
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa
File: 58d18a9d-961e-38a1-898a-cab3732b33e7.roa (raw, json)
Hash identifier: IxirOjFY8HoRPg178/VslrW6KzWHkfj+etkw3UbmUac=
Subject key identifier: 1B:E7:46:20:03:0F:87:0C:4D:B4:22:59:0E:F7:8F:25:9A:46:04:25
Certificate issuer: /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Certificate serial: 010D0C9F4328584F7BB30E6975B06E82ECC636C0
Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 46355
IP address blocks: 23.135.36.0/24 maxlen: 24
2602:f6db::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b3:0e:69:75:b0:6e:82:ec:c6:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=1c5220a3-d74a-47b1-8375-4b134c25e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:bc:70:a3:48:68:a1:a0:04:68:66:c6:37:
fa:9d:fe:c5:08:00:3b:f5:eb:d6:fc:87:4b:8b:e1:
6f:eb:80:f7:73:7c:a6:10:23:bd:18:2c:83:92:a8:
38:e4:c2:0a:6d:52:61:e2:6d:8d:22:79:4b:9c:43:
c9:2c:45:26:7f:54:35:a6:d0:c5:d0:c5:e3:15:15:
cd:ba:68:71:5e:30:f3:3d:9e:68:bb:3b:b1:ca:5a:
96:7c:81:c3:2d:63:3a:0f:88:51:d9:e5:29:a3:48:
49:c9:19:2a:8d:9d:bf:2a:cd:ed:02:97:ca:49:e1:
8e:8c:13:e0:94:41:96:df:4c:2d:d2:50:f8:49:6d:
de:0d:51:c8:e2:ac:1b:89:73:50:4b:4c:13:d7:a3:
69:94:52:38:1f:54:b0:71:55:b1:90:66:84:d3:7f:
48:50:e0:e7:18:cc:89:bf:2b:c1:c1:80:27:fc:61:
19:2a:b6:5a:2c:9d:b0:5f:d6:dc:a3:56:0b:68:db:
54:a6:94:24:8f:77:48:d7:7b:30:6c:74:f8:e5:ca:
dc:02:36:2b:c7:0a:54:31:d9:58:52:98:13:b7:79:
a4:6f:9d:d9:10:04:63:75:89:e8:0f:a2:5b:22:cc:
19:6e:05:6f:cc:65:31:96:30:b5:4d:c5:44:65:1b:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:46:20:03:0F:87:0C:4D:B4:22:59:0E:F7:8F:25:9A:46:04:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/58d18a9d-961e-38a1-898a-cab3732b33e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
X509v3 Authority Key Identifier:
keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.36.0/24
IPv6:
2602:f6db::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:78:0b:33:13:9a:e7:13:e0:e1:12:0a:b2:cc:29:eb:4b:7d:
77:e1:93:b2:b6:33:25:5c:c7:1e:e9:1a:96:7b:76:26:6d:f4:
81:8f:2a:b4:5d:69:ee:bf:40:d6:0f:34:f1:79:51:ef:76:73:
f0:73:3a:ea:bd:7f:f2:8b:6c:3a:8b:e0:a9:2f:08:f0:1a:9d:
5a:ae:f4:73:34:41:6d:d1:46:5b:1b:6f:41:b2:86:d1:5f:80:
e2:5a:59:f5:b1:f7:34:f4:9d:ce:36:ac:02:fa:8c:a7:3b:38:
88:8b:78:2a:a3:6e:1f:b4:b5:12:1d:b4:21:0d:61:90:56:42:
09:b9:d8:b6:9b:be:7b:9c:7f:06:82:d4:f3:31:5e:d8:0d:57:
a9:c6:3f:79:a2:c0:30:bd:35:74:18:44:0c:c4:a0:32:ac:e5:
9f:35:7b:43:0c:29:f8:f7:a7:c0:85:84:e0:45:2f:ad:b2:7f:
b6:27:57:14:e0:b7:47:b2:63:39:5e:1e:c0:27:7a:78:69:77:
90:c4:7f:42:a5:37:b6:e2:9a:6e:7b:9e:8e:76:9c:65:bc:78:
f3:13:da:c2:3d:8d:90:a6:e0:3d:21:de:66:fe:97:e7:2f:54:
34:4c:99:4b:82:7a:b2:4c:a1:9d:43:bd:cd:4d:02:c1:77:f7:
d6:2e:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:03:22 2026 by rpki-client