
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa
File: efd221cd-be8f-335f-a197-adbb68940a3a.roa (raw, json)
Hash identifier: +GSzfuj+ZGbUlfUvGWY1GNKNEaZwjOvMkmzeyO43I2I=
Subject key identifier: 95:15:27:A3:FF:53:12:F4:88:98:9F:D9:B9:16:2D:AE:15:2E:AA:C3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584ED86486F2F7F4685647DA2E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 30036
IP address blocks: 97.64.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:64:86:f2:f7:f4:68:56:47:da:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=fcb12421-62d7-4348-a6b6-9904dbd8cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:48:61:1c:33:64:b6:44:a6:ce:ce:3b:c0:
fb:95:02:a1:60:2e:67:0f:d7:8d:83:b2:90:65:ec:
64:7d:14:63:c3:9f:74:f7:b3:00:09:94:ca:4d:23:
09:0b:2e:a6:4d:9e:d2:cd:d4:c0:9c:05:76:4f:e2:
03:3c:83:ae:d2:c5:a8:f5:b7:8c:7e:d1:a6:7c:91:
a6:f8:e5:95:af:d1:b7:2e:94:3b:e3:fd:f3:d3:8c:
85:e0:32:75:80:84:c9:86:59:53:5c:de:cb:df:52:
01:d4:1e:4a:e6:87:34:df:83:bf:00:c1:86:8f:f9:
57:d3:9d:e3:1e:53:99:9d:28:ce:2f:98:37:aa:b8:
62:7d:5b:74:2c:da:21:d5:31:a7:1c:9a:38:78:0d:
8e:04:9e:36:bd:9e:e4:d6:82:8b:07:49:cf:72:2d:
b5:39:69:3d:ab:af:5e:3f:43:fb:b0:76:e4:7e:b7:
e4:e9:bf:ac:98:a0:8d:ad:5a:90:dc:5b:e2:ac:2e:
73:4d:36:39:12:b8:ab:8b:88:f9:97:ea:58:85:01:
57:3b:cb:b7:4f:2e:52:66:76:ca:04:b7:f9:17:fe:
07:14:61:39:8a:82:bf:e1:1f:9e:3c:40:16:36:86:
75:4f:8a:0c:1b:c7:d8:97:b3:72:99:cb:0e:80:db:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:27:A3:FF:53:12:F4:88:98:9F:D9:B9:16:2D:AE:15:2E:AA:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/efd221cd-be8f-335f-a197-adbb68940a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:90:1f:d6:86:5d:7c:bb:fa:f2:ea:67:49:83:12:e9:ca:4c:
26:e7:31:a3:e2:62:d6:b7:41:d7:16:e0:7a:97:a0:8a:68:52:
44:40:74:42:21:7b:f2:b7:16:db:81:19:f9:9c:d3:6f:b0:3b:
8f:d4:b0:a8:ed:3a:6d:d4:00:0f:1e:6c:1f:b0:3e:d3:6d:d5:
5d:09:2f:b4:84:75:f8:f3:a6:5b:92:5c:65:12:3e:f2:0f:d8:
7b:d7:37:9c:ef:60:dc:58:07:0a:2c:1b:28:1c:68:ca:67:f4:
4d:ab:6b:00:e0:c3:40:f9:c7:d7:30:56:60:29:03:7d:84:ff:
52:ef:95:94:a4:48:9a:61:68:41:26:57:e9:38:06:a6:f4:99:
8b:54:68:0a:58:b7:88:3d:98:05:fc:19:41:de:1f:a9:b3:a5:
9c:f6:d9:93:00:82:4d:dc:17:5d:98:48:5b:ca:a8:15:d8:fe:
7b:87:fa:b8:3c:55:c4:f5:4d:3c:19:db:6e:8d:13:a8:fb:24:
e1:94:a8:45:7b:7e:a8:52:eb:4b:36:88:36:30:72:44:14:3f:
1a:98:d7:49:86:86:8e:b6:8c:6f:fe:c4:43:8e:7c:74:59:62:
94:9b:78:1a:18:63:3c:70:37:8e:39:b6:f1:6a:80:bf:58:d1:
ff:e9:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:57 2026 by rpki-client