
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1e407d-9158-3064-93da-40b25c68697e.roa
File: 1e1e407d-9158-3064-93da-40b25c68697e.roa (raw, json)
Hash identifier: SFCe6OljTbC7XLQclJVyh8SsAV5FrZ8eCzyR5oRZWVQ=
Subject key identifier: 6D:FF:27:62:69:47:1B:AA:33:02:57:BD:50:8D:9B:E8:36:77:55:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CDB0223FD7883B980F1E08240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1e407d-9158-3064-93da-40b25c68697e.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 20940
IP address blocks: 23.36.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:23:fd:78:83:b9:80:f1:e0:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=ce560a1d-40c0-47fe-b7a2-f6c52afdf6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:1c:1a:0c:75:c1:f4:73:c0:08:fa:2c:a5:
94:d8:fb:3b:6f:cf:9b:11:27:dd:84:59:3a:1a:24:
07:c4:09:d4:c4:44:d2:d1:a8:ca:79:67:28:55:a7:
bc:69:d3:bd:6a:64:4f:3c:cc:0c:43:3b:85:97:bb:
c9:7d:26:5e:df:8c:0e:0f:b0:38:6d:cd:17:a4:7c:
fe:c6:d8:48:d0:f0:f6:47:ec:f6:63:1d:37:46:b2:
1a:12:ad:c5:8b:b9:76:d4:5d:73:cf:ca:ed:24:d1:
77:ad:66:64:13:2b:d2:d6:0c:80:db:06:4e:ff:97:
5a:44:80:2d:d8:d2:18:cb:44:8b:b8:e8:c4:5a:7f:
a8:69:a5:a1:a3:29:78:70:52:73:85:95:20:65:1b:
b6:16:61:f3:1e:71:ed:5c:68:ac:18:a4:ba:ac:44:
ce:0e:c9:a7:88:d2:0c:ee:93:14:2d:f5:e2:cd:58:
49:f2:79:78:5e:e5:15:93:a1:4a:50:e6:60:c3:e0:
02:4a:09:53:c8:72:43:43:ec:26:9b:03:46:11:78:
fa:ea:d2:90:49:b5:85:2c:97:ad:9a:62:24:69:44:
94:78:0e:69:16:36:2c:dc:3d:c4:aa:e8:c6:11:f9:
a7:f8:78:49:0e:4e:e5:5c:97:03:e5:86:79:15:c5:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:27:62:69:47:1B:AA:33:02:57:BD:50:8D:9B:E8:36:77:55:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1e407d-9158-3064-93da-40b25c68697e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:04:68:84:08:8a:9e:6e:af:55:6f:66:71:2d:32:ec:3d:91:
b5:b5:ae:2f:af:15:19:5d:f2:78:e0:0a:bf:17:56:bf:c1:9c:
56:44:b5:77:5f:af:71:e0:3d:66:0a:ef:36:78:3f:85:e5:26:
9d:3f:36:63:2f:ce:3c:41:80:cc:b6:c1:e3:1c:a1:a0:73:3b:
b2:5b:95:3d:cd:ba:c9:68:d2:7c:8e:0d:c0:21:10:bf:0c:1e:
c7:54:a5:4c:3b:92:a3:17:88:d1:9d:eb:e1:cc:26:07:4c:a2:
8c:d7:9e:e4:d8:bd:6f:61:ac:32:ee:d7:2b:50:96:74:bf:11:
89:f5:3a:ae:b5:7b:bf:3c:9a:a0:1b:96:eb:96:8c:76:16:07:
a0:e6:35:bd:73:d4:eb:05:31:18:d6:c9:06:1d:f7:fa:2f:a3:
ef:dd:a2:81:79:5e:b2:14:68:b1:ea:52:a0:32:3e:70:dc:90:
3e:25:3b:0b:84:b4:1e:f7:a4:be:66:e2:2a:e0:4c:d3:78:bc:
2e:8a:2b:d8:99:7b:21:78:7d:00:1d:3d:f6:04:11:7e:e1:da:
9b:60:12:67:1c:c9:18:8b:ce:c7:04:5d:a2:dd:24:61:e9:67:
2e:00:f0:2f:74:b7:c0:b0:de:5c:e3:b9:7e:4c:10:60:38:8a:
90:c2:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:31:18 2026 by rpki-client