
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f54cb6d-3113-3014-a204-6364a106f086.roa
File: 7f54cb6d-3113-3014-a204-6364a106f086.roa (raw, json)
Hash identifier: MeChvgKdPqGcVS0KL9brO/E3i8wZVMluQ0IVA2PqkGM=
Subject key identifier: 94:49:B3:27:37:C1:56:E1:56:97:23:2A:7C:CD:5F:0B:CA:99:7E:A3
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584F49897887865BB3E906A73C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f54cb6d-3113-3014-a204-6364a106f086.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16591
IP address blocks: 136.58.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:78:87:86:5b:b3:e9:06:a7:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ef7d1181-aa77-4521-9e0c-a938c31b8b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:28:51:57:1f:2c:27:ec:f3:8d:53:dc:b4:
a3:ed:3a:5e:55:b3:89:bb:0c:0e:21:c3:52:1a:72:
d3:c5:01:ce:61:3a:6f:69:c2:3a:da:94:17:6f:2f:
09:e2:c2:99:fc:9e:20:f8:e7:5e:f3:80:52:e5:d2:
65:c3:a6:69:e1:59:83:49:7c:81:5a:e5:66:20:88:
aa:3b:00:86:c7:83:53:7f:83:6b:35:f5:90:35:7a:
a0:4d:16:8c:2c:70:a1:e5:89:74:c9:ae:03:d8:3c:
e1:5b:3d:82:a6:92:d5:9a:3c:ea:d2:c7:6b:8d:37:
73:7f:04:b8:62:44:5f:0e:7b:e1:89:78:12:58:fa:
55:29:29:a9:41:14:e3:9c:9e:15:4a:70:88:f8:93:
29:f3:72:09:44:0a:34:21:86:09:45:e2:93:bc:23:
62:a3:69:24:40:e0:22:42:31:39:53:f7:53:b9:13:
95:54:3b:62:b6:f7:90:18:8e:d2:e9:9a:8c:f9:c2:
b2:08:94:74:51:9d:f7:4e:70:fc:50:35:19:89:d3:
3b:d2:60:62:23:3d:86:a4:5c:7a:52:c4:3c:f1:55:
01:0f:19:9f:71:0b:4a:85:df:2d:9f:9b:e7:c6:29:
26:40:11:d3:99:e8:17:bf:a4:ad:55:6a:d1:fc:1e:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:49:B3:27:37:C1:56:E1:56:97:23:2A:7C:CD:5F:0B:CA:99:7E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7f54cb6d-3113-3014-a204-6364a106f086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.58.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:fd:24:4c:4f:a4:1a:f1:a7:e5:1c:f8:90:96:f6:69:91:a4:
a1:91:d8:fd:4e:e7:7c:77:f9:d1:a9:98:b4:70:49:ce:17:ee:
48:30:e4:2d:fc:e0:26:38:25:fb:af:ff:73:dc:bc:bc:37:44:
51:15:0a:58:9b:61:f6:1c:19:e8:dd:20:06:01:cd:ee:dc:1e:
1e:cf:be:87:fb:f2:96:81:db:f6:0e:c8:c7:fb:b2:3c:d0:10:
e5:bd:5a:3a:1b:b3:5c:22:7c:b9:b0:5a:c9:8e:ee:89:b5:5e:
e5:20:5d:f1:94:51:94:59:7c:e0:94:4a:85:3b:9b:08:9b:e3:
44:8d:4f:fe:e1:b0:03:81:d1:87:b2:62:a8:fa:bc:96:f4:33:
db:6e:42:ea:9e:f6:f8:49:35:63:8c:f3:db:54:e1:d2:1d:4d:
48:09:c2:2c:ca:c7:57:f3:51:da:0f:cf:4c:76:1d:26:84:2e:
7b:08:7c:a1:14:dc:0a:8d:41:e6:2d:b7:39:80:e3:50:95:02:
0c:2c:39:61:e4:94:43:38:51:e2:52:eb:c8:6e:1f:3d:aa:f1:
b2:80:cb:76:98:3d:9e:6f:d7:2a:2f:1e:81:d8:13:05:37:b9:
3f:d0:f3:16:a2:73:ee:57:fa:f8:c6:bb:1d:4f:1c:a3:be:9c:
6a:52:18:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXiHhluz6QanPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWY3ZDExODEtYWE3Ny00NTIxLTllMGMtYTkzOGMzMWI4YjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJIoUVcfLCfs841T3LSj7TpeVbOJuwwOIcNS
GnLTxQHOYTpvacI62pQXby8J4sKZ/J4g+Ode84BS5dJlw6Zp4VmDSXyBWuVmIIiq
OwCGx4NTf4NrNfWQNXqgTRaMLHCh5Yl0ya4D2DzhWz2CppLVmjzq0sdrjTdzfwS4
YkRfDnvhiXgSWPpVKSmpQRTjnJ4VSnCI+JMp83IJRAo0IYYJReKTvCNio2kkQOAi
QjE5U/dTuROVVDtitveQGI7S6ZqM+cKyCJR0UZ33TnD8UDUZidM70mBiIz2GpFx6
UsQ88VUBDxmfcQtKhd8tn5vnxikmQBHTmegXv6StVWrR/B4h4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRJsyc3wVbhVpcjKnzNXwvKmX6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2Y1NGNiNmQtMzExMy0z
MDE0LWEyMDQtNjM2NGExMDZmMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/9JExPpBrxp+Uc+JCW9mmRpKGR2P1O53x3+dGpmLRwSc4X7kgw5C38
4CY4Jfuv/3PcvLw3RFEVClibYfYcGejdIAYBze7cHh7Pvof78paB2/YOyMf7sjzQ
EOW9Wjobs1wifLmwWsmO7om1XuUgXfGUUZRZfOCUSoU7mwib40SNT/7hsAOB0Yey
Yqj6vJb0M9tuQuqe9vhJNWOM89tU4dIdTUgJwizKx1fzUdoPz0x2HSaELnsIfKEU
3AqNQeYttzmA41CVAgwsOWHklEM4UeJS68huHz2q8bKAy3aYPZ5v1yovHoHYEwU3
uT/Q8xaic+5X+vjGux1PHKO+nGpSGFo=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:31:52 2026 by rpki-client