
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/79717a4a-d05f-39d5-a43d-01623cc3a82c.roa
File: 79717a4a-d05f-39d5-a43d-01623cc3a82c.roa (raw, json)
Hash identifier: 4hbm0NGiT3wFMvIkcuFAWQLoTDpv0ZzoxjE4obgdCps=
Subject key identifier: 0B:45:0E:FF:B2:C5:36:08:B7:D3:79:F2:A2:C1:01:CE:2E:09:34:F4
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D0D7C1698FE3DC5F42A00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/79717a4a-d05f-39d5-a43d-01623cc3a82c.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.32.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:0d:7c:16:98:fe:3d:c5:f4:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=03c2d2d4-0dd8-4abe-b1fb-6902ffe70f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:15:04:69:d6:b0:97:a2:11:91:6c:d4:b0:
ed:2d:a6:a4:3d:35:27:8b:e6:18:fa:ee:11:7e:59:
52:da:1b:ff:ce:42:d7:a5:85:93:58:b3:f9:ae:fa:
24:e6:9a:e1:3b:ea:9c:1c:c3:dd:cd:1b:d3:63:80:
64:12:9f:76:7b:cf:c4:95:43:3d:54:c9:49:7b:30:
7c:ad:e9:83:73:7c:db:26:88:1f:c4:5b:0b:52:7a:
f2:08:fc:86:85:a9:2a:f7:b3:e0:c8:f2:fb:9d:67:
65:39:bf:52:50:7a:ec:53:1c:a3:3e:aa:0a:61:72:
36:20:00:9a:e7:c3:c2:37:fc:56:d4:67:a4:06:cb:
80:bd:17:5a:7b:d1:62:a5:27:38:f8:37:80:c9:5f:
ab:7a:c8:6e:34:bf:ec:dc:8f:dc:d9:99:6f:5b:a9:
b4:8e:65:16:7f:03:39:2d:3c:14:70:46:87:a6:15:
c5:18:e2:cd:8d:f5:a8:e7:a4:41:16:8c:13:a1:81:
05:10:e1:ba:c6:69:95:d7:fa:df:f8:42:d0:0d:71:
40:3b:ff:aa:a2:e6:8a:4a:b2:8f:c9:32:db:8b:38:
e5:cb:4e:89:14:f8:52:d3:e7:4a:c3:55:0c:47:50:
16:1d:32:6a:34:24:4f:b0:a9:6e:6b:ed:49:57:69:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:45:0E:FF:B2:C5:36:08:B7:D3:79:F2:A2:C1:01:CE:2E:09:34:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/79717a4a-d05f-39d5-a43d-01623cc3a82c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.32.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0c:e7:b3:7c:6f:ca:b9:a7:5b:c8:04:42:38:85:61:3b:84:
66:80:f7:db:89:a0:7b:e1:90:48:4b:f2:54:45:35:c4:cd:9e:
af:6a:c9:2e:e4:bc:01:42:6d:75:25:72:c2:f8:13:78:d1:e0:
4a:99:28:0a:f1:9e:2f:5b:b7:f0:32:59:4a:fa:f7:39:85:a7:
d5:ee:d8:e7:8a:d7:cc:07:a2:70:2e:8d:5f:50:4d:93:81:35:
a4:9a:c1:cd:ec:b4:52:96:32:83:94:33:8a:57:38:2e:d2:ef:
a9:f2:bd:77:6d:02:95:77:38:2b:a7:34:49:54:34:d2:c5:dc:
cf:43:fe:6b:e7:d3:d7:91:8d:fa:1d:3d:47:af:d2:68:71:82:
97:1e:76:60:ae:bc:0e:f2:4b:a4:47:85:c5:c4:eb:51:7d:35:
37:28:9f:e4:3a:66:91:86:f2:bc:4e:ac:51:8d:47:ab:ab:ae:
c0:bd:bb:cd:71:2f:a6:4d:5c:4e:c9:19:1d:05:bc:74:ba:ba:
c0:08:86:12:50:a5:66:88:a2:74:df:e5:53:a7:f1:cd:a4:29:
44:52:02:a1:a2:b1:88:e3:d3:41:7b:c9:c7:04:7a:78:c8:1a:
44:3a:0a:6b:0f:75:22:20:7d:51:cf:bd:e2:cf:43:a3:57:d8:
4c:6b:72:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQ18Fpj+PcX0KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MDNjMmQyZDQtMGRkOC00YWJlLWIxZmItNjkwMmZmZTcwZjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMVBGnWsJeiEZFs1LDtLaakPTUni+YY+u4R
fllS2hv/zkLXpYWTWLP5rvok5prhO+qcHMPdzRvTY4BkEp92e8/ElUM9VMlJezB8
remDc3zbJogfxFsLUnryCPyGhakq97PgyPL7nWdlOb9SUHrsUxyjPqoKYXI2IACa
58PCN/xW1GekBsuAvRdae9FipSc4+DeAyV+reshuNL/s3I/c2ZlvW6m0jmUWfwM5
LTwUcEaHphXFGOLNjfWo56RBFowToYEFEOG6xmmV1/rf+ELQDXFAO/+qouaKSrKP
yTLbizjly06JFPhS0+dKw1UMR1AWHTJqNCRPsKlua+1JV2kA8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtFDv+yxTYIt9N58qLBAc4uCTT0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzk3MTdhNGEtZDA1Zi0z
OWQ1LWE0M2QtMDE2MjNjYzNhODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEM57N8b8q5p1vIBEI4hWE7hGaA99uJoHvhkEhL8lRFNcTNnq9qyS7k
vAFCbXUlcsL4E3jR4EqZKArxni9bt/AyWUr69zmFp9Xu2OeK18wHonAujV9QTZOB
NaSawc3stFKWMoOUM4pXOC7S76nyvXdtApV3OCunNElUNNLF3M9D/mvn09eRjfod
PUev0mhxgpcedmCuvA7yS6RHhcXE61F9NTcon+Q6ZpGG8rxOrFGNR6urrsC9u81x
L6ZNXE7JGR0FvHS6usAIhhJQpWaIonTf5VOn8c2kKURSAqGisYjj00F7yccEenjI
GkQ6CmsPdSIgfVHPveLPQ6NX2Exrcs0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:52 2026 by rpki-client