
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa
File: 86ff9137-ba37-3761-99ee-1e32d7d0af90.roa (raw, json)
Hash identifier: UWmBOUFhgFVN5MbwErt/lzEV/KdM7f1SRBfHVr6OmXU=
Subject key identifier: 60:5F:69:62:AC:CC:C5:02:51:81:81:DB:74:6B:E7:DB:1F:13:62:5D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BCB7C7C06D85F1EEDFC580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 97.64.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:b7:c7:c0:6d:85:f1:ee:df:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=daf2c1ae-46e1-40e2-bfbc-2e22cea0f3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:30:ce:69:a3:05:3e:09:e0:c5:de:0b:ee:
57:ce:80:6a:05:86:f2:13:0a:4f:f1:be:14:e7:6e:
92:42:6e:af:16:d7:b7:60:d3:92:ae:f6:75:f2:8e:
5f:51:09:48:fe:68:be:3b:27:83:1a:39:b3:dc:9e:
b3:2a:24:aa:f1:25:fb:c6:f7:1e:fe:18:c6:07:32:
0a:c7:84:72:cb:38:76:26:92:7f:b3:d6:73:3e:88:
90:6d:76:6b:45:5a:75:0f:a8:f5:f0:61:04:dc:3f:
46:3f:d9:2b:30:64:76:92:9a:79:3d:fd:13:4a:0f:
bb:dd:d8:f6:c0:3c:a5:bd:c6:58:d9:ac:05:92:7d:
49:a7:83:a6:66:3b:77:f7:ff:b4:e3:43:6f:e1:e5:
92:42:f2:df:e8:fb:44:6c:fb:42:a7:78:5d:86:11:
47:7d:ea:1d:40:c1:68:61:37:fb:0f:2e:ae:fa:55:
b9:52:88:01:11:b4:ca:25:69:5d:d2:20:ed:bb:46:
49:47:0c:e2:f5:67:f8:0e:ff:2b:02:5d:1e:45:51:
3b:59:1b:83:84:bf:5d:a9:16:07:86:03:16:e4:3d:
6e:49:d7:2d:be:65:15:7f:da:cd:f3:8c:31:30:fc:
41:94:f6:8d:39:96:a8:b9:e2:4c:ab:6d:24:09:53:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:69:62:AC:CC:C5:02:51:81:81:DB:74:6B:E7:DB:1F:13:62:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:28:7b:ca:07:cd:06:0a:74:e7:0a:7a:45:60:9f:c8:3f:62:
d9:74:00:1c:7a:f5:29:8f:d8:e0:b9:90:05:d2:bb:07:61:ef:
91:ba:88:7c:08:20:ae:7c:0b:25:d0:06:36:1a:de:33:00:c2:
ee:71:30:d1:bd:71:4e:6a:66:f8:c7:75:f0:55:ca:cd:8c:5f:
fb:df:cc:2d:50:82:af:e3:50:32:ab:5d:94:ae:80:5b:45:f7:
44:86:04:9d:a4:2c:d1:6d:72:3e:2b:28:43:7d:83:b7:92:50:
d7:b0:a7:1b:00:b8:56:1c:3a:4a:14:f6:3e:c4:f1:55:13:e9:
5a:92:e0:2d:92:fe:7b:43:41:ed:b7:c2:84:a1:5d:67:9b:5c:
b9:ae:81:fc:32:3c:36:83:70:03:d0:ee:a7:f3:5c:ec:23:3b:
56:ca:6c:a1:55:14:ba:32:47:02:33:38:99:56:82:e8:34:d8:
63:25:05:93:61:fb:3c:33:be:f1:74:6f:9a:a3:76:4b:eb:7d:
29:a5:40:6f:ef:82:5e:d1:74:98:18:4f:ff:b2:f6:15:1b:e8:
6f:ac:f3:31:83:2f:6b:ea:4f:a1:20:ea:0a:2e:83:71:13:72:
29:75:7a:e4:5e:21:78:89:02:e4:cb:f0:b6:dc:84:dd:2a:e4:
13:aa:b4:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLfHwG2F8e7fxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ZGFmMmMxYWUtNDZlMS00MGUyLWJmYmMtMmUyMmNlYTBmM2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDcwzmmjBT4J4MXeC+5XzoBqBYbyEwpP8b4U
526SQm6vFte3YNOSrvZ18o5fUQlI/mi+OyeDGjmz3J6zKiSq8SX7xvce/hjGBzIK
x4Ryyzh2JpJ/s9ZzPoiQbXZrRVp1D6j18GEE3D9GP9krMGR2kpp5Pf0TSg+73dj2
wDylvcZY2awFkn1Jp4OmZjt39/+040Nv4eWSQvLf6PtEbPtCp3hdhhFHfeodQMFo
YTf7Dy6u+lW5UogBEbTKJWld0iDtu0ZJRwzi9Wf4Dv8rAl0eRVE7WRuDhL9dqRYH
hgMW5D1uSdctvmUVf9rN84wxMPxBlPaNOZaoueJMq20kCVMb/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBfaWKszMUCUYGB23Rr59sfE2JdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODZmZjkxMzctYmEzNy0z
NzYxLTk5ZWUtMWUzMmQ3ZDBhZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQoe8oHzQYKdOcKekVgn8g/Ytl0ABx69SmP2OC5kAXSuwdh75G6iHwI
IK58CyXQBjYa3jMAwu5xMNG9cU5qZvjHdfBVys2MX/vfzC1Qgq/jUDKrXZSugFtF
90SGBJ2kLNFtcj4rKEN9g7eSUNewpxsAuFYcOkoU9j7E8VUT6VqS4C2S/ntDQe23
woShXWebXLmugfwyPDaDcAPQ7qfzXOwjO1bKbKFVFLoyRwIzOJlWgug02GMlBZNh
+zwzvvF0b5qjdkvrfSmlQG/vgl7RdJgYT/+y9hUb6G+s8zGDL2vqT6Eg6goug3ET
cil1euReIXiJAuTL8LbchN0q5BOqtF8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:13 2026 by rpki-client