
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/381e6bbc-dbc5-3c68-a66c-7e267c00e224.roa
File: 381e6bbc-dbc5-3c68-a66c-7e267c00e224.roa (raw, json)
Hash identifier: hZ/7vlMsEen66CnXuXaboLem1HuKaMNq8JFFKJIp4wY=
Subject key identifier: 15:48:EC:57:CA:68:72:DE:4B:59:A8:B2:3C:D1:8F:75:A0:99:DB:A4
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F4328584DE41B558894A842E4A2AFA700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/381e6bbc-dbc5-3c68-a66c-7e267c00e224.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 16591
IP address blocks: 136.37.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:55:88:94:a8:42:e4:a2:af:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=fa30ac6d-7f40-4d9c-8a37-b1d78f51711d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:b1:24:5f:d5:30:b5:bd:f3:c1:70:5a:da:
53:9b:85:33:99:e0:57:c8:1d:10:2c:9f:f6:12:99:
4f:1c:9f:2b:4e:53:bf:2e:97:88:5e:42:c4:8e:e5:
b6:da:58:71:97:31:1d:dc:ec:1d:50:79:d2:95:cc:
96:79:c2:e2:bc:c1:ac:3a:bd:5e:75:c0:b4:45:0d:
50:22:86:b8:5d:5c:fc:f8:49:b6:f5:fd:fe:f3:e3:
9b:c4:60:3a:4a:31:60:16:ab:f1:0b:53:3c:2d:59:
94:e5:be:a3:1b:3a:46:53:b9:d1:e9:eb:f0:44:45:
4a:08:c3:ee:ae:cd:ec:9d:ba:73:88:d8:bf:27:31:
da:9d:bb:9a:ac:46:5a:9d:e3:8a:08:41:a3:2f:29:
5b:47:a4:33:cc:e2:68:5b:3e:75:7d:1c:f3:80:3e:
b5:f5:77:26:83:b0:c8:af:87:97:29:14:12:ce:06:
a8:68:2a:7a:3b:5d:29:d8:5f:eb:8b:5d:fc:f2:97:
83:b8:56:5f:11:14:3f:02:f7:3e:50:d7:4b:f2:f0:
bd:62:91:a2:6f:82:fe:2e:e9:e3:e6:a0:2e:e5:3d:
b6:5c:13:1c:62:12:75:7c:2c:80:52:f8:0f:c1:66:
1f:51:3e:b7:7d:e7:b9:45:4a:57:71:c5:f5:f0:7d:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:48:EC:57:CA:68:72:DE:4B:59:A8:B2:3C:D1:8F:75:A0:99:DB:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/381e6bbc-dbc5-3c68-a66c-7e267c00e224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
136.37.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:9e:68:c3:69:cb:b6:da:5c:f6:06:f5:6f:b8:b7:42:6b:f9:
54:d5:a7:9f:8e:53:70:83:86:e1:ed:34:a0:ad:d8:50:e6:38:
73:65:f2:84:20:c1:94:6a:e2:bf:36:7c:23:aa:cb:9d:15:f4:
4b:47:59:45:dc:77:d7:03:b8:25:e8:f6:82:cc:1d:86:8d:43:
93:d4:4b:79:b3:b0:b2:5a:76:4d:68:19:c9:47:78:16:36:67:
75:82:78:88:62:ae:78:00:90:b9:fa:cf:a1:17:d7:0d:b6:f8:
9a:d6:21:85:1b:13:c9:f1:08:21:f6:79:60:af:41:0f:57:d6:
de:f2:14:21:bb:fd:49:d9:12:88:6f:3e:0c:96:8b:47:8f:01:
b1:24:5c:dd:af:66:ae:01:21:4d:77:82:e3:ee:df:46:30:83:
a3:bb:8a:68:21:ff:10:5a:61:91:84:88:32:37:fe:78:94:ae:
20:dc:2a:e3:2c:03:0a:fb:51:3c:51:07:69:94:08:ff:45:19:
75:26:41:d1:b7:94:f1:60:df:97:69:c6:91:85:25:0b:27:92:
93:11:f9:1c:4a:9d:35:d3:d4:1c:8e:42:8d:17:95:67:3f:ad:
36:a6:34:4c:af:b6:47:0c:4f:80:3c:e9:54:4b:d5:5b:79:00:
80:66:24:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1WIlKhC5KKvpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZmEzMGFjNmQtN2Y0MC00ZDljLThhMzctYjFkNzhmNTE3MTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7KxJF/VMLW988FwWtpTm4UzmeBXyB0QLJ/2
EplPHJ8rTlO/LpeIXkLEjuW22lhxlzEd3OwdUHnSlcyWecLivMGsOr1edcC0RQ1Q
Ioa4XVz8+Em29f3+8+ObxGA6SjFgFqvxC1M8LVmU5b6jGzpGU7nR6evwREVKCMPu
rs3snbpziNi/JzHanbuarEZaneOKCEGjLylbR6QzzOJoWz51fRzzgD619Xcmg7DI
r4eXKRQSzgaoaCp6O10p2F/ri1388peDuFZfERQ/Avc+UNdL8vC9YpGib4L+Lunj
5qAu5T22XBMcYhJ1fCyAUvgPwWYfUT63fee5RUpXccX18H0vUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVI7FfKaHLeS1mosjzRj3WgmdukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzgxZTZiYmMtZGJjNS0z
YzY4LWE2NmMtN2UyNjdjMDBlMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmeaMNpy7baXPYG9W+4t0Jr+VTVp5+OU3CDhuHtNKCt2FDmOHNl8oQg
wZRq4r82fCOqy50V9EtHWUXcd9cDuCXo9oLMHYaNQ5PUS3mzsLJadk1oGclHeBY2
Z3WCeIhirngAkLn6z6EX1w22+JrWIYUbE8nxCCH2eWCvQQ9X1t7yFCG7/UnZEohv
PgyWi0ePAbEkXN2vZq4BIU13guPu30Ywg6O7imgh/xBaYZGEiDI3/niUriDcKuMs
Awr7UTxRB2mUCP9FGXUmQdG3lPFg35dpxpGFJQsnkpMR+RxKnTXT1ByOQo0XlWc/
rTamNEyvtkcMT4A86VRL1Vt5AIBmJFo=
-----END CERTIFICATE-----
Generated at Fri May 22 17:38:22 2026 by rpki-client