
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f042b7e7-6efa-36f0-b967-e115fc05b348.roa
File: f042b7e7-6efa-36f0-b967-e115fc05b348.roa (raw, json)
Hash identifier: nmcvg1ozG8XiogrZSSxWbtSUyzuCme5k2d3s3ZxttkA=
Subject key identifier: 3B:7A:27:00:F6:CF:E6:0E:55:12:52:A8:A7:1B:3A:B7:0D:DF:44:B9
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584D037D5C64F869DDF82994B700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f042b7e7-6efa-36f0-b967-e115fc05b348.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16591
IP address blocks: 136.56.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:5c:64:f8:69:dd:f8:29:94:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=7c09b3cc-6ebf-43b7-8958-4351fcf48e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:0f:62:e4:25:9a:e3:dc:1b:2f:38:3f:77:
96:56:3c:3d:5d:2a:ba:8b:f6:b3:84:24:bc:2b:0f:
12:75:0f:5c:8a:db:b9:4c:77:dc:1e:e9:09:4d:23:
15:a9:58:b8:08:87:e2:1b:07:4f:bc:44:a1:c0:20:
fa:e7:6f:f1:00:4b:2a:77:bc:4d:12:86:81:89:fe:
8b:10:76:c4:f0:62:05:e0:49:a2:71:ab:45:7b:4a:
6a:bb:fe:a8:5f:ca:86:79:35:62:66:b2:50:f7:d0:
15:e9:39:77:e4:a2:b9:47:37:57:a0:c3:d4:1a:c2:
58:9a:f9:2a:71:01:a7:cc:21:ce:26:69:c6:cf:43:
7b:49:f2:f8:88:dd:aa:db:ef:b4:05:d0:c4:22:65:
f1:67:bc:78:b9:eb:02:b1:74:5a:68:a7:ac:3b:7d:
a6:e7:b2:7c:3c:85:ed:e3:8a:36:43:45:77:f2:79:
e5:0f:c2:d5:3a:a6:b5:31:e0:3d:9b:91:df:a4:83:
1d:d4:ef:7c:c1:fc:12:5a:10:c0:f3:93:c9:1e:a9:
4c:55:5f:86:3e:b1:02:be:ce:55:fa:5c:69:1b:00:
78:fa:7d:f0:60:bf:17:3c:bd:ae:10:9a:b1:64:f4:
f7:5b:e5:c6:ab:07:86:0e:60:3c:b8:5e:e9:33:fa:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:27:00:F6:CF:E6:0E:55:12:52:A8:A7:1B:3A:B7:0D:DF:44:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f042b7e7-6efa-36f0-b967-e115fc05b348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.56.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:5d:1e:36:39:2d:9a:f5:8b:3e:d9:07:2f:ed:7e:2f:d4:81:
50:95:f5:27:6f:1b:bc:65:6b:58:41:11:32:bf:a8:85:8a:8a:
e6:fe:5d:fb:4d:04:ff:69:da:8f:29:a6:b0:af:95:a3:a9:dd:
28:cb:87:ff:33:35:94:bd:40:28:ae:f7:f6:13:82:49:2a:f5:
24:9c:6a:40:20:83:a5:ca:1e:b4:14:08:03:5e:36:e1:cd:d6:
d0:22:fc:a7:50:c8:26:8f:a9:3b:f5:f5:bf:69:29:f7:c7:25:
ba:32:07:91:12:3f:d7:0d:11:3f:46:88:08:51:b1:b2:53:37:
88:1f:a6:78:f8:72:01:8a:ee:99:42:10:08:f0:db:0b:5a:c3:
4c:c0:ec:ab:28:3a:b4:17:6c:02:a6:10:5e:31:1b:60:5f:6f:
2f:9b:56:dc:3c:f7:11:a7:87:d9:16:e1:ae:74:2b:2f:f1:71:
a0:19:17:79:0a:5a:19:8a:d3:b6:42:00:c1:51:98:18:38:90:
52:ed:9c:bf:16:92:18:35:e2:bd:de:c8:30:10:0a:5e:4f:51:
86:91:eb:7f:bf:68:24:8b:d9:b0:e7:d4:b6:27:67:23:3f:5c:
8e:7c:f0:cf:b6:55:e0:9c:70:7e:b8:24:86:5c:c2:0c:ca:36:
7d:3f:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:50 2026 by rpki-client