
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa
File: a3fd8fde-2788-3cf7-888e-517625ab1167.roa (raw, json)
Hash identifier: VOezWHGkr504jiFY8dkLU2+1qrCurUPGFd/C1bXFqTs=
Subject key identifier: 05:30:7C:13:C8:FD:78:13:9A:44:CB:5F:B4:FB:FC:B6:B2:1D:70:1A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584D55BA35BC5A94058DA87D4100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 30036
IP address blocks: 97.64.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:35:bc:5a:94:05:8d:a8:7d:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=25bb3990-4e0b-4268-9df3-c375cafc2f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:46:3a:93:5c:e6:85:0c:15:53:83:de:ab:
f9:26:ac:34:65:f8:71:ee:ed:00:3c:a7:8f:c2:fa:
70:f1:86:e4:e9:55:37:f8:1a:2d:11:04:b9:24:39:
e8:cf:55:7c:c7:82:1e:dd:45:b3:16:c9:63:80:65:
97:64:a5:04:c2:6c:8a:03:90:93:c0:c1:59:62:16:
96:23:1e:87:5f:5d:68:11:d3:ee:a7:6d:af:ca:40:
da:21:f7:45:49:84:98:81:f2:54:e1:03:23:b2:d4:
8a:63:15:ae:e2:bc:44:e5:4a:65:41:e5:95:31:2d:
60:8c:1b:c9:a8:70:43:dd:2a:55:83:31:c4:3c:ba:
8f:33:19:92:03:31:5c:46:1a:eb:4a:f6:a3:79:17:
c2:d9:e7:40:a8:9e:65:cf:d5:7c:a7:fb:57:16:96:
d6:40:99:bd:ee:3d:16:58:ad:24:bf:21:d0:fc:53:
a9:1c:e7:b3:28:e9:a9:9b:84:af:3b:0e:15:41:50:
d5:53:8f:35:f5:17:5b:31:60:5f:78:a1:e6:6a:e1:
4e:09:fb:31:39:63:ce:bb:b4:63:8c:4a:ad:6d:aa:
4b:cc:7e:f8:79:11:02:c1:9c:32:f6:14:17:bc:a7:
51:b2:70:8e:ba:cb:9b:67:79:5d:cf:6c:1f:66:f7:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:30:7C:13:C8:FD:78:13:9A:44:CB:5F:B4:FB:FC:B6:B2:1D:70:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:90:22:53:59:08:6f:c9:d9:77:2c:d7:7b:96:51:d3:17:79:
9e:62:5d:7a:be:40:5b:c6:0c:84:7e:14:25:05:6a:be:0a:0d:
40:c8:1b:ae:5c:27:a0:e8:c0:94:5e:88:5e:7f:f0:ef:00:08:
e6:4b:4d:37:3a:a7:e2:5a:ca:24:c8:ce:4a:df:12:f9:79:d9:
09:fe:ba:ec:14:b3:fd:02:7c:b8:4f:e6:f5:36:d6:8a:7f:f7:
ac:9a:9d:38:38:87:93:3c:e6:c8:17:18:ca:97:63:dd:28:99:
a9:31:5c:fe:92:05:80:d6:24:b2:6e:ab:2a:60:b4:f4:bb:d3:
e1:df:fa:ab:60:eb:d0:be:8d:89:f1:10:69:72:cc:01:d4:06:
63:75:c4:d5:6e:b4:9e:b1:38:16:40:ea:47:64:40:38:44:de:
dc:29:3e:d1:5f:a3:a1:34:25:09:00:3a:38:31:51:a8:1e:55:
6f:f3:bd:d8:22:29:ea:22:c4:85:44:94:20:68:23:5e:ed:da:
c6:58:4e:fd:00:c1:cb:01:39:29:49:b1:de:19:9d:17:d7:af:
6f:d7:2d:95:a2:cd:df:fb:f4:7f:4e:14:62:34:fe:54:38:99:
db:45:5e:f9:b2:fb:4b:44:41:08:4d:e1:68:f1:1c:19:9c:6b:
9a:66:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:30 2026 by rpki-client