
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa
File: 257de336-1c6c-3005-959d-52f3e18c305d.roa (raw, json)
Hash identifier: 6U7MHGa4ilj3R160OGc+Llr6+X3iagGRuv4L94NRfYc=
Subject key identifier: 14:62:80:B2:95:CA:28:1D:79:22:98:97:2B:47:4C:7A:2C:AB:37:1D
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D0F4148EBFA6A4E66A6C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.33.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:0f:41:48:eb:fa:6a:4e:66:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=25bc2faf-5f41-4d4f-8942-632dae399748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:17:91:a1:b6:79:fd:b4:ec:36:85:40:1d:
3a:d6:b7:04:af:07:20:4e:cc:7c:2a:ec:b5:05:75:
d9:6a:fa:f7:f0:58:5a:c4:6f:b2:3c:8d:08:09:a1:
d6:ae:a5:52:e1:fd:c2:0e:7d:b2:1b:1f:dd:f8:71:
3f:65:1a:10:83:66:92:65:62:68:b6:8b:94:ef:7b:
57:54:8b:0b:dd:60:7f:5a:0c:64:a0:6d:51:53:71:
1f:62:5d:c6:d6:72:80:ce:2d:ab:ed:89:0f:73:13:
5b:f6:63:3d:0d:34:be:52:fd:b3:3b:1f:f5:00:10:
f7:04:03:b1:21:50:87:ab:2a:bf:b6:8c:49:c3:60:
07:af:4c:00:ac:52:a2:9d:34:a0:54:3b:2a:92:49:
df:1e:9f:b1:fd:80:ee:67:92:b6:76:51:3d:bc:64:
0c:7c:f8:2c:b9:be:a3:46:00:32:e5:41:a4:08:2a:
e4:6c:c5:96:12:15:3d:ce:2c:59:d6:17:95:c3:42:
24:a0:54:03:e6:f8:82:84:d9:05:1c:e0:59:2c:72:
53:96:ba:a9:f9:d3:a4:16:61:6e:79:6b:db:db:2b:
39:13:9b:ca:f4:29:d4:79:bf:29:2b:63:b6:49:5a:
e4:18:f2:65:a8:65:3c:20:4b:d1:13:61:a4:a0:91:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:80:B2:95:CA:28:1D:79:22:98:97:2B:47:4C:7A:2C:AB:37:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.33.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f4:c6:15:47:5e:90:82:ff:c8:54:b3:2a:68:5d:8b:29:66:
e2:ca:f0:7d:c4:87:ef:9d:6a:7c:bd:68:01:29:0b:93:9c:7b:
de:3d:b3:22:a5:d6:a0:c4:7b:33:04:41:c8:fc:cc:2d:63:86:
f5:a2:44:24:d4:4f:92:6d:46:18:11:81:76:a2:b8:0b:b7:0c:
ea:6d:45:b2:54:e0:6e:7e:6c:f1:7f:b4:5b:39:46:e0:3c:80:
9c:ce:a3:e3:72:00:18:b6:26:f5:f8:6d:c6:68:c0:0a:9b:5a:
a7:33:9b:5a:de:d4:60:b2:00:88:f4:02:c1:25:86:11:a7:dd:
ce:69:9f:1e:f0:97:d2:5e:da:70:2c:15:24:16:29:af:60:b5:
c7:f3:62:7a:2f:b3:19:7e:23:83:92:d6:0d:47:b5:57:fa:43:
89:8d:43:b2:9a:2e:7b:b7:dd:d5:9a:de:84:3c:78:eb:24:d8:
ac:a7:48:bd:35:2b:7d:5b:cb:66:b2:c2:15:9a:67:b1:2b:57:
90:4c:73:7d:64:9e:4f:22:ae:89:17:62:3a:0d:f8:60:5b:09:
49:0f:04:d6:d2:86:15:84:35:cb:d6:e0:65:c2:28:4e:25:f6:
f3:7e:a1:32:3f:52:0e:db:5c:80:fe:ca:fa:4b:65:76:02:4f:
ce:f2:d6:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQ9BSOv6ak5mpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MjViYzJmYWYtNWY0MS00ZDRmLTg5NDItNjMyZGFlMzk5NzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQwXkaG2ef207DaFQB061rcErwcgTsx8Kuy1
BXXZavr38FhaxG+yPI0ICaHWrqVS4f3CDn2yGx/d+HE/ZRoQg2aSZWJotouU73tX
VIsL3WB/WgxkoG1RU3EfYl3G1nKAzi2r7YkPcxNb9mM9DTS+Uv2zOx/1ABD3BAOx
IVCHqyq/toxJw2AHr0wArFKinTSgVDsqkknfHp+x/YDuZ5K2dlE9vGQMfPgsub6j
RgAy5UGkCCrkbMWWEhU9zixZ1heVw0IkoFQD5viChNkFHOBZLHJTlrqp+dOkFmFu
eWvb2ys5E5vK9CnUeb8pK2O2SVrkGPJlqGU8IEvRE2GkoJEelwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRigLKVyigdeSKYlytHTHosqzcdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjU3ZGUzMzYtMWM2Yy0z
MDA1LTk1OWQtNTJmM2UxOGMzMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf0xhVHXpCC/8hUsypoXYspZuLK8H3Eh++dany9aAEpC5Oce949syKl
1qDEezMEQcj8zC1jhvWiRCTUT5JtRhgRgXaiuAu3DOptRbJU4G5+bPF/tFs5RuA8
gJzOo+NyABi2JvX4bcZowAqbWqczm1re1GCyAIj0AsElhhGn3c5pnx7wl9Je2nAs
FSQWKa9gtcfzYnovsxl+I4OS1g1HtVf6Q4mNQ7KaLnu33dWa3oQ8eOsk2KynSL01
K31by2aywhWaZ7ErV5BMc31knk8irokXYjoN+GBbCUkPBNbShhWENcvW4GXCKE4l
9vN+oTI/Ug7bXID+yvpLZXYCT87y1kE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:49 2026 by rpki-client