
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa
File: f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa (raw, json)
Hash identifier: 7/E1I33BxkLp9RWTzn6waPXqLSYkTjWoXysfjK//ArU=
Subject key identifier: BA:0C:F2:DE:A5:E7:CF:CD:37:13:6C:29:FD:74:28:1B:C2:C5:54:50
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584B95AB00499267351B75898A80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 30036
IP address blocks: 97.64.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:ab:00:49:92:67:35:1b:75:89:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=c682acca-ae13-4766-9487-d80351c60196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e4:e5:66:d0:0d:4d:31:a9:8a:87:ce:d3:1b:
59:47:88:7b:21:3a:04:50:02:7c:34:0a:8e:96:08:
c5:1e:bd:24:e8:26:8c:58:f0:18:2e:f7:31:e4:4a:
43:79:5d:d3:31:28:8c:8c:3c:b9:1e:e6:92:53:fe:
cb:f3:a4:96:ad:15:a2:48:75:ec:33:f3:cf:ad:3e:
1b:d5:d0:da:ff:85:68:c4:0e:4c:42:dd:48:db:06:
8e:74:3c:6c:fa:40:8d:04:94:df:bb:62:d5:71:3e:
38:6d:13:da:73:eb:79:67:73:9b:f7:73:a8:d9:7e:
a2:b1:8f:74:90:f1:2c:fd:ef:b0:5c:a0:1d:15:5d:
90:c7:22:2b:5e:d1:da:b5:16:7e:e1:b5:0d:cc:06:
23:6c:46:12:fe:56:e5:4d:a2:03:bf:ea:20:b7:5e:
f1:3c:8d:2f:66:8f:2b:31:f4:c0:c4:e3:e3:37:33:
eb:65:a6:22:88:36:51:27:36:4f:b6:2b:ee:93:74:
0d:e5:65:2e:1b:73:12:fd:18:9c:3a:b0:ae:b0:2b:
98:06:02:dc:1f:a4:b7:35:c0:9a:30:6a:dc:37:17:
4c:84:a3:c0:f6:c9:15:28:fe:1f:38:0c:c8:5e:ba:
19:40:ab:b3:71:9f:a5:c5:0c:e6:1d:02:54:e0:74:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:F2:DE:A5:E7:CF:CD:37:13:6C:29:FD:74:28:1B:C2:C5:54:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f2fc3fe1-53bc-3b05-90b7-fa4f8a4a17e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:14:74:94:28:30:31:2a:33:d3:7e:ec:3b:ce:f0:bd:be:40:
32:3f:ea:6e:58:99:0f:4a:0f:69:9e:b9:5f:90:82:fd:c8:9f:
78:57:d9:10:71:97:16:21:0c:c7:98:9b:9f:8e:12:2c:e9:b6:
5f:7c:29:79:ce:8c:36:1c:c5:60:ab:4f:f4:d8:9a:5f:ee:99:
93:2a:b9:1a:c6:d2:21:92:d3:2b:7a:2c:af:04:53:64:4c:f6:
44:47:5b:75:13:30:0f:65:a6:f5:28:ed:4a:e6:c2:af:84:04:
10:74:98:76:4d:35:de:ae:c0:9f:6e:2c:1a:71:d2:00:7a:8e:
0d:90:c8:48:17:5b:ba:dc:9d:06:e8:68:1e:4a:c8:66:b9:d3:
2b:3f:94:79:7e:4d:b5:44:68:58:79:31:e5:15:e2:90:45:a9:
9d:11:57:4d:23:c5:8b:11:7c:49:a9:df:24:b6:82:64:f0:43:
50:b2:b6:4f:3d:24:ca:32:98:ea:d8:25:be:49:da:17:e4:c6:
12:a0:f6:27:9b:16:11:dd:4d:37:d7:a0:78:75:4b:ec:7f:d2:
a1:0f:e4:d8:75:77:88:bf:c9:85:b4:57:a4:77:17:2e:86:00:
10:42:9b:d3:83:0d:20:f2:ce:d0:f4:99:f8:8a:40:b7:51:4f:
5c:2b:68:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:26:25 2025 by rpki-client