
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
File: 2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa (raw, json)
Hash identifier: hd/gQatKnJ/ahGaqDcNzFBHlyFT2R4aHshIfKLKykww=
Subject key identifier: 19:9A:38:80:66:B2:69:3D:5B:BE:94:A6:48:DE:B1:BA:35:65:33:7D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584ED861D86CBBD1ADCF960DEC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 30036
IP address blocks: 97.64.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:d8:6c:bb:d1:ad:cf:96:0d:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=05a1fdf7-3f30-4058-8a2b-8097303bb87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:86:06:1d:0a:21:24:56:1a:fc:3e:38:51:
cb:85:9b:04:2a:d9:b1:5e:af:1a:8e:bf:7c:c3:17:
b2:98:c9:f6:1e:93:66:40:9f:b3:1c:60:cb:31:b0:
70:46:6d:59:d1:56:01:20:ef:91:dc:d1:23:dd:9a:
db:66:c4:2b:6c:15:ea:24:6f:cb:ac:38:29:fa:47:
7c:69:66:74:52:b3:33:aa:24:e2:3b:33:f8:47:93:
b7:0a:b5:97:35:d5:8d:e0:a7:05:b4:84:f8:57:15:
a6:6e:c9:e9:f4:e1:9d:de:51:63:c9:da:03:f8:ea:
2e:63:bc:52:6e:42:b3:c9:cc:83:81:24:69:e2:de:
32:dd:59:1b:29:a6:9a:5a:5b:00:15:48:dd:8a:01:
1f:2d:7e:db:fa:ab:2a:29:85:d9:f6:5e:4e:fe:cb:
7d:c3:17:43:34:cd:6c:4f:18:6a:f0:d9:1e:95:53:
04:dc:e8:e7:d5:9e:df:8a:2d:d6:d8:20:b7:7e:60:
35:7e:8e:5e:4e:1b:5c:55:5c:3e:65:e2:1c:83:9e:
5d:a1:c9:f8:f5:09:5f:97:f5:e8:02:fb:81:63:3f:
ae:be:1d:a7:27:28:a8:ff:ac:f6:3b:17:fa:af:60:
a3:43:73:ac:5f:f5:a8:ad:9a:cc:b1:a3:52:5f:b9:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:38:80:66:B2:69:3D:5B:BE:94:A6:48:DE:B1:BA:35:65:33:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:56:42:8e:6f:08:a5:54:26:7c:df:94:2b:03:2a:3c:94:03:
d5:7a:3c:28:64:86:4b:1e:07:07:77:44:7b:b5:be:d5:9a:5a:
dd:02:3d:53:6b:72:3e:c2:81:b0:e5:8f:c8:49:04:26:c7:f8:
77:b9:b2:49:93:96:f9:f6:8b:3d:e1:3b:da:d1:ab:4d:d8:99:
9c:5d:c0:65:b4:c7:4c:dc:2f:71:09:d9:ea:66:52:a7:0a:a2:
6f:1e:fd:47:32:b3:28:37:3d:be:2f:77:53:b7:18:37:37:12:
b4:65:8b:3c:b9:3e:6b:5c:7f:18:33:f1:0b:c9:7d:62:43:c2:
45:69:dd:7f:cc:6b:fb:c0:03:52:b3:a1:7b:b9:b9:76:2a:3b:
79:7b:12:91:c1:e0:69:29:39:32:66:3f:80:0c:d8:3f:25:b6:
e5:d4:22:69:0c:cf:39:b2:a3:e6:5c:ae:32:ba:60:87:bd:4b:
84:d1:32:d4:db:41:29:6e:fc:6c:4c:08:94:a6:01:2c:56:1c:
99:e3:15:28:d0:60:c6:02:fa:38:76:c2:0c:53:88:68:7c:a1:
71:ad:37:3f:60:4b:6e:d3:1c:b6:de:8f:32:12:8a:f7:ae:c9:
4d:5a:6a:e0:61:a8:c8:ac:a3:ba:be:40:6c:9a:e7:53:7a:cb:
6b:a4:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:28:07 2026 by rpki-client