
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa
File: 4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json)
Hash identifier: BlDifN/y/uRgNYw1SYwLbh6nl/+fPFOmotV/vIgBu9Q=
Subject key identifier: 92:59:21:F8:4D:F8:C3:6D:16:97:E5:9C:8E:EB:00:78:28:7E:BE:0F
Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial: 010D0C9F4328584D2A74E62492BF18BD8488A760
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 61112
IP address blocks: 23.158.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:e6:24:92:bf:18:bd:84:88:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=a05236fc-3e74-4c1e-a08e-bd39d20fae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:99:a5:99:8a:bd:84:14:ca:fb:ae:06:90:
48:7f:09:c7:c0:71:06:1d:db:11:5d:f2:38:1a:cb:
60:fc:e9:eb:cc:64:06:d8:5e:ee:af:51:74:5e:bd:
b1:82:9b:c1:c6:b8:bd:04:70:f8:d4:80:2c:6e:42:
ef:26:b4:00:16:24:7f:56:03:f8:35:8d:ff:82:8c:
c9:06:08:ca:9f:fe:81:a8:93:07:c7:f4:1e:71:bc:
51:93:3d:4d:e3:08:28:ef:ab:5f:be:eb:87:97:bb:
01:d4:96:c8:1f:88:a4:58:4e:c2:df:28:92:32:23:
fd:49:da:61:09:75:a5:ad:ab:14:41:51:33:b8:1e:
e3:27:6b:e1:df:cc:b9:ca:58:e6:03:bd:3e:da:40:
4f:15:c8:e5:df:5b:e3:33:96:64:8b:98:14:f4:21:
2d:ce:dc:db:09:40:86:9c:dc:c4:c5:94:f3:27:cc:
70:12:ae:7b:90:b0:91:5f:46:fe:22:ae:72:06:ad:
76:cc:56:fa:b8:82:36:18:b3:c4:16:a2:ce:06:b9:
d3:d2:8c:d7:83:48:7a:07:02:34:3a:26:97:92:3d:
ac:40:e0:ad:76:fd:56:a9:ee:47:e2:f2:28:00:8a:
2c:2d:9e:3c:fe:a1:49:29:f1:ea:63:9b:63:d1:eb:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:21:F8:4D:F8:C3:6D:16:97:E5:9C:8E:EB:00:78:28:7E:BE:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
X509v3 Authority Key Identifier:
keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:96:40:e5:88:1c:b3:0f:3b:5d:f2:2b:41:5a:f3:50:5c:db:
1a:a2:9d:48:27:17:b6:a8:54:14:42:02:36:b4:f2:4e:fc:5a:
d4:2c:f4:20:79:2f:4e:12:0a:b0:08:32:ec:a0:ea:a1:3e:43:
27:8a:ab:91:b1:75:fd:63:58:36:c1:c3:db:c5:b4:a5:45:fd:
b4:f1:fb:65:67:77:1e:15:c5:71:ef:5b:45:1e:a8:34:18:4d:
0e:9a:9a:47:7d:0c:d5:2c:2f:3f:f0:db:2d:52:4b:d2:e2:0d:
09:c0:00:e4:c1:c4:aa:b0:92:a2:1f:a3:94:5f:e9:17:9a:88:
a1:87:e8:67:7e:c2:ea:ba:26:03:d7:ec:a1:38:25:b8:bb:bc:
a9:a4:64:6c:a1:3e:be:aa:66:9f:98:ac:49:b5:a7:3f:68:20:
c5:8f:28:66:14:0f:55:ed:e4:27:4d:f7:98:c4:9c:3d:c9:1c:
16:57:3d:10:da:98:fb:c5:6c:90:9d:69:fc:9a:8f:29:ce:53:
b6:05:c9:4e:77:ed:8f:a8:d5:27:7f:62:a4:05:2f:86:a9:78:
7a:82:e1:39:a9:16:0c:92:f1:25:93:e5:02:1b:31:fa:14:22:
90:ee:a7:99:69:ce:87:06:8b:d8:c8:7c:9a:51:ef:b6:46:a1:
fd:c1:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:43 2026 by rpki-client