
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa
File: c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa (raw, json)
Hash identifier: uxaGNuqpPM7bqf3YiUtUqweStJwos3mwX5pBmnIjZLc=
Subject key identifier: D3:5A:89:92:FC:27:61:F3:9D:23:14:7B:4F:88:7F:83:53:C0:83:24
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F4328584EC7A1CAD1FAF0E041603DCF00
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa
Signing time: Sun 09 Aug 2026 13:00:12 +0000
ROA not before: Sun 09 Aug 2026 13:00:12 +0000
ROA not after: Sat 07 Nov 2026 14:00:12 +0000
asID: 14618
IP address blocks: 52.128.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:a1:ca:d1:fa:f0:e0:41:60:3d:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Aug 9 13:00:12 2026 GMT
Not After : Nov 7 14:00:12 2026 GMT
Subject: CN=14a1c84a-d5ba-4607-bacc-6c67f141bcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:81:3a:26:77:4f:72:ba:5f:51:ec:4a:30:
b2:07:55:f4:c6:ae:a7:31:cd:3c:f0:66:7d:a2:b8:
ef:1f:c9:c2:af:16:12:75:16:ba:9d:07:09:7a:4f:
1c:17:25:a9:0f:bb:48:fd:27:5d:c9:ec:4b:05:17:
ac:96:37:1b:51:00:c3:5b:5b:77:cd:cd:a3:b5:a8:
d2:74:dd:4d:07:62:48:9d:d6:af:d8:f3:90:7a:24:
57:84:16:e5:8e:2b:71:04:cd:1e:a2:67:e6:19:51:
49:08:7c:b7:cd:d3:71:c2:ed:c2:6f:65:a8:66:5e:
2c:4e:11:51:75:eb:00:8e:2d:ab:89:82:ca:79:05:
77:30:e1:28:f9:b7:3f:9b:14:0a:ab:8a:11:06:6e:
b4:48:24:86:c1:b2:00:28:94:d1:64:8b:fd:08:0a:
72:4a:6d:bf:5c:fb:5e:52:99:8a:67:86:60:d0:b0:
23:b0:5f:3b:58:4c:9e:42:2c:2f:c3:41:0e:df:d5:
de:7b:be:66:41:f1:a3:72:5a:ee:8e:7e:cd:cf:ff:
67:04:3a:21:46:3e:9e:96:f6:ac:8a:b4:44:3b:d0:
22:52:c8:3b:62:1e:fc:cb:ea:5d:bb:a6:ef:03:58:
6b:c4:01:d2:71:27:6d:23:84:0f:5b:af:1a:7e:5c:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:89:92:FC:27:61:F3:9D:23:14:7B:4F:88:7F:83:53:C0:83:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ee:07:de:e7:4d:e7:3c:98:20:eb:e2:8e:0e:ed:fb:ce:a4:
10:00:d5:b6:1c:af:c1:95:41:0d:f5:c1:f9:68:47:be:62:86:
7d:28:ab:17:a4:a0:7b:0d:75:c6:4e:d9:d0:fe:c5:d6:37:b8:
85:a2:27:55:e0:3f:44:f7:d9:1d:84:0c:a1:e2:54:55:06:e6:
80:f7:b5:76:65:5d:d2:cb:4e:ed:c2:b0:e9:29:72:ee:95:0f:
95:a8:94:2d:1f:a5:ec:eb:63:f5:6c:b0:a6:07:5a:47:c5:08:
dd:b3:bb:66:10:1c:9d:97:0f:0e:b2:3b:b5:8f:ca:d4:7a:d4:
8c:92:5a:f3:94:fe:7e:f0:2e:32:d5:01:6a:91:8d:5d:ab:37:
48:ca:59:34:02:b6:40:bb:08:b7:79:c9:ff:e8:ad:61:4e:1e:
5d:ab:c7:a8:16:9f:1f:28:98:9b:55:43:5c:9a:b6:d4:4a:0d:
1b:45:d0:e6:be:85:73:00:2d:73:0b:de:d1:5d:88:33:78:12:
f3:01:da:40:8c:04:9a:89:34:aa:97:8e:0d:1e:77:ec:33:42:
b7:34:5f:cc:35:fe:b2:d7:2d:b2:d3:da:34:82:e5:e0:25:df:
e6:7f:53:4b:e0:a9:9c:c2:35:35:6c:11:39:4a:4e:5f:2e:5a:
66:37:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:39 2026 by rpki-client