
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa
File: 0138db54-46af-32ca-ade4-a4af233fb028.roa (raw, json)
Hash identifier: bdoZzNZcO9uMXuFFvBBvBgNTzoA+jTurDda2fGr5fvI=
Subject key identifier: A1:79:B9:2D:C1:88:DB:72:4B:CF:C4:E7:AB:03:AA:30:44:26:FD:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F3FAD4AC6CAFA439A064E2ABA
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 20940
IP address blocks: 23.43.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:4a:c6:ca:fa:43:9a:06:4e:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=1ca00e7d-d744-4d7c-ba42-b14d0492dea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:c7:88:c2:24:f5:ef:4d:f3:fe:4f:f9:2e:
6d:7d:4f:94:f9:c5:da:19:f1:e5:de:7b:0b:1b:47:
ee:29:b7:79:2e:87:a4:09:cc:ee:3f:ab:9c:5b:69:
8c:0e:e1:dc:fc:e2:6d:fe:fd:7d:f0:c4:cf:75:fb:
56:13:d6:81:db:24:2c:30:58:fe:03:00:53:b2:19:
e2:df:6f:fc:7c:e5:f6:b7:81:ba:3f:16:7f:d1:0b:
db:d3:f8:35:7a:b3:77:2a:c6:91:19:17:79:9b:f3:
a4:ca:89:95:77:58:5c:57:11:62:84:d2:08:9b:52:
36:0a:eb:7e:27:ba:1d:a6:5a:9e:4e:9e:34:61:58:
8b:78:c9:b9:90:8a:a6:26:b5:4e:c6:ea:1d:f0:02:
bf:e0:44:70:bd:db:8f:e1:12:fe:30:f1:ff:93:3b:
1f:5e:d7:82:bd:7a:97:4d:22:26:e2:14:e8:42:b5:
ce:28:78:47:37:da:50:1f:ce:f6:f2:35:80:7c:1c:
41:f5:6a:e7:f6:6e:6d:6e:7c:fd:d7:ed:e3:4d:3c:
1f:0d:35:56:1b:ca:c2:e6:3c:85:64:52:51:1e:b1:
94:1a:24:ab:83:65:14:9f:3e:19:9c:4c:ac:0e:12:
8f:83:44:4a:75:9c:f4:a6:28:b8:ed:60:29:3b:35:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:B9:2D:C1:88:DB:72:4B:CF:C4:E7:AB:03:AA:30:44:26:FD:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0138db54-46af-32ca-ade4-a4af233fb028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c8:cc:60:b3:26:c2:c0:77:0a:c4:a4:83:0c:48:28:ed:2d:
5a:79:2b:bb:8a:0f:99:76:f7:c8:48:0e:88:8c:06:5b:ff:95:
b1:db:3a:5c:fd:96:37:c8:93:02:51:05:bd:f4:bd:52:5f:4b:
49:a0:9f:58:48:91:e8:7e:31:6d:b9:f8:93:6f:88:4a:ee:55:
dc:8e:46:9c:b9:0e:be:49:fa:ea:26:66:8e:99:8c:5d:2a:bd:
0e:54:51:21:32:f8:9b:dc:40:38:f6:29:68:25:9e:bc:84:82:
5f:41:13:b1:87:4e:1d:c6:bd:58:64:76:1b:70:3c:aa:fe:0c:
49:e8:3d:23:d7:42:e4:df:f0:30:0c:f1:41:1e:5e:55:c2:a4:
b9:39:66:c4:ee:8e:d5:f9:98:ba:88:57:51:9d:47:7d:e7:96:
38:0f:c8:c7:f8:77:fc:5d:9b:e1:2c:8d:7e:4c:e6:f6:8e:cf:
f0:76:c2:14:15:a0:59:89:66:b9:3d:0d:f7:a2:20:f1:e5:16:
10:37:89:73:e2:d0:fb:b9:96:c3:23:3d:f7:b6:e5:30:ba:ae:
e9:2c:e9:03:7f:70:7a:20:39:45:a1:8b:c8:db:89:eb:a7:36:
a9:06:85:fe:68:3f:ae:8e:98:ed:6c:53:ab:dd:d6:15:26:eb:
71:f5:03:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUrGyvpDmgZOKrowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
MWNhMDBlN2QtZDc0NC00ZDdjLWJhNDItYjE0ZDA0OTJkZWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3HiMIk9e9N8/5P+S5tfU+U+cXaGfHl3nsL
G0fuKbd5LoekCczuP6ucW2mMDuHc/OJt/v198MTPdftWE9aB2yQsMFj+AwBTshni
32/8fOX2t4G6PxZ/0Qvb0/g1erN3KsaRGRd5m/OkyomVd1hcVxFihNIIm1I2Cut+
J7odplqeTp40YViLeMm5kIqmJrVOxuod8AK/4ERwvduP4RL+MPH/kzsfXteCvXqX
TSIm4hToQrXOKHhHN9pQH8728jWAfBxB9Wrn9m5tbnz91+3jTTwfDTVWG8rC5jyF
ZFJRHrGUGiSrg2UUnz4ZnEysDhKPg0RKdZz0pii47WApOzUOxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF5uS3BiNtyS8/E56sDqjBEJv36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDEzOGRiNTQtNDZhZi0z
MmNhLWFkZTQtYTRhZjIzM2ZiMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyszMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvIzGCzJsLAdwrEpIMMSCjtLVp5K7uKD5l298hIDoiMBlv/lbHbOlz9
ljfIkwJRBb30vVJfS0mgn1hIkeh+MW25+JNviEruVdyORpy5Dr5J+uomZo6ZjF0q
vQ5UUSEy+JvcQDj2KWglnryEgl9BE7GHTh3GvVhkdhtwPKr+DEnoPSPXQuTf8DAM
8UEeXlXCpLk5ZsTujtX5mLqIV1GdR33nljgPyMf4d/xdm+EsjX5M5vaOz/B2whQV
oFmJZrk9DfeiIPHlFhA3iXPi0Pu5lsMjPfe25TC6ruks6QN/cHogOUWhi8jbieun
NqkGhf5oP66OmO1sU6vd1hUm63H1A2Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:19:17 2026 by rpki-client