
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa
File: 58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa (raw, json)
Hash identifier: t0yKYaqzu7fCESC6yL+1ZapY/oKymCIywRZwe+ecX3g=
Subject key identifier: 2F:52:2F:5B:FD:D5:CD:2D:AF:C1:51:A2:C4:E2:7F:3E:8E:19:13:59
Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial: 010D0C9F4328584EF717B923820F931BAB603B40
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa
Signing time: Wed 26 Aug 2026 13:00:12 +0000
ROA not before: Wed 26 Aug 2026 13:00:12 +0000
ROA not after: Tue 24 Nov 2026 14:00:12 +0000
asID: 40065
IP address blocks: 23.154.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f7:17:b9:23:82:0f:93:1b:ab:60:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Validity
Not Before: Aug 26 13:00:12 2026 GMT
Not After : Nov 24 14:00:12 2026 GMT
Subject: CN=8a9933f6-4140-4eca-9e25-fc9f5f5980d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:25:ea:4f:20:86:58:96:c5:50:74:3e:41:
03:32:65:e0:db:ff:d9:17:1a:70:60:74:89:79:98:
b4:97:54:6e:63:c6:50:4a:f1:5d:7d:31:b2:a5:69:
91:7a:6d:30:a9:b8:19:35:6e:89:26:15:02:de:53:
1b:44:f6:ea:60:7f:ad:e6:19:58:85:d8:ab:6c:90:
e6:5d:2a:ff:d7:e9:e7:d6:aa:b6:4f:f6:ca:46:d7:
92:f6:67:47:36:9f:a8:16:bf:da:91:74:cc:cb:36:
32:32:65:50:4a:e0:7b:74:0b:66:95:2a:36:c3:2d:
65:15:6f:08:89:1a:da:b4:38:4f:78:4f:28:69:3d:
54:73:d2:00:3f:df:b0:ae:74:fd:73:97:91:9e:7e:
c4:d3:66:d1:8f:db:8a:15:37:cd:88:86:81:73:b7:
eb:dc:24:24:fd:c4:f5:52:d2:0d:77:2e:d0:76:44:
14:0c:33:d8:28:1b:7a:e5:3f:5c:c3:00:de:75:f9:
87:1a:ef:7d:b5:ee:7a:b1:83:bb:32:d3:92:a2:58:
db:ad:86:41:02:54:7f:68:88:48:d4:87:ee:b4:99:
38:fb:1b:f7:81:92:7a:4f:80:48:0c:50:fe:04:b9:
f5:b0:82:8a:86:68:0d:b0:23:8f:c9:90:44:d7:83:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:2F:5B:FD:D5:CD:2D:AF:C1:51:A2:C4:E2:7F:3E:8E:19:13:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/58cd8b8a-7084-3970-a73c-bba5a474d7b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
X509v3 Authority Key Identifier:
keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a6:d5:5f:39:b1:20:bd:88:b1:dc:83:36:23:62:60:29:1a:
9d:41:05:54:61:b2:a1:33:79:ca:c7:98:12:67:3c:18:e3:c2:
00:7f:e1:f8:63:38:8b:85:05:e2:41:4f:f8:a1:b8:11:e0:e2:
ef:d2:bb:a5:80:e0:08:c1:5b:49:1e:a8:3e:9e:f1:06:2a:d4:
23:d6:68:49:ac:c3:a6:33:3f:0f:7c:d0:dd:1c:48:de:c9:04:
bf:f4:d9:fc:41:a8:21:09:25:f5:64:04:43:9f:df:21:b9:9d:
81:4b:34:ef:19:ea:c3:42:e2:a8:08:bb:7d:04:2c:54:1e:92:
bf:c7:bf:7a:57:48:ab:99:93:39:e6:67:6c:87:9e:bc:1e:06:
b8:3e:3b:9d:03:2e:90:16:68:62:55:8c:c0:5b:84:6f:d8:37:
4c:2d:f2:cb:39:22:d8:04:9b:c3:c4:0f:ed:60:3e:fe:2b:be:
d8:87:b6:ef:17:a8:99:d4:8f:07:70:bd:4a:45:73:71:c0:e8:
32:51:bd:0a:03:91:d0:57:d2:bd:31:40:e4:b9:27:cc:9c:17:
8c:f0:b8:63:65:29:ea:f9:1f:09:61:8a:f7:5b:3c:80:60:2e:
23:61:c8:ea:d6:68:3b:35:a3:61:0e:d2:d6:fe:84:dd:bb:dc:
01:a6:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:33:31 2026 by rpki-client