
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa
File: 1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa (raw, json)
Hash identifier: 3l1cT8tKdFxoe9gzqlJoH5L/tL9dDolt2JP5/vG9yjY=
Subject key identifier: 9A:55:11:45:06:F0:94:50:56:32:31:DB:A5:70:72:22:75:B4:CE:86
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D60E4FF3F9B90678007AA3160
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 35994
IP address blocks: 23.34.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e4:ff:3f:9b:90:67:80:07:aa:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=927a9db4-3c8e-4e28-9f3e-ba1fa1a81ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:55:f2:d2:2c:32:e4:d6:51:3e:72:5f:a9:
9c:9d:37:86:9b:50:c6:0b:5b:e0:42:a5:d9:8b:69:
cf:00:40:44:d1:82:71:e0:fb:21:36:ea:a2:34:bb:
bb:7b:0b:2c:bb:ff:c8:db:15:ee:77:52:d3:ba:ce:
6c:dc:fa:d6:ef:b7:f7:6f:95:75:44:be:8f:42:36:
6f:7e:26:ae:44:3b:9b:93:50:99:72:c6:99:1f:6c:
67:1e:3e:24:fd:15:dc:60:23:4f:06:03:62:de:1f:
bf:fb:bf:73:a2:d0:2c:74:90:b2:12:06:bf:5a:9d:
d4:d0:66:02:e4:4d:93:ab:ee:73:d1:f3:49:e1:c7:
e9:66:72:7f:4c:1e:30:9e:06:0c:dc:19:74:95:7c:
cd:63:dc:58:50:c5:ea:bf:d8:c0:96:ea:00:98:5d:
6d:c5:92:10:69:5e:2c:03:77:3b:2c:29:06:58:19:
34:df:32:f6:52:0e:f6:30:94:03:9a:58:6e:f6:19:
ca:3f:2f:78:c9:96:e3:b6:fd:19:b6:d8:04:eb:7d:
7a:8e:62:9b:e2:a1:c1:1b:c6:e6:67:70:12:1f:fe:
cf:f0:26:37:f7:03:d2:ce:0e:75:6f:21:8f:40:63:
d0:55:1f:6f:e6:89:65:3f:ea:76:30:87:3c:76:97:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:55:11:45:06:F0:94:50:56:32:31:DB:A5:70:72:22:75:B4:CE:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9d:31:fd:2f:d6:27:3e:1c:13:d4:41:62:0d:e6:4c:de:3e:
dd:00:cb:f5:fc:be:3c:7e:33:03:90:d8:a5:fe:35:1c:34:7d:
2a:03:7b:ca:5b:b1:7d:5e:04:49:96:73:12:de:04:d8:ee:bf:
bd:89:85:03:07:62:2e:0e:b1:b8:cc:33:b0:55:74:d6:6a:d4:
27:79:df:cf:7e:61:85:37:e5:1a:4c:1d:01:81:31:72:9d:ba:
8e:f0:76:ca:24:0c:67:d2:94:f5:47:50:33:35:92:50:42:21:
97:4e:6c:c2:80:55:24:0c:da:13:19:d6:17:c5:42:04:3e:9e:
37:19:b3:cf:e7:75:d0:11:8c:b4:dc:17:43:ed:cc:0f:d8:d8:
68:21:45:95:fd:ec:ca:12:59:d9:8f:f9:e3:02:2c:f9:06:2f:
07:7f:33:eb:17:4d:54:0e:88:80:2a:8f:36:8c:9a:e6:6d:1d:
a0:5b:ce:db:f3:82:04:a1:54:cb:55:ce:21:50:1c:e2:e0:80:
3e:22:1d:2e:b6:bb:1e:12:72:32:99:0c:6a:8a:3b:4d:a4:99:
0c:33:0c:a8:5a:b9:57:2c:13:f7:10:01:c8:09:d4:6c:a6:08:
8a:4e:8d:28:41:cd:ed:d0:12:92:32:54:21:96:73:27:58:7b:
2c:20:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:20 2026 by rpki-client