
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c51723f-d141-32c8-bacf-50073d43b791.roa
File: 3c51723f-d141-32c8-bacf-50073d43b791.roa (raw, json)
Hash identifier: 6S0zHDqr4phcTtZJt4RfVeebbydpltwnupRAcjAT3x8=
Subject key identifier: FF:53:1D:51:97:FF:99:81:16:BF:66:9A:EF:34:4E:52:29:B5:EA:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F225D17ED639644965ECF4380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c51723f-d141-32c8-bacf-50073d43b791.roa
Signing time: Fri 11 Sep 2026 01:00:12 +0000
ROA not before: Fri 11 Sep 2026 01:00:12 +0000
ROA not after: Thu 10 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 23.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:22:5d:17:ed:63:96:44:96:5e:cf:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 11 01:00:12 2026 GMT
Not After : Dec 10 02:00:12 2026 GMT
Subject: CN=b3da0e4b-199c-4c0e-a5a6-157bddd9be5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:4f:9f:2a:e3:e4:da:04:50:d0:0d:75:17:
f2:b6:18:58:37:44:b0:9a:6c:40:d3:9f:16:58:54:
57:49:30:bd:63:f3:4c:7e:9d:4d:16:ce:57:62:a3:
f6:bd:51:32:e7:03:40:de:45:01:89:b7:bc:c2:2d:
dc:9b:e9:a1:67:cf:90:92:2a:67:4e:bd:6f:e7:e0:
e0:86:99:5b:34:3e:47:23:31:45:fe:25:bf:53:1f:
f4:1a:42:72:0c:a7:09:5e:fe:c9:c8:7e:c7:a3:69:
9f:61:f9:d5:63:df:29:26:aa:9c:2f:d8:f7:fc:4f:
19:0e:73:e7:25:a5:46:3d:d4:f3:77:5a:9f:3a:e2:
d5:2c:81:ca:2e:d4:13:53:23:70:7d:66:f1:aa:46:
9d:a7:40:03:2e:1a:19:33:27:0f:2d:7b:62:a8:2e:
28:4a:2b:cc:a6:c7:7a:ca:7d:27:6d:5c:38:54:76:
53:87:36:3c:7e:2d:a4:2c:38:4b:e5:74:fe:cd:de:
49:c5:e8:4f:95:d7:d7:3c:57:b8:77:d1:5d:6f:5b:
56:da:0e:a5:dc:5b:6e:74:1b:56:bb:46:b3:21:9c:
b0:da:12:17:d0:fe:20:f8:25:23:eb:5f:48:25:aa:
e5:35:48:b5:a0:f5:5e:f0:57:2d:4a:61:de:48:52:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:1D:51:97:FF:99:81:16:BF:66:9A:EF:34:4E:52:29:B5:EA:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c51723f-d141-32c8-bacf-50073d43b791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:f4:bb:d6:3a:2a:26:e6:08:f7:3b:78:fd:94:48:c1:97:8e:
53:96:92:72:95:98:8d:12:30:5f:99:9c:5f:bb:19:29:99:48:
7c:5a:05:9e:af:a7:99:91:8e:e1:ad:50:6c:bd:5a:76:13:b0:
1c:29:9a:09:86:4c:c4:35:ab:40:80:76:fe:75:5c:48:c6:03:
a0:a0:42:e5:4c:e4:e9:6d:1a:47:23:d6:9c:ce:4b:e3:41:c0:
e2:8b:c5:38:d0:c5:01:3d:2b:d0:8d:d5:19:9e:d4:c8:3b:b7:
e3:86:00:ec:88:f1:20:8b:82:ca:c2:c8:95:62:cf:5c:80:10:
e2:e3:80:31:f9:bf:40:f5:6d:d7:8b:b8:b3:cb:34:1f:3e:11:
99:77:56:f5:b2:7e:83:aa:1d:32:32:b7:4d:2b:7d:83:2e:1c:
bc:c5:1d:34:a6:43:a0:6c:c5:0a:0a:52:b3:2a:d7:91:ed:55:
00:7a:91:21:cf:08:b8:d8:c5:bf:b2:66:b0:ba:fd:3f:2f:68:
79:4a:67:5a:3e:06:88:1e:ad:f6:fc:0d:20:59:69:c3:fa:6d:
cb:fb:c0:e7:f2:66:ab:15:27:0d:18:8b:d5:86:e3:7d:62:0d:
86:08:0d:09:ae:de:41:c5:b1:43:b7:a8:0c:da:9d:e0:88:59:
00:ab:6a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:15:37 2026 by rpki-client