
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa
File: 847eef0b-5e6f-3b79-b566-76f0bf987985.roa (raw, json)
Hash identifier: HXmsc7/Zs8+WIue2ITFyHO2DvARfZ5sML6aU9KfLiAc=
Subject key identifier: 00:59:99:D0:7D:A7:86:38:F5:8E:46:34:DC:BD:7E:D3:99:96:C8:6F
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584ED861D812BFE251CF2DDDB900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 30036
IP address blocks: 97.64.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:61:d8:12:bf:e2:51:cf:2d:dd:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=80977be4-ac33-4cb1-a6cc-00b0e5ba48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:15:ba:4d:e1:f8:47:97:82:cc:78:cd:f1:
bd:86:9a:31:43:c1:e7:e5:a9:23:4e:8b:7d:23:47:
a7:b2:9d:21:24:ee:b5:1d:72:4f:92:91:74:4d:d1:
da:e7:9e:40:1a:da:6e:c9:c3:f3:88:6b:48:f0:97:
79:2f:b9:4b:5f:17:70:f0:30:ed:6c:e7:37:10:4d:
d5:83:56:28:13:a6:a4:cb:b5:1a:d8:1c:70:ce:d4:
cd:b4:a4:5d:0d:08:43:82:e3:b6:11:9b:9e:ae:f4:
6c:b9:1f:2d:00:d6:aa:48:c1:13:21:93:df:49:b8:
f1:8c:0a:90:b1:d9:7f:a8:3d:db:3f:96:af:23:f8:
cf:c4:c8:dd:d0:bc:9f:69:31:c5:9b:d7:db:92:9f:
63:d4:0f:45:da:46:e8:d9:98:64:7e:b5:d4:6b:37:
90:ee:28:27:b4:fb:36:df:71:6f:aa:d0:fa:4d:6b:
5e:0a:5a:d7:5c:ed:c7:63:4a:ca:c6:73:d4:4e:1a:
1a:f3:fe:60:75:e8:1a:50:5c:f3:ec:0b:47:d3:90:
3e:36:26:d3:15:18:7b:c2:80:e9:9d:01:25:d9:df:
10:8f:8b:1f:a9:2c:53:39:4a:2c:fa:44:ed:25:55:
14:47:73:90:06:01:42:b0:08:b4:97:84:45:43:2c:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:59:99:D0:7D:A7:86:38:F5:8E:46:34:DC:BD:7E:D3:99:96:C8:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e5:25:b6:c4:19:b4:ec:1e:ee:07:d8:9a:0f:3b:19:db:8b:
71:ba:cc:63:02:82:c7:ca:27:7a:e9:b7:5c:77:80:3f:ce:0f:
00:b6:a0:21:a8:3d:41:14:2f:69:44:0b:56:5c:f0:89:f9:8c:
cd:bb:02:0f:67:ee:11:a2:a1:39:2e:df:98:64:3c:05:60:7c:
e9:76:bc:2d:7f:69:8d:dc:36:4d:30:f0:1e:82:26:c4:f9:b6:
33:d2:19:7c:97:15:50:d5:d5:ec:02:3f:54:5a:f2:ce:b2:8f:
90:ef:65:aa:7f:b6:48:99:2a:b9:85:01:92:33:23:4e:f4:80:
8a:33:b5:74:b9:bb:05:4d:20:f0:e5:e9:0d:00:4d:6b:e4:db:
c4:0d:f4:a5:ed:fe:35:69:45:d9:6a:c3:cf:b2:3a:48:01:d6:
ff:de:64:82:53:3d:a2:29:be:70:b0:b0:5d:a1:ea:87:21:af:
eb:cc:7e:4e:6a:4c:f8:8a:03:fb:3a:6b:3e:41:68:ee:9e:12:
f3:81:84:8e:80:a5:cb:6b:1d:02:b1:19:03:86:21:88:61:30:
b6:5f:55:6f:da:e6:71:56:07:25:06:24:48:44:dc:65:8c:ba:
41:50:6e:7a:6a:d1:c4:bf:9a:b9:2d:23:bb:f9:2c:a1:e3:59:
d6:42:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:46:11 2026 by rpki-client