
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
File: 35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json)
Hash identifier: yj2SE6hU4GklzQZEVTdvTb0LZg9e17jy+n+F2fgQGfA=
Subject key identifier: 53:37:C6:9A:9E:2E:1D:56:4A:A5:78:42:74:F7:41:83:AC:EE:BD:B0
Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial: 010D0C9F4328584B6A61F0FD42D3671A3E1B2800
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
Signing time: Sun 05 Oct 2025 01:00:32 +0000
ROA not before: Sun 05 Oct 2025 01:00:32 +0000
ROA not after: Sat 03 Jan 2026 02:00:32 +0000
asID: 14618
IP address blocks: 52.128.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6a:61:f0:fd:42:d3:67:1a:3e:1b:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
Validity
Not Before: Oct 5 01:00:32 2025 GMT
Not After : Jan 3 02:00:32 2026 GMT
Subject: CN=d817c902-a84a-4326-8b89-58acaee14268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:0b:8d:09:a2:30:4f:56:e6:21:16:60:eb:
81:44:fa:b7:83:13:e1:71:82:1b:4c:8f:db:c5:f8:
cf:69:71:12:b1:c7:bc:4a:61:91:39:c3:f9:41:78:
13:56:7e:66:96:40:8c:c0:ca:c1:5e:24:4f:74:02:
be:7d:b5:ed:00:80:54:ee:00:77:68:e7:a6:42:10:
3d:f5:11:66:14:d0:ca:81:ce:7f:c9:e5:c3:25:94:
50:dc:f8:88:c9:d5:ae:fe:09:f2:50:a4:9c:84:9f:
77:48:64:2e:fe:59:77:c8:17:be:55:e5:2d:9f:b1:
ef:02:15:55:4b:1a:8f:39:75:76:7c:21:67:8b:b6:
2c:61:38:b3:e1:1a:ea:7d:d5:1e:db:f7:92:e2:a1:
c3:08:23:62:37:fb:2d:17:92:5c:5a:e6:1d:10:53:
5d:3e:2f:46:47:65:de:3a:47:90:58:33:ec:ec:69:
c3:56:dd:b5:ab:57:15:41:8a:b8:86:f0:a2:e1:84:
a1:80:ec:43:88:c8:09:99:9c:05:d7:40:87:7c:c1:
e5:f5:d4:ed:78:ba:21:6d:fc:b6:ec:2b:14:9a:e2:
e6:a7:d9:03:6b:f5:87:25:b5:1d:10:95:41:98:9d:
6a:98:84:01:9c:e3:f2:a4:0b:43:1d:2f:a1:35:cf:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:C6:9A:9E:2E:1D:56:4A:A5:78:42:74:F7:41:83:AC:EE:BD:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
X509v3 Authority Key Identifier:
keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
52.128.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d9:3b:5c:42:a8:a6:11:86:03:34:2c:57:03:5e:37:fb:f9:
61:44:6d:b7:89:9f:50:ef:52:f4:e4:43:78:89:11:1e:76:1c:
f0:43:2c:bf:1d:70:f5:78:88:0f:5f:b5:5a:32:36:7f:d2:c9:
64:69:76:86:53:ac:08:5e:97:67:4d:a1:a6:cc:50:bf:42:54:
06:e7:83:8c:f9:73:9a:11:cc:2a:85:c6:5e:4a:60:c7:6b:b5:
87:e1:c0:32:6f:bf:6f:f5:43:87:6b:bb:cf:45:33:d4:16:38:
f3:4c:04:79:dd:2c:b8:da:f6:da:ff:07:ee:ef:86:f8:5d:1c:
ca:dc:ea:25:25:08:6a:52:5f:2f:06:5e:a7:7b:d2:30:a6:94:
a3:e3:2f:0d:68:d8:39:9f:29:9e:69:33:90:2d:b7:fd:b0:fd:
c3:9e:8d:fc:9b:cb:86:86:cd:9e:10:4c:e5:0e:6e:62:73:b6:
af:f1:f8:fb:2e:83:60:83:ee:42:e0:8d:1c:1c:8c:fd:0e:d7:
ed:ef:ee:95:a9:80:dc:6e:55:9c:25:a2:9e:45:01:e1:1f:d2:
6b:26:ed:14:64:e2:d5:a5:c3:ad:9d:cb:91:99:ea:a0:2e:9b:
33:31:75:42:e8:65:24:ca:ef:91:0e:12:79:2a:91:7c:60:8e:
51:4b:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:57 2025 by rpki-client