
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json)
Hash identifier: 9rFB9aXxFWBA4tZZs19fT6My+1OyRTNMEhIBG6YoiWY=
Subject key identifier: 85:05:09:A2:2A:C7:46:3A:07:85:79:0A:D3:FD:E1:65:C3:B9:8A:14
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584EA7912190BE603515FDFAE720
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16591
IP address blocks: 136.42.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:21:90:be:60:35:15:fd:fa:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=380a8de9-7322-441e-b83a-69ad88a7aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:ad:05:cb:ae:5e:40:60:eb:a6:00:0e:ae:
92:dc:d8:d5:15:59:4c:f8:c5:4a:84:dc:0b:0e:21:
27:82:66:1d:39:49:de:95:81:43:86:05:eb:6b:02:
bb:db:07:a1:d5:fd:d4:03:4f:da:84:45:44:46:8f:
07:62:9b:12:1c:10:88:00:06:5f:13:84:52:b0:73:
75:a6:58:8f:fe:fb:e8:9d:98:65:4a:26:df:51:8e:
25:af:53:46:75:c0:cd:06:8b:d1:0e:bf:07:c2:9a:
71:f7:e2:fb:2e:e2:d8:1d:2e:db:c9:35:47:59:83:
f6:c5:2c:85:17:34:92:c1:68:0d:4c:be:eb:cd:44:
f3:4f:be:d5:96:4b:3e:93:b3:22:a0:fd:ed:d7:5f:
8e:5b:e9:d9:92:20:49:85:ca:80:dc:a8:3b:26:3f:
ee:b8:95:c3:8b:13:3b:3e:01:1e:bc:2b:1d:75:a4:
13:c2:a4:ea:59:f1:fa:33:e9:ee:05:5a:59:82:e9:
91:d2:28:49:eb:97:a2:7a:36:e4:39:0e:33:65:44:
50:37:be:44:90:3e:cd:0f:4f:fc:e7:67:af:fa:71:
b9:de:ee:71:5f:00:5a:6d:1f:19:67:48:c0:90:be:
90:2a:5a:be:53:41:bd:22:36:cd:c5:ab:2c:0f:a5:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:09:A2:2A:C7:46:3A:07:85:79:0A:D3:FD:E1:65:C3:B9:8A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.42.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:7b:6d:02:38:f9:0c:db:a6:10:f2:27:be:a0:03:8f:0c:5d:
82:aa:17:36:0e:a5:a5:4d:33:eb:75:f6:74:b6:4a:e4:e3:09:
a7:19:8f:30:33:0c:06:63:bb:ed:1e:ff:73:b2:be:28:b1:0a:
10:29:90:2a:54:e7:36:7a:b2:d8:b0:bf:85:75:cc:43:bc:ff:
d5:49:48:20:bb:f5:ab:09:b5:7d:63:63:5a:65:1e:cc:3b:ff:
17:15:d5:bd:b2:98:a7:b7:16:1f:d6:3a:6d:1f:37:fe:90:59:
74:26:e7:81:a9:56:94:6b:d4:6e:9f:57:24:51:7d:e8:cd:43:
d6:65:a7:f6:c9:16:59:ae:37:6c:66:20:82:44:27:22:1d:5b:
74:2a:a7:79:60:91:bf:78:34:af:d8:5a:df:7c:4c:be:a1:6b:
e7:de:b8:c9:ea:7f:11:81:a9:6c:e6:d9:eb:10:9a:89:2f:6f:
41:57:da:34:a5:9d:7d:26:e4:32:fb:e2:62:67:56:b8:ca:60:
06:2f:45:1c:ce:d2:f2:40:8a:85:72:9c:fa:cc:7f:eb:3d:4d:
06:07:00:28:da:c7:b1:16:f6:ba:25:31:03:e0:15:bd:2d:de:
86:70:31:9e:0d:7a:25:a8:56:ea:fd:97:d9:18:a2:2e:b7:ca:
a0:92:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:46 2026 by rpki-client