
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa
File: e4427f2e-8c0b-3316-9550-f264211ff023.roa (raw, json)
Hash identifier: 0+h6QzVA/Cvmb6HrA64BRYvkgkzdQSKWUKyDMal7Jbw=
Subject key identifier: 36:1D:DC:CF:62:E5:0C:DF:2B:03:CE:ED:5B:C2:9A:1B:8D:CA:2C:C8
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D4804D5C6AE6A6877DAC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.38.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:48:04:d5:c6:ae:6a:68:77:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=7a6c5567-1c60-4f27-8ee4-07f4f685f2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:6d:88:06:67:81:d7:79:d2:52:a0:98:28:
4d:e9:91:4c:ed:12:e1:d1:47:bf:24:94:8b:17:24:
50:ca:ff:c0:fb:b4:08:79:95:a0:c7:40:a4:46:30:
e0:fd:64:1c:d4:93:90:5c:a0:b7:9b:66:ab:96:10:
c8:ae:25:a4:1e:9a:4d:d9:8e:a8:c6:c2:d4:0f:27:
7c:dc:01:5f:62:8d:e6:e6:34:33:57:d5:1b:16:67:
61:a1:23:0a:7d:cb:47:08:56:75:c1:61:82:96:4f:
b9:60:d3:68:eb:3e:81:d1:cc:76:6c:65:44:7b:78:
4e:6d:e5:6f:56:b5:59:e5:03:b2:fd:f3:2b:bc:04:
ae:03:16:7f:86:ef:55:fa:31:87:ca:28:90:54:6e:
d3:e2:8b:9f:d9:e3:92:8b:15:5b:30:56:90:33:6c:
a2:79:1d:57:c7:af:7c:7d:35:ea:2b:4e:d9:0b:d3:
e1:f7:b2:76:43:7e:94:f9:e1:9c:e3:bb:96:ff:d8:
04:dc:2d:62:b5:37:fc:6f:a4:d9:de:52:d1:e1:65:
60:3e:63:28:88:0f:5e:ca:3b:60:fd:16:41:0c:a0:
f1:fb:96:1b:6e:f1:3a:23:0f:43:65:17:0b:6b:8a:
c7:fd:6d:db:ba:88:5f:b2:de:99:db:0d:fe:1d:4f:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:DC:CF:62:E5:0C:DF:2B:03:CE:ED:5B:C2:9A:1B:8D:CA:2C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.38.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:50:52:f9:93:c9:fe:5f:fd:e4:7f:8f:01:31:60:5c:76:be:
44:02:ad:02:b6:68:91:70:8a:21:c8:52:94:6a:56:d1:db:c0:
e4:59:a0:d0:cf:89:64:71:f7:77:b8:83:9c:93:11:95:7a:a9:
5b:d7:99:42:a9:74:61:13:68:2a:e4:d5:20:eb:f2:2c:ec:87:
ba:d8:49:bb:ea:cd:ed:e2:28:d9:16:01:c9:76:41:14:8e:1c:
31:5e:4e:be:43:4f:bb:46:25:01:07:a5:9a:4f:7f:77:f0:33:
36:cb:73:49:fa:84:94:75:1d:3a:50:51:e6:3a:42:2d:d7:51:
88:b2:06:4f:f1:c7:bb:6e:50:60:38:6d:4c:b4:f0:f5:40:7f:
2c:de:4f:c5:42:5d:2b:fd:7b:6e:ac:c5:77:93:20:fe:ab:7d:
6b:f7:d5:57:64:a6:c9:7e:60:33:68:d0:42:5e:b1:2b:26:11:
55:b5:db:a3:bc:12:88:87:f2:d8:2c:6c:b2:bf:c8:a5:84:cb:
24:3a:d4:1d:53:48:5e:cd:c5:f5:df:58:9b:5a:af:6e:ab:26:
4e:e5:e8:fd:2c:be:06:fa:7a:e5:42:00:d2:e6:b6:af:2d:87:
a8:f0:e1:3e:d6:4e:d5:f5:36:6f:83:38:b0:5e:5c:22:46:01:
80:70:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:17 2026 by rpki-client