
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
File: 06f4cdd6-7003-3d36-8862-8825571ab6f5.roa (raw, json)
Hash identifier: T9lQ5K2spaKyWku9q5rr6LfnM79NTDVncLehYbrFNi4=
Subject key identifier: 34:13:C1:37:CE:1A:1D:FF:3A:9E:EC:09:AA:AB:75:EF:DC:C2:A7:04
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D07AD1E1BA7B518A009BCA5C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
Signing time: Mon 02 Mar 2026 02:00:31 +0000
ROA not before: Mon 02 Mar 2026 02:00:31 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.200.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:ad:1e:1b:a7:b5:18:a0:09:bc:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=de208dc2-9f0f-4d37-a5ee-a0ec872233d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:97:ec:ae:6a:e1:1c:5c:37:2d:90:b2:fc:
8e:69:df:b7:56:a9:e1:7d:24:1d:52:2f:d3:e3:ab:
4d:43:67:b6:45:c5:78:a5:9e:8f:3e:94:b6:94:19:
16:d0:8b:a5:e1:b0:e7:c7:23:6a:a1:1d:39:62:19:
ae:02:f3:23:c0:e1:cd:72:e9:98:c0:ae:f3:c8:b3:
71:93:2b:62:61:52:9b:18:5e:d5:83:25:d1:e5:a1:
49:6d:10:db:00:20:66:df:a4:1e:85:52:ae:21:91:
db:e7:be:7d:c9:2d:d1:e6:e1:fe:8e:ba:a7:d2:b1:
c0:ce:2e:11:4d:4a:27:40:08:64:d5:8a:ce:27:2d:
5e:6a:3f:67:ba:a7:19:7e:63:32:df:d6:4c:61:4c:
a4:6f:5a:a0:24:8e:64:a5:22:62:ec:5a:d3:68:8f:
81:b1:b9:b9:3c:cc:a7:b4:6a:c5:5a:e2:38:e1:b0:
d0:6e:85:d3:9a:82:1e:54:58:bc:b5:9a:6d:d7:9b:
ff:b3:b0:23:4c:fc:a8:54:8a:27:2c:e5:45:5e:64:
0a:c5:59:02:78:fb:05:6f:2c:45:c8:0a:aa:e8:a1:
1f:e5:48:78:3b:6a:d0:00:4e:01:6e:d1:00:5f:8c:
f0:5d:60:bc:d8:e0:fe:b4:08:01:69:b4:cd:33:57:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:13:C1:37:CE:1A:1D:FF:3A:9E:EC:09:AA:AB:75:EF:DC:C2:A7:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:fa:56:62:3e:f2:e6:ac:fb:2d:3b:51:98:f9:8f:89:80:d2:
6c:54:b2:a2:38:68:7f:3c:64:2b:36:9f:24:c0:65:35:60:86:
3c:15:7b:dc:0a:9f:4f:95:f8:3f:ac:97:4d:71:90:40:30:8a:
a5:fc:f6:27:69:c0:7b:fb:21:4c:dd:4b:46:41:f6:41:de:c5:
f7:84:0e:1a:ab:5d:5f:fb:42:c7:a2:f6:11:d4:cd:03:7d:70:
7c:c5:10:9d:19:f4:47:c2:50:94:de:4a:8b:2c:af:2f:58:e6:
5d:23:d9:ca:4c:38:91:62:54:c3:6f:93:b6:d8:3e:b7:2b:b1:
7b:d8:3a:ea:11:1e:d0:7c:b2:d2:fa:6e:55:0c:f2:e4:66:56:
e0:43:1f:23:1f:9d:4e:23:16:9e:fe:22:12:b4:83:e2:ed:c7:
54:03:74:ae:e7:33:f3:d3:10:d2:51:d8:73:11:29:d5:3e:d1:
d4:ff:74:c8:23:e7:71:65:59:f4:97:61:83:49:fd:f1:c8:6b:
bd:6e:84:1f:6a:fa:8d:e2:db:d8:2f:12:40:f5:e8:49:26:d8:
53:43:55:bf:70:61:bb:5b:c5:7d:d7:5e:e7:bc:75:c5:89:82:
49:a5:86:71:fe:a0:38:6f:b8:18:68:0b:59:ea:8c:9b:2d:cc:
92:45:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:02 2026 by rpki-client