
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa
File: af3b7bb0-e922-3bf4-9766-0847af16df6b.roa (raw, json)
Hash identifier: ghk+AM16WuJIQCc6Ucg+lQPoRmo7zNgc0fms4mj00MA=
Subject key identifier: 2A:D0:F4:41:A7:88:4D:0A:5A:FE:A9:EE:88:CD:04:D7:01:DA:9E:9D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584ED431E488E410D44248511510
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 30036
IP address blocks: 97.64.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:e4:88:e4:10:d4:42:48:51:15:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=0e0d7bce-f99d-4ff7-8bd7-2c9de91e7cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:10:af:e4:11:cc:ce:bb:6a:08:b6:86:a0:
2d:1c:ab:e4:00:de:a8:b2:15:56:98:0b:9c:6f:eb:
e1:bd:be:d8:aa:9c:ed:0c:af:eb:38:16:6e:9f:f7:
14:43:9c:ea:27:fe:74:3f:34:6d:bf:a2:ef:e7:f4:
b6:3c:ed:69:92:8a:92:47:3e:c4:7b:af:81:41:fc:
6c:68:fd:1a:9e:97:cc:37:cb:86:38:0d:4d:d0:59:
f0:9c:7b:ed:42:b9:07:db:b6:08:aa:68:80:af:95:
2f:28:45:da:26:94:06:15:f5:69:ed:78:28:01:a7:
f9:50:cd:34:f7:27:a5:dd:a2:4e:0c:e0:39:8e:f3:
b5:94:3c:d1:df:f1:1f:e8:d6:e8:18:bd:b7:f4:5e:
e1:e4:d7:68:d7:dd:fd:8b:5e:59:91:0d:f1:9a:eb:
50:d6:68:47:2c:50:60:71:eb:df:f9:ad:ea:ec:a1:
45:f6:47:27:df:d0:50:e4:22:e7:35:fb:b7:03:91:
06:45:be:2f:e5:2a:f4:a7:92:56:2c:e0:14:7c:17:
76:2f:3a:b4:f9:c2:a8:06:6f:39:06:00:75:e9:87:
0c:48:8b:f1:e5:ef:d7:23:61:dc:f4:e1:e4:db:2b:
cf:c3:c6:bf:60:b0:64:b4:fe:bf:70:c2:81:d7:26:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:F4:41:A7:88:4D:0A:5A:FE:A9:EE:88:CD:04:D7:01:DA:9E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f4:3d:6e:77:d4:f3:c4:9a:4e:a9:17:eb:30:f6:4a:ed:d8:
99:05:a5:91:d3:24:50:ea:21:2a:ab:c5:3b:3e:68:3f:99:f1:
bb:66:42:b1:da:97:e7:30:50:5c:83:32:59:2c:5b:0c:d9:c0:
c8:69:96:7b:67:ee:a4:3a:3c:5c:85:17:d9:d1:48:26:d8:64:
d5:59:d7:39:48:5d:ea:fe:97:af:c8:80:7e:3c:53:dd:20:c0:
c8:1d:f4:93:82:7a:37:a4:f0:51:07:d3:aa:aa:e2:1b:fd:2b:
2f:89:22:e6:d5:47:4c:72:4c:d2:21:c2:c4:2a:69:80:2a:9b:
40:03:2c:ac:c2:ba:5a:dd:b4:7d:a8:8a:51:c2:42:bf:c9:5e:
46:31:01:a8:27:ee:18:f0:93:86:1e:97:3e:cd:fa:b0:64:c4:
5c:53:b5:86:f2:23:59:f8:71:77:7a:9a:3e:86:12:0c:0e:e0:
65:2a:50:91:b1:24:5e:93:11:78:5d:b1:62:a9:a6:83:82:35:
5d:6c:00:43:ff:0e:93:f1:cf:59:d0:1e:f5:c7:68:3c:6c:df:
50:98:8d:fb:52:95:c9:11:c4:ac:f6:20:66:f3:53:7b:20:ae:
2f:2c:8b:92:42:5c:96:7f:ce:31:40:d9:b3:33:89:f7:55:3c:
41:60:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:42 2026 by rpki-client