
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/238afca9-5310-381c-8f50-b04390fbd36a.roa
File: 238afca9-5310-381c-8f50-b04390fbd36a.roa (raw, json)
Hash identifier: hBc86+IxSaJpOPKP93QvUn0qTiiZrgisuKX5XLCvWxs=
Subject key identifier: DC:E6:B5:02:E5:8D:CA:37:D7:46:AD:C4:0A:FE:05:71:B5:89:69:23
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E9D4A68E8C8F4AB5ED8700080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/238afca9-5310-381c-8f50-b04390fbd36a.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 63949
IP address blocks: 143.42.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:68:e8:c8:f4:ab:5e:d8:70:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=47db8a17-1d7c-4a05-92e5-6c4bdbf01d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:69:50:76:6b:4e:34:44:9c:b8:f7:c2:df:
9f:7d:c6:36:5f:22:ec:60:5a:11:b1:65:7a:7e:d1:
4a:0c:c4:24:ac:58:ae:92:3f:50:fc:cd:e2:de:92:
ff:dd:d3:62:bb:20:32:93:c9:eb:28:ed:e7:f6:91:
35:23:b6:72:3a:0e:a0:26:ed:7a:d1:6a:92:62:cd:
3e:54:e9:ec:89:6b:88:1f:fa:75:c9:eb:33:55:79:
06:7b:9a:ac:7d:4d:d0:0f:64:58:3d:02:02:02:26:
30:db:f6:6b:ad:8a:4c:0d:5f:95:d4:21:db:3f:58:
63:f0:35:dc:5f:27:5f:90:69:09:1e:c6:54:9e:57:
67:6f:a7:40:d8:dd:7e:30:27:44:45:7a:dd:2f:79:
d5:c9:3c:a5:83:99:7c:d7:43:df:9e:f6:65:65:95:
66:00:b3:5d:d3:56:32:e5:dc:38:3d:b9:4e:f1:fc:
41:61:7d:1d:25:75:70:83:e3:d6:77:07:73:8c:51:
f0:61:10:bf:2c:8b:1e:f1:1d:84:eb:e3:65:5b:e1:
d5:26:01:58:a6:aa:cd:aa:72:e2:98:aa:c6:45:54:
af:29:24:13:e7:b7:a1:00:5c:ce:04:34:8e:8d:18:
a2:4a:94:b4:9d:cc:be:c2:e9:4e:a7:0b:b4:95:44:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:B5:02:E5:8D:CA:37:D7:46:AD:C4:0A:FE:05:71:B5:89:69:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/238afca9-5310-381c-8f50-b04390fbd36a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
143.42.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:e3:f5:d2:42:c1:8d:34:8f:3e:ad:dc:6e:3c:1d:dc:88:dd:
21:5b:8d:d3:98:2c:57:25:25:2d:f5:1a:f6:ed:7a:a6:33:d8:
35:64:b8:37:2a:fa:c5:51:37:1b:bf:c8:43:23:0e:fc:d7:bc:
53:b6:ec:97:a9:ba:d5:23:eb:f3:5c:b3:da:d5:86:c2:a1:1f:
2d:a0:34:11:1e:98:58:17:53:e2:ce:d1:25:a5:6c:7e:b8:52:
aa:5b:e7:58:b4:63:e7:70:4b:06:db:e0:25:a5:49:22:ab:42:
38:0d:03:dc:ca:38:93:04:ff:02:cc:68:f2:7b:3d:3a:41:2e:
f9:de:3f:65:9b:fe:68:ae:b9:75:0c:ed:42:ff:89:46:b0:2e:
47:62:0e:58:bd:41:57:81:0b:28:1f:59:75:a4:b2:9e:2c:a2:
1e:87:68:f9:06:1e:9c:30:8e:f0:7d:b4:83:ac:67:e8:e2:b7:
d5:06:c0:08:6f:f2:b5:2a:11:35:fe:41:90:79:78:f4:37:35:
46:bb:b0:80:62:5c:c6:9e:9c:c0:c6:a8:19:58:a9:89:f2:9a:
90:ea:7a:51:71:ed:26:2f:df:f3:19:7d:2a:96:a8:6f:e2:c5:
20:b6:4a:a1:ff:8d:88:24:75:b7:d1:6b:8e:1c:9e:79:51:f2:
b7:af:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:36 2026 by rpki-client