99:90:f6:09:83:
f6:8c:7f:54:43:cb:57:4e:95:bb:b6:91:eb:78:b1:
a1:9a:13:99:25:27:05:67:3d:aa:10:e8:8f:69:9a:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:34:01:D7:6D:DF:17:22:BA:50:A3:08:8A:17:14:06:46:CC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/00325c48-ef89-3a5c-bd3a-c69bae74b5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b9:8f:b1:48:13:bd:5b:0f:48:76:5f:38:a7:86:9a:b1:1e:
86:1a:82:04:70:51:f6:9d:61:9d:71:11:24:50:8b:67:5f:59:
a3:9d:65:3d:37:38:0b:f8:08:77:f7:56:b9:36:49:8d:26:df:
36:12:23:8a:e6:67:54:3c:1f:41:34:9a:1c:fe:85:ac:74:02:
66:1b:09:d4:28:dd:eb:98:bc:f2:07:82:e9:39:07:c4:3d:56:
0d:ad:dc:6c:98:5b:80:ae:d4:b8:2c:97:f8:47:14:96:58:5e:
80:14:8d:82:d2:b8:1f:b8:45:65:05:cf:65:7e:5e:09:ae:11:
c2:10:10:9b:38:25:c9:08:50:81:25:cd:ca:d5:d8:fc:7f:81:
42:69:fc:9b:dd:9b:ac:68:3f:d3:1e:f4:43:92:ae:46:63:98:
c0:bc:df:bd:b6:04:f6:f4:0d:2d:74:59:db:78:2e:a1:eb:b2:
70:31:ad:9a:2e:a0:f1:f6:28:49:8e:41:a1:0b:ab:b1:22:c3:
5f:25:1e:6c:b7:e4:2d:fa:22:34:bb:da:8e:5d:97:bf:d2:c6:
5b:d1:8d:b4:c1:bc:20:97:d3:0a:af:71:c8:b9:ce:71:8c:70:
42:a4:ed:d9:5b:d1:59:ba:23:a4:d9:7d:2e:0e:63:0d:c0:a8:
09:51:f2:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLYZ3v5y3L4R/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OGNhMjU3ZDEtY2JjMS00ODMxLTg5YmUtZDI3OTY1YjJmZGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aOWAY9Gao286DOCTgfr1ADfatffS4KSijYH
bQzQtr0wAt7QMfh5le2v/IUI4u8OhSlxfsWHpEuJh5BNtSUZewWsOVsHj3xXQUeK
MbkQcAy/J74pEJyMOjGrLaoGxSGYRvoOwMkN9N91Jy59cx6pXSdKQd1pK5W1XXIx
s0IW1d6uQhVLdaGUaVyM0L6wF4bSgYtgpzqugjpHf/zvDFYHX/FXwH3gbxb/Wyo0
za4069FUdfjfkwHNOPaDUd/7eI8MdYXXBZBEACpgYmbOQGYcHRzsD+EHSj77nOk0
mZD2CYP2jH9UQ8tXTpW7tpHreLGhmhOZJScFZz2qEOiPaZo4jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKRNAHXbd8XIrpQowiKFxQGRsx7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDAzMjVjNDgtZWY4OS0z
YTVjLWJkM2EtYzY5YmFlNzRiNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGW5j7FIE71bD0h2XzinhpqxHoYaggRwUfadYZ1xESRQi2dfWaOdZT03
OAv4CHf3Vrk2SY0m3zYSI4rmZ1Q8H0E0mhz+hax0AmYbCdQo3euYvPIHguk5B8Q9
Vg2t3GyYW4Cu1Lgsl/hHFJZYXoAUjYLSuB+4RWUFz2V+XgmuEcIQEJs4JckIUIEl
zcrV2Px/gUJp/Jvdm6xoP9Me9EOSrkZjmMC83722BPb0DS10Wdt4LqHrsnAxrZou
oPH2KEmOQaELq7Eiw18lHmy35C36IjS72o5dl7/SxlvRjbTBvCCX0wqvcci5znGM
cEKk7dlb0Vm6I6TZfS4OYw3AqAlR8u0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:54 2026 by rpki-client