
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa
File: 78db96eb-dc86-30f9-98ed-587913865074.roa (raw, json)
Hash identifier: lIaC0dG2eHqJMKfzkHg60zZiUX659PaYBZwH414aoE8=
Subject key identifier: ED:68:AB:E3:3E:BF:8D:55:7C:51:6D:6C:66:F6:40:DB:38:DC:90:5D
Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial: 010D0C9F4328584E11B4307187D6D09B9FB90200
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa
Signing time: Fri 05 Jun 2026 09:00:12 +0000
ROA not before: Fri 05 Jun 2026 09:00:12 +0000
ROA not after: Thu 03 Sep 2026 09:00:12 +0000
asID: 136787
IP address blocks: 138.128.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:11:b4:30:71:87:d6:d0:9b:9f:b9:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
Validity
Not Before: Jun 5 09:00:12 2026 GMT
Not After : Sep 3 09:00:12 2026 GMT
Subject: CN=69efe5f2-c673-40ab-bbf1-a78f5ff299fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:31:1a:b0:62:ab:1b:7c:de:35:f6:a6:34:
5e:3b:54:15:12:5c:a8:9c:d7:7b:e1:be:27:5e:47:
58:bb:27:18:08:fe:fc:e9:f8:fd:6e:02:4e:7a:4d:
9a:55:1a:83:78:4a:72:ec:72:b0:87:0c:93:74:5b:
1c:55:de:72:26:0b:32:c9:fc:36:ee:eb:10:5a:04:
c4:70:87:e8:a6:58:11:02:25:bf:db:64:00:f5:db:
88:a7:e2:a3:b7:2b:d9:19:17:25:74:c3:b4:80:6a:
81:de:2a:43:1d:c8:05:30:05:90:3c:fb:61:a2:6a:
35:98:2b:61:81:5b:9e:96:14:f7:6c:75:28:2c:58:
7d:98:7c:31:47:ac:57:30:c5:22:9d:55:d9:be:87:
76:82:b5:0f:16:50:7b:18:44:30:0f:03:2f:e1:4b:
09:f7:7b:6e:a3:76:bb:8c:a3:36:47:f1:58:ee:71:
25:94:d5:d5:73:a1:76:06:66:e5:5f:fb:70:af:7b:
f9:62:77:12:56:b3:24:db:cd:9b:cc:10:34:7e:8a:
ea:ec:9a:ea:98:61:92:14:07:e6:ad:ad:0d:3f:c7:
ab:0e:ef:b6:72:45:84:fd:c0:b5:3c:f0:d7:e5:19:
a8:f8:fd:c6:3c:58:fc:07:2d:16:7e:f8:50:91:78:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:AB:E3:3E:BF:8D:55:7C:51:6D:6C:66:F6:40:DB:38:DC:90:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/78db96eb-dc86-30f9-98ed-587913865074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
X509v3 Authority Key Identifier:
keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.128.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:1c:f7:ec:97:00:dc:2d:6e:c2:3f:2e:a4:7e:26:7a:69:b1:
98:d2:2a:9e:76:67:8b:82:8c:4b:92:ff:89:cb:d5:16:7f:d4:
d1:c2:be:1e:b1:22:c3:33:08:43:0c:d0:c1:15:7a:94:53:95:
11:7d:15:f8:4f:ac:44:55:f3:44:89:c4:eb:87:d5:ef:15:81:
0f:26:80:07:9a:ff:74:a5:7e:b4:9d:d9:a1:10:d6:30:e1:df:
13:72:61:2b:66:54:41:c8:4a:56:8c:f6:2b:2b:10:c6:65:d7:
99:81:7e:e0:c4:77:ed:f3:68:be:a5:d0:0f:59:f8:60:7b:d1:
38:46:9e:67:1c:a5:c1:65:74:b7:ba:ac:07:43:a9:cf:4e:fa:
ed:26:77:3d:41:77:9d:b4:ee:78:2d:d1:52:5a:5d:79:2f:e2:
c0:3a:c1:91:f7:40:b3:a2:93:f0:5b:70:25:4a:d5:ec:96:8e:
a5:ce:b3:59:80:34:6d:e0:67:88:6f:e6:51:06:d7:38:3a:0c:
8a:d7:8f:f3:01:2b:62:77:6c:09:57:7b:5f:34:29:49:6a:15:
fa:8c:cd:10:50:25:fa:cb:f2:c8:82:b0:f1:17:9f:71:60:69:
19:34:9a:39:14:3b:5d:42:8a:c8:d3:55:70:10:53:3c:d8:ca:
b3:e3:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:04 2026 by rpki-client