
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/226484af-d38f-394d-a0f4-0d475a27e70c.roa
File: 226484af-d38f-394d-a0f4-0d475a27e70c.roa (raw, json)
Hash identifier: CVZCZZ3JxA9ji1gWOaoTporCisnji8mYUqOVCiWp+bY=
Subject key identifier: 35:A6:FA:9F:67:77:8F:2C:55:D5:3C:8E:46:04:FF:18:06:AF:4F:4F
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584F497326C2B86331C27CF470C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/226484af-d38f-394d-a0f4-0d475a27e70c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16591
IP address blocks: 136.56.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:26:c2:b8:63:31:c2:7c:f4:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5745281e-ea59-433a-92ee-f3b78479e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:15:f2:c7:13:8e:5d:0f:48:b7:85:a8:79:
5f:38:20:e3:12:67:7f:05:67:5d:f8:11:7f:a3:fc:
55:f6:d6:c4:a3:07:a0:34:73:05:d8:53:7a:87:ff:
b9:b7:67:9b:62:c4:80:0d:d5:c1:02:48:bd:8d:5b:
5a:0d:1e:ff:aa:90:10:67:80:f8:b3:d2:69:38:d5:
7b:19:6f:f0:bf:13:c8:ee:eb:bb:f4:7a:b5:04:cf:
f7:d4:49:ed:aa:67:61:c0:aa:39:b9:c7:8c:9b:02:
d0:ad:12:54:6b:78:0f:6e:51:f9:8d:d5:48:40:35:
12:02:9b:4d:00:7b:e2:09:89:02:e6:08:8f:8b:c8:
43:d0:5b:e2:8e:8b:1a:52:39:f0:d7:97:6b:d3:53:
2b:af:b9:79:f0:4e:bd:86:d9:94:dc:5d:44:ee:2d:
55:4a:5a:ca:f4:1a:26:52:b3:ed:90:91:45:4d:22:
b7:1d:eb:5a:c4:50:8d:24:56:16:fa:19:4b:c8:a2:
55:96:22:f7:13:11:1d:f6:44:f3:e4:bf:b1:81:75:
8f:c0:e9:4f:66:48:aa:77:4e:47:cb:f3:ff:22:32:
40:a6:59:c9:71:ae:7c:36:a6:57:3f:72:ac:9c:d4:
7e:08:26:b0:dc:61:00:1d:80:7e:b3:22:26:ed:d5:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A6:FA:9F:67:77:8F:2C:55:D5:3C:8E:46:04:FF:18:06:AF:4F:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/226484af-d38f-394d-a0f4-0d475a27e70c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.56.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b4:94:fc:98:39:a1:6f:80:bc:a4:77:86:d2:a8:a9:0e:d9:
66:97:70:74:42:a0:fd:b4:33:90:91:4c:54:f6:d8:28:77:b9:
13:67:dd:bf:44:34:d2:b8:c0:ba:a8:64:f4:59:c8:2e:f2:d1:
c3:4f:9e:5d:b7:12:36:14:3e:c3:73:c0:58:dd:da:fa:ae:09:
06:3b:b4:f8:7a:3a:38:ed:a1:27:40:d3:a9:3a:6a:d1:d9:09:
be:32:13:a5:e5:6a:9f:e7:5a:54:13:53:a2:11:19:ff:97:32:
fe:a3:74:1b:b8:af:79:02:3e:2a:67:f1:54:16:f6:cd:5c:a1:
62:1d:03:d6:06:58:81:5a:b4:0c:c9:3e:04:72:31:5c:61:7d:
96:13:f6:7d:de:67:4a:d0:d6:7f:12:10:4e:da:23:8a:42:5a:
e7:44:ab:b1:13:7f:cf:b1:d4:b0:b3:6d:35:90:8b:52:68:3a:
61:9e:81:cd:d4:18:9d:7a:d8:db:7b:c4:15:e9:ef:a0:73:60:
57:c1:85:2e:e2:ee:6b:eb:a8:08:40:9f:b2:20:db:d4:6d:75:
f0:86:19:eb:da:16:53:29:74:26:02:b9:ee:79:d2:50:1e:23:
db:d6:6e:21:c4:70:2d:44:67:e6:f7:cd:ae:dc:21:e7:4b:f7:
25:54:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:19:00 2026 by rpki-client