
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
File: 85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa (raw, json)
Hash identifier: xk3Rcyg5jJthbs7oVoB5AwL/6lEqhoe43u8L1luIRDE=
Subject key identifier: 73:BE:A1:E2:61:AA:FF:E9:40:A5:9D:CE:3D:CA:1C:92:28:4F:95:8B
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037CFB1422184AB733879980
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.35.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7c:fb:14:22:18:4a:b7:33:87:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=b2e6a9e8-e91c-4505-9bc7-20e343a4bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:46:15:c6:84:f0:22:9d:08:5f:2e:8c:88:
d6:1c:60:89:d8:eb:b2:69:89:d1:bf:07:3d:4c:a8:
13:e4:9f:37:df:d8:de:90:bc:90:5e:1f:94:96:9b:
22:d7:93:3d:2f:7f:67:50:47:a1:9d:6c:7c:aa:ee:
ae:61:c9:80:23:70:9f:d8:e0:15:8a:12:3d:96:2d:
b3:5f:a4:29:dc:77:49:ec:48:6a:d6:00:a6:83:ad:
65:97:e0:90:97:94:88:09:03:40:8f:94:6a:05:38:
e9:8f:d0:b5:9b:66:a0:53:e8:ce:d6:dd:7a:53:d4:
aa:de:4b:6e:bd:76:50:ca:16:07:de:bc:22:66:1b:
8c:de:80:15:61:08:0d:78:9e:f3:09:37:a6:1c:51:
27:d3:45:5f:ce:09:fa:c8:6c:8c:8c:6f:53:0a:b0:
43:95:10:86:fe:31:33:8c:e1:63:06:5a:e2:78:9d:
ec:5e:aa:34:28:dc:7a:d7:a1:82:9c:fb:0e:0b:50:
29:f5:3c:a2:3e:7c:b7:5f:f3:73:e1:77:7f:39:99:
26:c7:d9:40:61:68:af:a4:9a:bc:da:fb:3b:48:89:
f5:78:0c:96:c5:be:63:88:bf:ee:71:9c:e2:fb:2a:
78:9f:24:18:90:3e:13:7f:e6:52:ce:25:ef:26:6e:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:A1:E2:61:AA:FF:E9:40:A5:9D:CE:3D:CA:1C:92:28:4F:95:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:1f:28:60:0d:1a:b7:da:6f:0d:1a:0b:6a:85:91:e5:f2:e1:
66:63:af:e6:d0:43:f3:9f:7b:1a:7f:e4:a6:aa:04:2b:e3:ed:
eb:86:54:0e:5d:81:b8:55:81:a1:b2:62:39:d9:12:d1:66:bd:
d3:9a:83:5f:9c:cb:6a:51:50:61:87:44:b8:43:b0:25:b8:a0:
5c:3b:0a:d2:e0:09:8b:be:23:50:3e:70:a5:67:23:0f:1e:fc:
f6:91:8c:be:26:27:1d:4c:89:25:08:a4:f1:d1:69:c0:b2:b7:
b8:44:da:3a:bb:64:e7:4c:e9:41:99:dd:10:24:7b:f3:0d:6b:
de:54:41:9e:0f:4b:48:0a:0f:4b:66:14:ea:2a:c7:10:76:06:
c5:50:15:97:0f:47:61:a2:b4:8a:91:c0:75:c6:7f:f3:57:a8:
0b:bb:03:5d:1b:34:80:99:35:c0:4f:41:17:13:70:70:ef:7f:
fc:08:1a:af:57:61:04:e6:b7:a1:78:08:30:c8:c9:ba:7b:b4:
58:60:a2:62:cf:0e:3f:a1:13:98:76:2e:ac:86:ba:8b:57:ef:
98:9a:21:b3:d5:c2:45:7e:27:44:fd:06:c8:e5:ad:8b:d3:a2:
6b:e8:21:56:99:76:15:38:9d:7d:94:c2:e8:1f:61:4c:0d:56:
21:3d:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:17 2026 by rpki-client