
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json)
Hash identifier: Up75AsATKpcxC7pRsD/+sfUy/u7nNPY+UEW1//9aSYw=
Subject key identifier: 56:EF:4B:61:89:43:E9:E2:5C:A3:18:9D:F7:93:CB:91:7E:BC:E3:AC
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584D1F4A7969FC6E7FFF50110D40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 36040
IP address blocks: 136.22.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:79:69:fc:6e:7f:ff:50:11:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=df026d32-af05-4d8f-a226-19cb08cd7f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:62:84:32:e5:60:e5:9c:ec:de:1b:f9:cb:
4d:ee:3e:ea:d5:88:47:8c:9c:25:13:9a:ec:36:f6:
ba:21:d2:b8:34:a6:df:d5:e6:4b:75:d1:bd:ba:c5:
b5:94:cb:9b:34:93:45:75:ec:cb:fa:b0:c4:4c:b2:
8f:29:fe:d8:56:29:6f:c5:49:0e:e0:6b:62:68:b4:
e9:0d:90:6c:82:67:78:09:db:2f:c1:c9:8b:96:d5:
19:e4:bb:52:c1:fc:b7:69:57:36:15:18:81:ff:bc:
49:22:e0:e3:39:05:91:f6:1f:f6:34:93:10:9b:77:
57:2e:81:93:91:45:98:c5:bb:ee:3c:29:1f:6d:59:
ca:c2:dd:4b:c9:87:90:63:b1:7a:34:62:a6:c1:5a:
8a:aa:cf:34:af:c3:6f:b4:e0:c5:3b:1d:1e:90:b4:
6a:d9:cd:d3:a0:4d:92:57:21:78:69:2a:9f:ac:11:
36:67:26:a8:65:bd:ba:fa:15:52:cb:15:4d:ed:19:
10:92:5c:e7:a8:18:4b:f9:cc:0f:f9:bf:da:a2:dd:
17:26:f8:eb:4a:e2:df:fa:e3:08:84:91:d0:bd:dc:
8c:34:a1:02:d9:84:21:7c:ad:3c:0a:20:27:19:6e:
ff:e3:b3:66:6d:2a:53:60:65:a2:04:1d:2b:f8:86:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:4B:61:89:43:E9:E2:5C:A3:18:9D:F7:93:CB:91:7E:BC:E3:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:40:65:8e:90:e4:25:7d:d5:07:d2:1e:eb:b9:60:06:d0:9d:
c2:7f:60:8b:5c:58:27:d5:b0:17:22:93:08:cf:09:b9:54:40:
cb:b2:40:5d:a6:56:d5:76:ab:08:ac:c4:2f:b0:7d:57:59:a2:
22:45:cd:a0:96:74:bc:26:9c:b9:66:7a:43:78:ed:04:7c:6b:
f9:2f:ee:03:62:16:a9:f3:cf:dd:d1:be:2f:23:42:07:c1:00:
be:08:c6:e2:31:d0:fb:67:25:43:43:d5:18:82:25:c2:3b:b5:
fd:05:5f:f4:23:12:65:c2:ef:f0:84:f8:df:2e:5d:f6:31:47:
e7:06:22:33:7d:0c:d4:c2:06:0d:2e:04:8e:34:90:9a:ec:ce:
9c:f7:4f:65:f8:bb:17:42:43:e4:b0:6f:e2:35:c6:13:38:5e:
5f:11:ed:95:c1:e1:b7:98:1a:9c:c9:c3:95:fe:1b:b0:84:b2:
ef:2d:3b:a2:9f:6b:b3:46:9a:05:93:71:e5:99:b3:82:7d:d8:
32:e2:e5:70:ec:f4:1a:69:03:ca:64:1f:13:2c:42:bb:b9:30:
26:b4:13:ec:46:ff:0f:7a:b0:c6:bc:8a:78:27:d3:73:85:d0:
00:c6:b6:54:fd:00:37:0e:5e:c8:f7:e2:46:3e:44:fc:f3:7b:
69:45:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:34:53 2026 by rpki-client