
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
File: 2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa (raw, json)
Hash identifier: qCyZYaB3CYk8c/kHYRPgBh7UVAuMGonp/hjKKr82K1s=
Subject key identifier: C9:BC:59:3F:F9:C2:97:7C:6F:A8:3E:0E:A2:C9:23:11:9D:75:C2:37
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BA34D5ED6FC26B39451F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 97.64.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:34:d5:ed:6f:c2:6b:39:45:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=edef915d-5329-4658-bcea-880a8673788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:50:6e:e2:ba:c3:4b:da:44:e6:99:3c:ca:
60:30:07:16:42:b3:4f:e7:3f:7a:b5:2e:9e:f2:82:
c7:5c:ee:14:72:6f:bf:6e:b1:39:a7:25:0a:17:f9:
49:ca:13:38:92:fe:42:21:48:77:75:80:ff:1d:b6:
a2:a1:80:39:e2:ef:fb:52:77:f9:d4:53:41:85:46:
f7:92:13:5a:8a:f1:b8:72:e8:ca:e1:a0:1b:2e:e0:
4e:bb:08:c4:8f:96:a4:4f:3d:90:d8:f1:99:dc:cd:
30:83:c9:5b:d1:53:d9:9c:ef:67:04:45:f5:8d:69:
69:bd:bc:fd:52:84:eb:b8:ca:5a:c0:56:94:10:ba:
61:5f:68:ed:6e:76:74:26:04:3c:64:53:cf:9d:04:
a0:34:b4:28:a5:16:b3:47:61:45:1d:2f:30:00:0c:
e5:fe:1f:18:65:de:3b:49:01:a3:e2:f1:c8:60:70:
0c:18:da:3f:0c:1f:3b:8b:26:5d:2d:18:09:0d:4c:
06:ea:ef:0b:3a:58:71:55:38:66:81:06:5b:af:f3:
1f:c6:7e:8c:9c:fa:cd:a2:39:f7:13:10:80:a7:f5:
e3:ea:c3:34:c9:82:b0:62:1f:92:d3:18:b2:29:3d:
06:62:bf:5f:9a:3d:72:50:38:c4:b8:a4:c1:9f:a8:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BC:59:3F:F9:C2:97:7C:6F:A8:3E:0E:A2:C9:23:11:9D:75:C2:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:eb:3c:a2:26:34:00:01:48:27:21:89:95:98:c3:77:23:50:
4c:86:01:17:77:ed:e6:cc:57:3a:54:23:6f:4e:3d:37:a6:6a:
73:ca:fe:8e:7c:79:5e:00:b9:ce:70:fe:9a:60:71:1e:cd:62:
b1:1c:f1:c1:8f:fa:a6:80:6a:9c:8c:ff:ad:6a:99:f2:44:f0:
dd:c8:b3:2d:6c:7b:c7:a4:49:53:a8:17:de:a8:15:1c:b4:a3:
6d:5f:b3:40:e0:b7:90:ce:2d:60:af:ae:79:22:0b:7b:08:24:
5f:d6:f6:69:13:e7:2f:b5:07:05:8e:b3:c7:ea:51:cd:3b:f5:
c1:b4:0d:c2:f6:51:a4:bd:c8:df:73:cc:49:89:85:39:b5:e2:
32:9a:80:9d:0d:3f:0d:2d:95:e2:cc:b7:dd:74:da:dc:d3:b0:
72:5c:05:ce:7e:0a:1d:82:b3:82:62:f8:83:cd:54:7f:ff:e9:
93:ce:a8:74:8b:72:8a:83:ce:78:94:f5:82:56:b7:ed:83:6e:
f5:af:bc:43:4a:71:36:8b:49:8c:7a:bc:9f:27:fc:dd:0f:43:
b6:1d:a8:06:65:e2:1c:f9:14:72:e4:34:32:37:61:65:1a:71:
50:33:d5:b7:da:b8:3c:02:31:b6:aa:c4:7d:96:6a:97:a1:99:
83:fe:1a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:11 2026 by rpki-client