
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa
File: 0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa (raw, json)
Hash identifier: ULuNuGSaRoW5cs7amiVEmJNLgLKtmwChx3x/ZDX0H8I=
Subject key identifier: 60:66:26:94:41:EB:44:C5:FF:8C:A3:A9:C6:8B:97:04:F7:A2:8F:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E9BE524976185C6C65F417000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 20940
IP address blocks: 23.41.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:24:97:61:85:c6:c6:5f:41:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=8d22176b-0b0d-4b7e-af81-9a9ecf65206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:06:ef:cf:05:37:98:85:af:0a:1b:70:2d:
15:4f:de:34:3e:a1:01:32:57:41:97:24:2b:3c:43:
e0:7c:d6:d9:ec:d2:df:13:ca:e2:69:6a:e8:6d:64:
48:e1:1d:d6:6f:8b:f9:3f:d9:38:d9:3e:81:fa:96:
ef:57:c4:5e:79:f8:b8:8a:63:7e:3f:f0:b0:9c:f7:
11:51:46:64:50:5c:ba:71:35:08:ab:58:fb:e1:83:
fc:24:98:fb:6a:9c:4c:88:2f:db:2c:0c:17:cd:ba:
7e:b0:b0:01:d8:69:14:04:e2:77:8a:3a:6e:6d:2c:
ee:52:4f:d7:61:da:57:ba:6e:a4:bd:b9:97:ef:2f:
6a:2d:67:e4:32:8f:b0:34:62:e7:cd:c9:40:00:03:
62:7e:7b:7d:27:09:bd:1b:7c:a9:40:fc:00:ad:11:
70:c0:f5:15:10:b4:76:f7:60:ac:df:97:bb:16:dd:
f5:d1:8e:01:8d:a8:2b:ed:ba:71:3f:f9:7e:f9:1b:
8b:da:27:7f:e1:86:0e:0d:d6:2e:81:45:6b:b5:fb:
2c:9b:9d:4f:c5:9d:89:0d:41:d1:be:97:b9:97:a1:
0c:52:07:66:11:6c:98:06:ba:79:97:36:76:f6:a6:
56:32:b0:9d:a7:7c:39:39:26:9e:b6:32:53:82:b7:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:26:94:41:EB:44:C5:FF:8C:A3:A9:C6:8B:97:04:F7:A2:8F:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c7:f0:3d:71:c6:cf:7d:ac:0e:cc:b9:8d:20:47:0d:4e:ba:
de:ad:d1:13:11:5c:64:72:e7:57:c7:2d:ee:93:0b:b4:21:69:
a2:2c:4b:92:26:f8:11:79:22:0c:fd:5b:dd:1f:87:26:48:8a:
8b:08:59:42:d6:33:f7:c0:2c:8f:d4:17:ed:73:a2:f5:a4:ff:
f4:e8:d7:30:42:0b:da:fe:f1:3c:e7:62:c1:42:a1:74:ec:5d:
32:ef:3c:5f:a5:e5:ce:16:64:9c:eb:3c:d3:8b:f9:67:70:32:
37:e2:a5:d3:ba:4a:13:cc:80:e2:9c:fe:f1:61:ea:7a:5b:f4:
62:32:69:8f:1d:6c:fc:77:df:7d:80:02:89:be:31:0d:8a:61:
04:64:ad:75:17:f5:f0:68:30:1a:7f:01:32:ec:7e:16:1e:06:
93:94:10:1b:58:a1:1c:33:ff:f6:4b:fb:da:1e:e9:c2:49:db:
40:c7:91:28:d2:d2:ea:51:e5:9e:3e:30:38:43:b6:c4:19:50:
aa:40:bb:50:24:33:c4:59:42:20:2a:9b:d4:dc:c9:85:83:f5:
5b:2b:90:99:e3:1d:ac:80:d7:bb:8c:32:43:21:8f:08:a5:e9:
24:ca:42:4b:42:56:04:fe:0b:4a:94:db:e8:58:93:08:d8:09:
b4:00:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:41 2026 by rpki-client