
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa
File: cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa (raw, json)
Hash identifier: S8wjuOm9Gix1BU2mZx/fDsHqKNhEHhGwWGq7zd616So=
Subject key identifier: 02:2B:0C:88:D2:AE:D8:F7:57:6F:4F:23:30:47:9D:A5:75:6D:FF:64
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D51B8BCFF2E8C08D09600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.49.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:51:b8:bc:ff:2e:8c:08:d0:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=9a359b28-c5b2-4ae0-9dd8-adfe9af453f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:80:ef:25:18:89:fd:31:87:d7:3d:f7:b8:
98:05:72:26:4a:10:73:99:80:56:54:b5:8a:8d:b2:
a5:f0:da:d7:0f:a0:24:01:5b:e7:51:43:73:7c:3c:
ba:c4:e6:2b:8a:6d:51:8d:8c:1d:c8:7a:3e:3d:dd:
9a:7f:57:d0:ad:ff:34:70:53:7f:79:75:58:e8:1f:
87:5e:1e:25:fd:b4:30:0a:82:49:af:d0:af:53:fc:
a2:b3:e9:47:82:fb:d1:f5:11:5f:87:2b:ff:b9:47:
66:6f:90:8d:85:14:d8:fc:e9:35:ad:c6:3a:4d:84:
34:08:be:ba:c6:20:0b:0b:84:bd:51:ab:e6:34:33:
79:6c:c3:89:73:2e:d4:55:f6:5f:d4:44:f0:3b:fe:
09:59:f4:e0:a7:90:8b:d1:fc:8a:c1:af:56:a9:56:
63:1f:c4:7c:e1:c6:c3:c9:ab:84:0c:93:b4:85:9e:
c1:fb:b7:f3:1e:58:39:a6:77:0d:c5:7b:17:4e:9f:
63:66:2e:1e:73:f4:d4:a4:68:c8:86:81:b5:3f:b5:
31:8f:cb:e4:60:b8:68:0d:aa:c8:6a:40:ff:63:9b:
c2:f7:d0:1f:54:ff:ab:6a:1d:ca:68:fe:ce:b7:90:
06:07:56:e6:e1:83:a8:8a:a7:9e:65:d4:4e:0b:fe:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:0C:88:D2:AE:D8:F7:57:6F:4F:23:30:47:9D:A5:75:6D:FF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.49.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:35:4a:d9:2c:64:f9:98:23:12:4e:13:33:71:dc:e3:20:2c:
d1:66:b4:fe:c2:ed:fb:68:bf:d9:a8:dc:cb:93:08:2b:8f:02:
c0:af:40:0f:d4:6a:d5:ff:0d:8e:99:08:e5:b1:d9:25:c2:96:
6c:75:44:0e:36:da:8c:46:a0:3b:39:c2:a1:2a:d8:03:de:6b:
52:cf:e1:01:f2:61:b5:9d:79:ee:df:84:be:3f:7b:45:b5:f6:
c1:ed:05:8a:c5:fd:4d:ac:33:50:26:0b:5e:fb:36:77:00:e4:
4a:2b:6e:09:60:ad:43:25:5e:25:b0:78:b2:99:4a:b5:32:bb:
96:64:3d:a8:1c:a8:b1:2c:38:03:b9:f4:29:65:c8:de:ab:15:
73:19:09:d0:c7:7d:07:68:a9:ac:8a:fc:62:a2:ea:81:49:4d:
c8:f3:30:5a:9e:b3:c4:5f:99:49:e4:63:6e:4d:bf:50:24:bb:
dd:1a:59:74:8b:98:f0:ba:84:1d:0a:d0:80:a6:ce:bb:81:7e:
ae:d3:fc:92:e9:a3:5c:18:c7:5d:a9:99:33:ab:41:bc:55:69:
4b:3e:34:b2:36:04:34:75:53:a4:2d:18:97:43:65:7d:39:d0:
6d:ae:98:eb:81:cb:66:c0:03:5b:f5:52:f9:e6:ec:e7:24:18:
fd:41:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:26 2026 by rpki-client