
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
File: 571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json)
Hash identifier: LKwQqbMw4pwwVoD2pOtx1cvQv8dbYZ4CU+DEagNVoa4=
Subject key identifier: 55:BF:B6:87:BD:BB:58:34:78:4C:2B:0A:53:5A:1A:DA:71:D6:02:CD
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F4328584ECD37260198844785962D4F00
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 36351
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:26:01:98:84:47:85:96:2d:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=f8748e78-25b3-4cb6-91bf-c9659adf8d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:d7:5a:17:ae:13:9a:75:64:c8:57:56:85:
7b:48:c4:07:11:49:35:cb:65:4d:a2:80:b7:d5:aa:
f7:df:8b:6d:8a:3c:79:64:7e:0d:62:3f:46:16:e7:
c9:2d:70:c1:43:1c:cf:dc:be:9d:bc:e5:5c:26:19:
79:a9:b7:cb:34:b6:d1:38:81:20:6c:0b:00:cf:5c:
55:55:fa:d4:c5:09:5a:2d:4c:6a:e7:af:80:af:b8:
54:f2:8b:d8:c1:02:bc:a8:52:42:c5:38:b1:1f:57:
dd:aa:1e:bc:ef:52:d2:38:c3:17:4e:cf:1c:4a:13:
1b:26:f8:2b:6e:05:d9:75:84:32:de:e3:67:85:3b:
cd:3e:cf:c1:61:16:ec:d6:77:57:5e:ca:3a:6e:93:
f5:14:37:47:d5:c1:2a:61:52:4d:a1:4d:67:17:ca:
ed:60:d6:9c:a0:31:24:00:33:c1:cf:5d:01:23:ba:
5f:54:f3:db:36:aa:44:70:40:f2:c0:8d:97:f6:ee:
16:95:f2:3c:f8:f4:60:6b:4d:fa:b1:02:0e:c5:7d:
5a:76:cc:40:ba:ce:63:5f:91:02:05:85:98:ec:11:
73:6e:b6:08:1d:20:d2:9f:3f:db:de:13:4c:4e:e9:
cb:a8:d2:e1:7e:cc:1d:49:18:4e:be:0f:1b:40:8f:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:B6:87:BD:BB:58:34:78:4C:2B:0A:53:5A:1A:DA:71:D6:02:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:91:a6:0d:f1:8d:a7:2a:e5:31:ec:30:dc:75:1d:58:60:dc:
6c:9d:6e:64:63:64:c0:0e:da:a5:0a:13:71:be:ff:d2:90:d4:
6a:ac:da:17:a8:45:a0:97:37:89:70:87:21:e1:82:ff:67:37:
fd:59:44:96:08:58:1f:75:5f:4e:cc:13:9b:9a:b8:41:9e:50:
8f:89:0b:9d:78:15:69:42:29:53:d0:77:8e:46:a0:90:bb:86:
14:46:d8:ce:e4:dd:ca:c4:9d:41:d9:89:8a:a0:80:10:85:0f:
21:b1:60:f1:ab:d2:85:86:dc:c4:7c:d1:66:60:a4:b7:79:44:
26:69:02:fb:62:25:89:4b:ea:ec:7e:59:e6:a6:0a:32:cf:a2:
fd:3b:d2:32:f7:1d:96:77:41:c4:2b:35:ac:0a:6a:bb:42:8e:
3c:c8:af:d0:c0:86:fd:11:c6:2c:16:4c:68:e7:4e:1e:8e:82:
2f:40:60:00:49:f7:aa:17:60:80:21:bc:9b:2f:bd:e5:eb:ee:
0c:1f:43:3d:f1:05:8c:50:f1:72:55:52:d6:1a:f2:1a:fd:0b:
34:a8:76:83:16:b5:32:c2:47:45:6b:0f:89:eb:03:0b:99:de:
10:62:03:95:4b:bc:6e:d1:24:40:5a:be:71:84:d5:5e:d2:13:
83:4a:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:42 2026 by rpki-client