
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa
File: 7237c30a-f3e2-3629-9938-fda9465037fa.roa (raw, json)
Hash identifier: XQKjSH9fso11yL+d08hNMS2wfbt3yJHl1CRLqwAkj18=
Subject key identifier: B0:94:1C:58:9F:6A:1A:A6:0C:10:06:FB:5C:61:5C:D6:40:F2:7C:BE
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037CF2BCCE853A3E49629540
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.58.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7c:f2:bc:ce:85:3a:3e:49:62:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=ad809648-43e9-4412-8637-33cf9e4ec08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:78:dc:3a:26:cd:8d:c2:f2:58:51:fd:dc:
35:81:7a:8d:1b:08:6a:94:c6:a2:20:d4:d3:9d:20:
c9:c9:dd:75:80:fe:18:3f:08:0b:2e:9b:9e:fb:c5:
a1:5f:9e:43:d5:da:20:f3:f8:04:84:8d:4d:64:f2:
5a:d3:36:70:b6:32:68:f6:42:a9:ce:fd:49:bd:b6:
4d:51:a6:bb:69:c8:ba:10:10:15:47:d8:b4:e5:57:
de:e2:17:69:bf:10:f5:39:f2:3d:58:95:9a:e5:e0:
37:09:90:8d:4f:ee:3e:dd:bf:05:46:7f:13:7a:af:
e3:49:93:0c:4a:74:02:fd:df:49:98:29:78:18:05:
28:a9:93:8f:f6:05:43:28:de:2c:fe:a3:65:4e:f8:
4c:ff:54:83:82:b4:9f:ef:91:65:24:db:01:98:42:
36:4c:93:de:40:74:62:f3:0e:f7:6e:e6:36:2c:11:
25:13:4f:33:cf:71:fc:06:51:ad:5d:be:48:55:3e:
69:25:b8:f1:eb:95:41:17:1f:fe:1d:9f:b9:b4:2e:
bb:6f:6a:ae:72:4e:72:66:17:b0:fc:7b:67:0d:50:
59:38:b9:dc:26:fc:1d:59:55:01:65:75:80:b9:50:
37:0c:39:0b:79:29:88:02:49:74:5b:9c:83:77:77:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:1C:58:9F:6A:1A:A6:0C:10:06:FB:5C:61:5C:D6:40:F2:7C:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7237c30a-f3e2-3629-9938-fda9465037fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.58.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a7:02:dc:23:26:2b:e2:2c:12:83:c6:bc:31:35:cd:14:b2:
df:e8:79:c1:85:54:88:f5:d7:10:6f:2c:9b:e6:d7:85:3d:fc:
b3:f5:36:8e:ea:92:d5:32:ca:70:72:1f:ad:e1:52:c3:32:e4:
a9:a5:be:4c:58:01:b2:f2:5f:a5:10:cf:00:f8:d3:43:e9:f2:
3c:52:80:70:0b:da:71:a6:a7:34:9c:b8:2f:de:dd:a6:b2:e7:
da:0d:8f:4b:29:78:16:e2:ae:c6:00:e7:49:c5:a0:96:af:e8:
76:e5:7d:51:0d:44:e8:43:6a:c9:52:be:d8:dd:a4:48:89:73:
69:c8:6a:89:ec:ba:70:64:b5:a6:0e:c7:9f:e5:d6:fa:1a:04:
9d:5e:a4:f6:6f:a7:af:38:f3:28:2b:9f:42:57:a0:e4:47:d7:
e6:2f:56:fe:c1:52:c4:ed:9e:ab:bc:37:6e:5b:8a:73:bf:83:
b0:29:43:19:db:d0:87:d9:c6:71:ba:c5:aa:b6:66:38:f1:e5:
a8:9d:05:45:0c:b9:ae:51:4d:1a:c1:3f:92:1f:35:0e:ae:90:
5f:5c:ff:49:10:71:62:0b:37:89:aa:c8:0c:da:90:91:21:6e:
27:bf:31:dc:87:57:55:10:01:19:ec:86:c1:0a:18:13:af:7c:
bd:27:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:55 2026 by rpki-client