
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
File: acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa (raw, json)
Hash identifier: bV1FaBW2DrVz0lQQwO5a9pGfpv9/PvbdfGUS2b4G5vU=
Subject key identifier: 34:60:59:2D:76:6E:34:25:8D:C4:A6:7D:01:02:0F:B3:8C:AC:AB:61
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D543A0D4E9B313E5A8FC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.35.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:54:3a:0d:4e:9b:31:3e:5a:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=8e3b6084-ab71-433a-a08c-c4c95b1bafb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:f9:e7:33:f5:be:b2:a9:5f:f2:34:e0:5b:
e7:91:8b:d3:31:21:50:e3:39:eb:06:a6:96:48:4f:
20:a4:3c:45:24:ef:9a:a3:fb:1a:2c:7c:eb:01:19:
6e:10:95:eb:bf:b4:b9:cd:02:6e:88:2b:f1:87:f8:
1f:1b:6f:64:be:31:15:5e:0c:c9:0e:e4:2f:7b:6e:
1c:72:f5:ab:2b:5a:8e:05:de:52:fe:02:76:a2:f7:
78:7c:f6:a3:bf:65:03:ea:99:a7:c3:b9:33:c3:03:
49:af:f3:5c:f4:42:65:05:d2:85:83:0a:a9:25:80:
da:c9:5f:20:04:e8:e4:da:bb:90:9e:17:5f:27:7f:
56:df:14:00:fd:a4:a3:04:2f:ed:90:78:9c:2d:61:
24:25:39:7f:91:8d:33:d7:84:88:d4:ed:84:e0:7b:
44:32:2d:03:14:44:1a:7f:58:59:7b:69:83:22:f9:
e5:98:4f:56:b3:07:4f:dc:bb:10:51:7f:b5:f4:76:
38:0b:a3:ce:23:f3:bf:20:f7:e0:18:ef:2e:7e:26:
df:35:97:a2:94:40:54:07:0a:e7:28:96:9a:1f:dc:
cb:84:00:94:4e:53:6b:35:32:f7:ab:fa:fb:2b:c0:
ee:a0:31:9b:5d:d0:cf:4c:78:91:15:71:c2:3d:1b:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:59:2D:76:6E:34:25:8D:C4:A6:7D:01:02:0F:B3:8C:AC:AB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.35.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:bb:8a:f5:42:a0:43:4a:b5:58:37:cf:99:9d:bc:21:6d:5a:
95:25:69:3c:ae:ef:89:5c:a9:a5:d8:53:25:90:3c:4e:35:59:
48:7f:43:85:c5:bc:e8:71:72:de:11:fe:52:3f:50:98:f2:72:
dd:bc:4f:aa:95:85:20:e0:87:f1:c3:16:0e:16:ec:2a:09:e4:
d9:31:58:ee:4b:b7:ae:f4:fa:c3:a1:4d:b5:1f:2c:54:d8:a2:
47:8b:74:e7:11:0f:33:66:bc:10:1c:87:10:b8:7c:0d:7f:26:
e5:28:be:97:10:b2:c2:0a:6a:58:89:47:44:46:9c:57:5f:db:
8e:7c:37:0c:a1:a1:2f:d3:86:91:ab:de:85:53:81:df:70:94:
78:79:39:ac:d2:a4:53:09:0f:a3:17:84:7b:63:61:92:8a:52:
b3:71:19:96:ea:25:68:41:f7:67:56:88:98:ad:c1:08:0e:fa:
01:7e:1f:03:f6:36:74:ec:52:de:d5:38:cc:a2:b2:19:71:0c:
8f:29:a6:25:d9:03:aa:33:1e:7b:13:a4:57:97:bb:af:b5:9e:
17:e1:34:9e:67:02:70:68:d5:11:51:a6:e6:a8:1d:90:76:33:
d2:4b:0b:62:d3:bf:e9:58:50:92:18:90:7d:63:34:18:35:4d:
15:16:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:43 2026 by rpki-client