
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
File: 3d11981b-8982-37fc-a501-187ff3b75521.roa (raw, json)
Hash identifier: Lpomz8HFcbnE1D948Z4SAvVwOsbsPN+BFF8KM7Y3MEQ=
Subject key identifier: 1C:93:55:C9:F9:3C:8E:33:AF:78:71:6F:4E:94:EA:CA:DD:C3:4B:F7
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F77836246BCECB92215BB1000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 30036
IP address blocks: 97.64.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:62:46:bc:ec:b9:22:15:bb:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=68d1e900-bea0-4998-91a3-d6ab13e6e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:d0:9f:b9:0c:8d:23:24:9f:ac:cc:a3:5d:
a6:6b:40:d0:bf:e6:7a:c4:b5:d0:89:76:34:d5:18:
ce:db:88:d6:5a:3c:ac:9a:a6:22:5a:e5:70:fe:6c:
8a:78:41:b5:d3:b3:ad:da:8c:67:50:e4:4b:23:bb:
30:58:52:5a:ea:73:98:9e:9b:7d:f9:41:d8:e5:8c:
2e:0c:72:e3:6c:dd:76:1c:7a:78:d3:f6:37:8a:84:
72:5d:23:c1:14:d1:3f:8c:2e:39:86:dc:c5:f4:15:
6d:d1:03:7e:d2:fb:4f:76:aa:94:f7:0e:a0:f4:66:
0b:5f:d1:44:7e:98:bb:9f:df:54:70:96:82:89:f2:
5b:88:56:c4:89:09:0c:7b:a9:5e:98:a8:30:00:77:
2c:c8:83:4f:8c:7f:85:1e:f0:d6:fa:56:62:80:5c:
58:2f:6a:4e:4f:75:06:74:5f:70:10:9d:bc:f5:fa:
96:dc:4c:c0:d4:ef:20:43:07:85:37:9d:a3:8d:43:
a9:96:3b:8a:c1:02:db:93:26:f5:b7:88:66:11:1e:
09:2b:f5:df:d6:d6:69:86:c7:70:f4:6a:44:5b:46:
64:66:e2:7b:e5:b6:d9:71:0c:aa:fc:43:81:8e:8e:
fa:dc:f3:58:a0:5a:83:14:61:d6:9f:f2:73:ae:e3:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:55:C9:F9:3C:8E:33:AF:78:71:6F:4E:94:EA:CA:DD:C3:4B:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d11981b-8982-37fc-a501-187ff3b75521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:91:60:80:e1:b4:4e:1b:9f:f6:77:a4:50:ed:81:40:73:87:
a9:aa:34:c7:40:a9:1e:5b:4b:c3:84:6d:99:f4:cd:f0:42:83:
ca:af:a4:b2:ac:2a:e6:31:af:ae:10:63:af:07:18:af:2b:f1:
86:f0:bd:de:b3:4b:f1:e7:56:bf:20:af:77:59:db:8e:2a:b4:
fa:82:90:7a:b6:4c:10:b9:fb:18:7f:36:3d:f3:59:af:bb:0b:
a6:4f:48:d8:d0:e3:1b:8c:0b:59:ef:ee:1c:f2:c2:b2:87:27:
b0:e2:58:59:88:cc:94:65:25:73:92:35:eb:71:41:5b:d8:4f:
03:31:1b:70:62:b7:e4:ec:cf:26:57:f7:c5:ea:04:54:e6:c8:
2e:57:10:92:59:d6:8a:e7:e3:43:30:e9:ce:fa:13:65:3f:ed:
1b:f1:80:a6:89:7c:52:4d:fb:77:35:61:3e:a6:d4:5d:08:89:
82:0c:92:a0:bd:8b:ed:e5:45:35:a4:f5:ee:75:b4:64:9e:66:
fa:91:82:fa:b4:43:ce:f1:bb:3d:2e:79:b8:19:36:57:d9:97:
76:3f:90:5e:46:d1:b4:45:e9:3d:9d:fb:10:f1:f3:61:c6:09:
c9:36:68:41:ef:fd:0f:d1:7b:25:fb:47:0b:f3:66:88:02:64:
dc:26:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:15:16 2026 by rpki-client