
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9a92219e-7b4f-3678-b550-bcc7e2849366.roa
File: 9a92219e-7b4f-3678-b550-bcc7e2849366.roa (raw, json)
Hash identifier: yGzfqIgxzDtwF4gZL7/LGmlu7WaYV+gtenw0ha/IBlQ=
Subject key identifier: EF:3F:8F:F3:1B:1A:C8:7D:CE:7C:B0:A7:DF:83:54:44:36:93:6D:92
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D52434BD53DAF973C308E0CE0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9a92219e-7b4f-3678-b550-bcc7e2849366.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 30036
IP address blocks: 97.64.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:4b:d5:3d:af:97:3c:30:8e:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=3bd6e978-3869-4610-890c-d8e808bc6a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:e5:a3:66:53:e5:90:14:38:a5:dd:55:b3:
4d:be:5e:d5:e8:53:78:ec:b3:6e:80:05:b6:36:3d:
08:e2:8e:ea:2e:df:2e:24:75:38:dc:68:b5:7c:55:
3a:a0:90:5b:a5:1e:c2:b0:51:6d:2b:99:df:a8:b6:
3b:aa:2f:3b:c4:6b:37:00:4c:10:05:93:23:43:56:
99:b3:db:ff:7f:16:0c:86:6a:3e:f0:08:ba:56:c0:
2a:f6:09:2e:5a:8b:a5:2d:be:fc:2a:2f:ee:14:9d:
76:76:7a:22:78:94:e3:c0:82:80:6e:67:b8:21:b5:
64:70:1f:93:a9:ed:7b:d8:cb:c5:25:fc:fa:37:b1:
ef:1a:7e:e3:3e:b6:19:f1:ac:5a:a4:b6:e7:12:3a:
28:8d:e4:45:58:5b:19:4b:70:d8:4a:d6:b3:9a:93:
2a:ea:9e:d8:16:67:0d:53:f9:48:ac:18:28:c5:5e:
23:28:c3:b6:27:8c:38:23:78:ab:90:ba:a0:2a:48:
2f:ab:86:84:54:da:5f:d8:96:74:81:a0:46:29:ae:
e6:d0:af:cd:59:56:95:ed:15:28:d6:a1:ed:60:a4:
f9:43:f3:a7:b2:6b:59:91:5a:f8:c6:7e:e4:83:43:
8e:dc:8e:35:e7:6e:7a:bd:90:bf:7c:3d:c3:c8:ef:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:8F:F3:1B:1A:C8:7D:CE:7C:B0:A7:DF:83:54:44:36:93:6D:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9a92219e-7b4f-3678-b550-bcc7e2849366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:9b:5e:a1:8d:a0:9b:09:58:58:9d:d5:fa:e7:d5:81:55:57:
5e:b5:d6:65:84:62:0b:fe:6e:27:6b:00:30:59:7c:89:1c:4b:
42:b2:d4:0f:e5:a9:b3:d0:b5:3c:32:72:6c:b4:a1:f9:2b:05:
0c:fd:f5:03:db:9d:ab:18:f6:4d:05:9f:53:44:6d:dd:d9:55:
d1:10:4c:72:0c:e5:b2:2d:7e:be:d3:dc:d5:e4:7e:5c:d8:08:
50:90:14:a3:82:7d:f5:3e:e3:7b:42:19:8c:30:3f:02:22:36:
69:73:35:d2:2c:b9:19:a7:41:b3:0d:b0:e9:24:68:f8:73:1f:
27:14:0d:68:05:ed:5a:2a:60:df:94:7d:fd:dc:78:94:1d:0c:
83:7d:fd:57:9f:98:b4:f1:bc:c1:1c:7e:95:5b:ab:9e:b8:49:
47:58:e1:65:f8:d9:88:f1:b6:c2:58:6b:b8:01:e9:6f:a4:0a:
f4:f1:a0:77:83:cb:ab:48:26:7c:f9:a9:74:c0:7e:0b:0b:14:
8d:ab:f3:4a:37:c7:84:5d:2c:4f:15:b7:d4:ed:d8:4e:ce:96:
6f:9c:74:e3:f6:89:82:47:9a:20:97:ac:08:7c:1f:c6:f6:00:
a0:74:d1:02:37:d9:cf:27:8f:9d:15:11:64:ff:ff:40:5e:1d:
ce:7d:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:51 2026 by rpki-client