
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa
File: 234c40d2-ad38-350f-a587-7c39d6b7f843.roa (raw, json)
Hash identifier: K2e9dNc3/rRGf3WgoRPO9pr9nmjavmqtRks5W5ftr84=
Subject key identifier: E0:55:F2:EE:4D:B5:D1:67:31:00:93:EE:21:6E:C7:45:D4:2D:9F:A2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CED279A91692E88FB3D3D1380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 20940
IP address blocks: 23.55.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:9a:91:69:2e:88:fb:3d:3d:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=834f058d-d544-422a-81f9-ae8b73c9f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:2c:0b:fe:71:e9:eb:83:ae:1c:10:77:af:
39:d6:5c:d6:7f:e8:22:e2:ae:f3:d5:22:e4:d4:95:
a6:99:4a:ee:d3:4d:50:b2:3a:47:5d:a9:58:48:4b:
bb:3a:53:29:f1:76:55:e7:f8:70:d6:70:d2:7e:82:
dc:63:0b:71:8e:91:49:26:c9:d7:d5:ae:78:4a:8c:
92:57:19:fc:95:16:45:08:b1:db:bf:a0:0c:16:ad:
fc:11:0d:4a:37:4a:e2:16:fa:32:3a:2b:d0:14:10:
1f:9e:1c:01:fe:4c:6e:18:38:a6:81:80:03:76:82:
60:ee:62:d2:5b:96:a3:0a:d2:c0:65:a3:96:b3:f9:
d5:3c:30:7e:7c:43:da:d5:fd:37:b0:f7:2f:0f:15:
d8:cc:b2:6b:5a:b7:45:56:db:9d:3c:6f:54:47:d8:
e5:fd:a4:69:6f:86:f9:92:2b:ab:f3:a3:0a:d8:e1:
67:00:4e:85:1a:09:c7:3f:80:92:78:6e:22:50:0b:
e5:83:26:a7:ab:67:ed:b9:54:53:40:f9:e5:a7:3e:
ed:d1:7a:87:92:52:d2:6b:cc:40:b4:59:e4:07:45:
65:82:57:b5:ce:1f:41:34:89:81:09:a5:a6:1b:c8:
62:0e:7e:0e:33:38:0a:15:32:f1:fb:93:0b:8e:8c:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:F2:EE:4D:B5:D1:67:31:00:93:EE:21:6E:C7:45:D4:2D:9F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234c40d2-ad38-350f-a587-7c39d6b7f843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.55.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:7a:97:c4:a2:68:f5:31:93:06:96:7f:34:77:16:e1:f8:3d:
01:0e:de:82:1f:82:2c:36:73:be:93:3b:9e:82:f7:a9:5c:82:
a6:75:6d:ea:66:d7:9f:a7:8d:81:f4:18:01:5f:ca:74:ff:d7:
77:a6:4b:1c:1e:48:cc:ed:68:5a:57:49:43:23:26:b5:98:1c:
54:f7:db:1d:1b:e7:a9:15:f5:aa:5b:76:5b:0f:74:db:cf:e0:
c6:f2:24:4e:99:b5:f2:1d:13:5e:df:df:b2:78:62:ae:53:e1:
69:e6:29:71:28:06:6e:75:cf:01:32:fd:86:63:6d:db:be:5b:
76:6a:98:c3:f3:87:6c:19:7f:43:c2:1e:4f:29:69:27:11:2f:
6f:01:40:0a:d0:ee:7e:ba:9a:01:f8:8c:99:58:a1:bd:68:fa:
ab:c0:79:ca:53:cf:66:6c:4f:22:f7:34:90:4d:9b:ae:de:ac:
e0:b7:f1:0c:3f:36:23:b7:08:91:f8:01:3b:ff:6d:62:69:ab:
e4:c6:4b:8e:32:0e:c0:ed:e2:ad:ca:a2:2c:38:54:95:e4:9a:
93:4f:0e:b8:43:f5:dd:9b:21:05:85:27:02:39:ee:2a:98:86:
d4:11:e6:80:98:0d:8e:16:9a:d3:9c:b2:de:36:94:8b:7e:59:
bb:0d:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:50 2026 by rpki-client