
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa
File: d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa (raw, json)
Hash identifier: CClIdoJ/sio60oaD/csRqGZw804CcoZfj6shNW55C64=
Subject key identifier: EB:B1:72:B3:DD:6D:2F:DC:CC:87:50:79:8F:E9:A4:88:96:1C:93:55
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584CB121AB6C37990C641FF14800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 16591
IP address blocks: 136.48.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:ab:6c:37:99:0c:64:1f:f1:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=dbe0989f-95f8-4506-bf1e-5cb7375f7e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:40:a9:da:f5:4b:ca:56:5b:19:41:56:fd:
1e:8c:82:3f:2e:dd:0b:b7:fd:8f:eb:60:07:71:63:
8c:d8:4b:23:b1:c8:31:d6:4d:00:d4:b3:d2:71:99:
03:0a:f2:f9:2b:b8:ca:c9:74:27:0a:e2:4d:c9:fb:
52:ef:aa:a4:78:b0:5c:bd:46:7e:60:86:d4:b5:15:
20:52:0e:fb:0e:96:de:8e:fb:37:b8:76:28:f3:a1:
f9:4d:c2:2c:4b:00:cf:11:b0:2b:ae:2e:98:64:bd:
57:c6:23:a6:2c:44:81:08:5a:1f:9b:8b:ab:66:0f:
77:ee:73:e7:77:36:d5:8b:2e:19:72:88:cf:fb:b4:
0a:6a:c3:e1:35:84:97:89:58:6c:fe:19:c0:31:6b:
7e:7e:6a:27:b7:47:52:43:fe:eb:ac:d6:84:7c:c0:
f2:cc:52:3d:0e:e8:fb:24:c7:b2:b8:56:a8:42:fe:
1e:b2:52:4e:f7:e1:82:08:bd:8d:cd:b7:ef:b8:0f:
43:49:ec:ae:26:62:60:ee:e2:90:48:7a:8a:d8:b7:
09:c4:dc:d5:82:0e:35:21:9a:91:b1:b9:cb:9b:40:
46:e0:83:14:cc:c4:91:ad:6e:a1:3b:ff:d8:6a:7a:
71:81:39:a9:b4:14:9f:4c:dc:04:3b:12:d8:96:67:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:72:B3:DD:6D:2F:DC:CC:87:50:79:8F:E9:A4:88:96:1C:93:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6da37e0-2997-3ea5-9b4c-ec60c0045ca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.48.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:88:50:b5:45:11:2e:b9:57:49:a9:64:35:f2:20:32:f0:d2:
8b:38:65:d3:44:c3:75:32:db:de:29:34:ff:b4:ab:d0:ba:6f:
37:64:7d:de:d1:e5:05:61:bc:fd:f9:81:33:14:2d:cc:b9:09:
72:ed:f5:7e:fe:47:af:e8:b0:d6:dc:d7:21:36:53:da:a3:0e:
9c:c6:0d:e9:65:33:28:d5:3a:57:f8:ed:42:c0:58:db:3c:a2:
54:b3:fc:5b:6b:9b:6a:62:8d:e1:da:e3:27:c5:14:b3:01:c9:
7f:8f:d1:b3:09:9b:e0:f9:80:7a:bd:63:98:7d:9f:9a:34:d2:
c6:6e:4a:ec:e4:9a:d0:2f:cf:d0:d9:d2:7e:2d:cb:97:79:96:
28:87:bd:0f:12:8c:d1:3d:82:05:90:ff:95:71:9a:5c:14:2f:
3d:a0:88:f3:43:af:24:ee:85:ce:ab:8c:d6:32:45:cd:09:41:
31:0b:50:27:87:4f:5b:d9:f0:bc:a1:23:cf:b1:e5:4f:d3:a1:
42:7a:48:f4:f2:fd:6e:f6:1f:76:fc:e9:a3:e4:a6:3f:dc:33:
6a:7d:d9:48:5f:8d:7e:7a:12:39:62:35:a1:fd:6d:2d:74:22:
e4:4f:24:8a:1b:cf:d7:57:ff:0e:f3:21:bd:a0:32:4f:83:99:
24:95:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:45 2026 by rpki-client