
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
File: 60b15d2e-704c-3568-abdb-f630f5163896.roa (raw, json)
Hash identifier: INMn+qwuPOT9J34uW+JBLmehpCJe+iLKPC3qxpcbX1Q=
Subject key identifier: 5D:6E:85:AA:1E:78:60:5B:65:73:6E:03:2A:D2:82:2D:6D:22:E4:8F
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584CD99CC603FDE82A6D97FB9D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 22898
IP address blocks: 8.28.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:c6:03:fd:e8:2a:6d:97:fb:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=1470f0a2-5001-402a-9518-efcc4bd2f94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:c3:2a:5f:1c:b3:23:f3:43:92:86:78:9a:
5f:44:95:80:b1:08:64:1e:08:d8:c7:99:e7:4b:d3:
2a:cc:db:0d:ec:62:ec:39:69:e3:bf:13:c3:43:4d:
d3:9e:b3:15:27:49:61:c1:90:38:51:83:7c:f7:8a:
84:4f:9e:9d:7a:22:5c:ce:80:83:53:01:c5:37:8c:
9a:69:cf:b3:e7:f3:11:d2:d6:99:c7:a9:4d:59:cf:
bf:69:49:4f:a8:a5:ff:1c:3e:12:ef:24:c9:94:2a:
6a:cd:c5:2e:6e:6a:11:ee:98:b9:e8:94:8f:77:3f:
89:11:76:18:7d:2f:fb:c4:6b:fb:7d:da:f9:53:36:
b4:bb:02:83:42:72:76:4f:2f:b0:f0:23:85:4e:35:
31:88:23:dd:19:40:f8:c2:a7:5b:fb:f1:a0:c9:e4:
86:9e:fe:ec:7c:e1:81:ff:c2:e7:e8:28:f1:cf:4b:
26:76:9a:dd:bb:46:08:6a:5c:3c:82:25:67:3c:6e:
7c:bd:0b:8c:e5:d9:ec:e8:98:1c:36:2a:a1:c3:3d:
5e:6e:fa:6d:c8:54:a9:c2:10:6f:aa:ce:51:74:d7:
7c:9d:54:0e:3d:cb:ac:21:a3:81:63:90:d1:0a:1e:
68:50:dd:ce:00:03:9b:8b:83:7f:c2:fe:b1:ac:77:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:85:AA:1E:78:60:5B:65:73:6E:03:2A:D2:82:2D:6D:22:E4:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.28.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:1d:61:99:57:fe:a0:6a:25:f5:19:a0:07:1a:3c:fc:1e:23:
29:ef:a4:39:1e:fc:e0:a4:34:a5:8c:26:06:3f:cb:c7:fe:b7:
4b:6f:39:a8:a6:24:1c:9c:e3:23:fa:c5:1b:40:dd:ae:b2:47:
d7:88:77:6b:ea:64:e7:53:63:da:ab:f9:69:c0:4e:9a:cc:0f:
5e:83:b0:f2:8b:f3:61:7b:25:46:25:97:0f:dd:1f:6f:e7:72:
3d:c4:ec:b8:2e:60:22:b5:e0:f0:38:94:63:f5:5b:36:7b:b0:
05:14:e5:57:ab:43:38:63:a4:77:86:7a:78:ff:4d:14:08:1a:
1e:43:26:d3:0e:90:7a:81:04:c3:6c:af:76:c4:73:52:4c:e1:
b0:27:00:35:8c:f9:96:4b:9a:fe:a7:11:49:74:e9:0f:a0:1b:
33:58:46:e6:a9:57:2f:ec:b8:84:4f:85:cc:73:4e:43:96:56:
0a:58:a3:52:b7:8d:c5:8a:68:2c:75:d6:94:68:d4:14:62:f9:
b0:35:86:f8:19:f6:06:51:a5:f1:4f:b8:f0:f9:4b:af:f1:bb:
53:46:a0:50:63:a4:2f:b1:ed:32:50:c5:2a:31:f3:e7:fa:fb:
16:30:48:f3:97:9f:79:e5:17:b0:be:2f:dd:bd:0e:a4:a9:40:
d7:eb:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:16 2026 by rpki-client