
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa
File: 59c0257e-698d-3c0f-975d-93c1e910c93c.roa (raw, json)
Hash identifier: 5jv3fbYlTEfn1P3b7Aa2f3stB2H3Cj4OHZMx+A3n4pc=
Subject key identifier: 37:9F:6C:59:26:0A:5E:01:94:1F:7E:53:D6:EE:32:AC:27:D3:D7:2E
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F4328584F655D7613D0790CA01AFA8E80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 16509
IP address blocks: 52.128.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:76:13:d0:79:0c:a0:1a:fa:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=74bd821b-fabf-411b-9dd4-6f786e6fdcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:12:ae:32:43:9a:9a:c2:de:73:a6:3f:66:
2f:2a:b9:4f:4e:0c:e5:dc:75:66:03:a3:b4:5c:9c:
7d:e5:a4:6a:9d:aa:06:82:2a:81:74:ad:ba:2c:3a:
1a:43:ab:cb:03:2c:91:89:f4:a3:bc:da:03:ed:71:
80:23:77:9a:f0:63:14:3a:be:5b:93:ab:f4:7b:53:
75:0e:96:81:af:9f:3e:fe:eb:4a:a0:80:e7:3e:53:
92:ac:f4:86:50:d6:34:bf:9b:e9:05:a1:dd:04:6d:
5d:91:1d:40:3a:a6:7e:4b:07:d3:1d:c2:b8:20:21:
7a:6a:f5:84:05:89:94:50:96:68:1c:c3:1d:9a:32:
82:e1:23:8b:2d:ac:4c:9f:62:ac:d7:5f:95:56:68:
77:11:48:5b:d2:d8:8a:c2:df:9c:a1:92:8b:8a:ba:
13:db:20:e2:d9:b9:a1:c0:5d:67:e0:4d:d0:b6:99:
a5:cb:17:89:d6:47:6c:40:2f:3b:85:4b:34:92:ef:
ca:f2:d5:0d:b0:da:c9:da:29:e5:3f:8f:9a:6f:4b:
ed:be:2b:aa:ae:2c:00:60:87:fe:2c:20:58:f6:78:
2e:f9:32:8d:fb:6d:24:49:95:b7:b6:6b:60:7a:b1:
da:03:a5:af:1e:2e:17:48:6d:cd:6f:2a:42:15:fa:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:6C:59:26:0A:5E:01:94:1F:7E:53:D6:EE:32:AC:27:D3:D7:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:51:c1:73:a9:ba:c8:0a:0e:95:1d:30:4e:eb:4f:4b:6a:8b:
7b:23:e0:d2:12:60:78:b8:fa:de:36:be:53:23:f1:50:b8:0c:
22:9c:7d:87:4c:35:a7:27:ed:ce:10:7f:31:e3:25:f5:71:67:
a5:e4:11:d8:d8:0d:d0:31:fa:e9:2b:fe:03:bf:27:13:49:24:
db:ca:4f:5e:be:6b:38:20:2e:8e:d5:6c:1c:44:36:9d:67:0f:
06:22:00:49:d5:31:65:fc:23:11:a5:63:8b:7b:c6:d9:24:07:
d8:b2:f7:68:b8:d3:b5:f2:c1:5f:88:71:00:fb:b1:22:a6:c8:
bb:35:b5:ef:ca:58:ff:08:f3:b2:55:cc:04:44:ce:fb:84:62:
59:ac:29:dd:15:00:f8:29:36:98:97:1a:05:bf:99:64:61:a3:
a8:06:0c:44:46:52:bf:5c:bf:b0:29:47:52:f5:a4:29:77:47:
33:5f:7f:dd:88:30:e9:af:b5:bb:36:d1:fd:81:33:25:7f:ab:
39:c7:9a:4f:eb:04:f8:23:ce:18:33:90:05:9d:dd:e6:c2:a4:
2f:01:6b:b2:77:52:39:d5:57:3d:91:a6:da:ee:88:95:09:1c:
73:ea:09:f8:18:aa:8d:12:3f:b7:e4:87:80:e0:08:1b:3c:bf:
b2:40:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:06:56 2026 by rpki-client