
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3088f3-35b7-3b36-980d-d50598adbf43.roa
File: 1e3088f3-35b7-3b36-980d-d50598adbf43.roa (raw, json)
Hash identifier: uH/98XlfifrIFhsHP7NfZMcaecdL2B5GbL9cAZp8swc=
Subject key identifier: F8:1D:54:CE:45:27:53:75:B8:75:4D:A9:8D:10:9C:87:0C:46:DC:26
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D60E50344888156C246B35580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3088f3-35b7-3b36-980d-d50598adbf43.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 16625
IP address blocks: 23.221.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:03:44:88:81:56:c2:46:b3:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=d5324a72-da8f-4d6f-8682-679333eff3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:38:c2:08:f4:f8:e0:7b:28:d0:85:7b:a1:
7a:9b:15:73:ac:cb:60:d0:c1:dc:17:c4:34:6e:94:
0c:a2:95:b7:61:61:6f:8e:da:04:79:37:c4:41:f9:
3a:12:e2:d9:00:94:fe:65:c1:ba:91:c3:dd:1b:5f:
2a:27:eb:37:d3:f9:7d:1e:4f:47:c1:87:e4:29:e2:
25:7c:e8:22:18:0e:a3:de:c2:2f:48:a8:d7:a4:84:
7a:e2:9b:62:ff:1b:0c:0f:4b:f6:e6:bb:dc:54:22:
2e:53:5f:cd:63:8a:13:5f:b2:33:b1:6b:05:87:80:
78:15:ce:a1:e2:a7:c5:56:a5:c0:44:e5:61:f1:27:
f3:d2:0a:5a:95:6c:7d:65:7f:28:c3:e8:41:1a:fc:
b8:93:a9:61:31:48:5c:11:b2:6c:ee:87:8b:5b:f2:
0a:0a:14:e3:69:8a:09:c6:38:6f:6e:29:33:fc:55:
f6:46:0e:68:37:7a:0a:c4:32:1b:e1:d9:6e:67:ad:
1e:26:7f:7a:fe:71:f2:bc:51:25:eb:0e:a5:f1:65:
11:35:a7:a5:71:90:6f:ba:69:db:0f:5f:3b:91:5b:
1f:b3:2e:25:de:73:ff:f3:0f:4c:92:eb:df:fd:f0:
8b:d1:70:69:98:3f:73:38:7a:d5:1e:f2:3b:ca:f8:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:54:CE:45:27:53:75:B8:75:4D:A9:8D:10:9C:87:0C:46:DC:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e3088f3-35b7-3b36-980d-d50598adbf43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f7:ee:67:58:86:f8:d4:ab:80:00:97:c5:a8:fc:7c:79:db:
3f:06:cd:97:5b:c7:04:57:03:3d:fe:38:16:d7:17:1d:02:c4:
28:15:90:a1:53:6e:1d:32:ef:d9:fa:83:06:11:61:8f:d9:d1:
14:cd:89:50:2d:96:8d:51:0a:2c:22:b4:63:05:79:72:1a:e4:
04:34:4f:36:3b:5d:2b:eb:61:6e:14:b2:ca:1c:b5:11:27:49:
70:a9:02:04:e8:17:06:ce:d8:bf:da:93:8f:76:49:58:0e:20:
62:0a:80:b5:ae:e5:6a:f8:ab:0d:32:86:c7:4e:21:b1:2e:e7:
6d:b9:9a:df:76:82:e9:cc:45:a2:27:95:f5:46:0c:15:03:bf:
f3:ec:f7:f1:5c:de:d5:f5:79:43:c9:79:99:35:db:02:45:15:
a8:06:1a:06:34:c9:da:8b:ad:ca:2c:3b:47:cb:a7:91:1a:4d:
38:cc:a3:b5:ba:1b:af:66:aa:1d:88:38:46:95:fd:6a:a4:45:
f7:e5:f3:7d:3e:aa:0e:a1:d0:e8:b8:00:b6:1a:a9:94:09:5e:
3d:df:25:5d:e1:a7:1f:47:5a:5a:57:38:0d:75:05:7b:c9:4c:
72:a8:24:21:a9:da:aa:dd:f1:34:4b:c6:46:45:88:c1:46:a4:
7a:be:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:51 2026 by rpki-client