
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ea9200c-3123-3c11-bc8c-16f261a7bc64.roa
File: 3ea9200c-3123-3c11-bc8c-16f261a7bc64.roa (raw, json)
Hash identifier: lUlxemqxmy+imvLMkpT5HVmw+SkH9UbIk+cIxQoX2tA=
Subject key identifier: 27:BB:81:38:E5:29:A8:8E:DA:D2:0B:AF:73:2F:93:3D:92:05:04:16
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CE09761F6C734D00C856F9308
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ea9200c-3123-3c11-bc8c-16f261a7bc64.roa
Signing time: Mon 16 Feb 2026 02:00:32 +0000
ROA not before: Mon 16 Feb 2026 02:00:32 +0000
ROA not after: Sun 17 May 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.220.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:97:61:f6:c7:34:d0:0c:85:6f:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 16 02:00:32 2026 GMT
Not After : May 17 01:00:32 2026 GMT
Subject: CN=86291a3b-68c4-450c-bc0a-22ceb17d4a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ad:76:16:95:99:74:b8:48:b6:a2:05:0a:ea:
97:d1:0e:b8:f6:a5:89:54:f5:ed:0c:27:47:f9:b1:
13:11:2f:11:1e:16:f3:02:f1:29:3f:87:f1:f4:03:
8a:30:5d:b8:34:f0:fa:f9:82:cf:b1:68:b2:9e:2a:
9a:cd:8b:b3:50:ed:4c:10:c3:bd:c6:c7:7e:53:be:
f2:99:f9:d9:a3:c2:7d:97:3e:0e:23:8a:38:f3:16:
4b:5e:16:14:83:67:d6:72:6a:1a:e6:c2:36:67:f3:
42:92:9f:0f:b1:40:05:5c:c7:37:af:36:02:98:66:
34:67:6c:9f:8f:f9:c1:fc:5f:90:e5:0b:3c:7d:4d:
62:9e:37:5c:4a:63:7f:20:52:ea:19:dc:cf:d5:af:
cf:48:62:99:f1:81:9b:07:5e:2f:88:5c:da:82:24:
59:2c:2a:30:f8:63:e3:d4:ea:5c:e5:6c:13:85:22:
31:75:ef:f1:35:fe:be:ca:ac:db:48:b3:7b:c2:4e:
b9:4a:19:f2:bf:04:03:aa:82:38:95:d4:52:4e:54:
7b:f7:d0:38:1f:c6:75:04:fd:d6:44:3b:fa:d7:2d:
a4:23:a7:96:69:9c:1f:66:d2:df:1a:b3:7a:19:42:
ab:ea:c7:17:d0:69:30:c7:34:26:90:ac:7c:ef:0c:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:81:38:E5:29:A8:8E:DA:D2:0B:AF:73:2F:93:3D:92:05:04:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ea9200c-3123-3c11-bc8c-16f261a7bc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ab:ab:b2:f2:58:58:6b:e8:d9:5a:f8:7d:99:14:0a:60:e4:
1b:37:88:4a:91:a9:1b:67:38:f0:e8:87:0e:c1:fe:52:89:3b:
e9:ed:60:65:99:d3:c5:2e:49:dc:8c:60:8a:ae:ae:03:7d:70:
0e:4f:7f:35:a9:8c:8d:23:ce:99:e5:ff:48:85:a1:98:82:a6:
f8:82:b9:78:51:05:49:4f:43:65:c5:5e:da:1c:d8:5c:41:01:
3d:61:f5:b0:ea:ee:da:b3:57:b2:be:03:2a:27:81:33:c6:d9:
0d:01:68:38:d0:30:0b:ca:3b:5c:d7:05:bf:f3:dd:6d:ec:d8:
9a:ce:bc:21:5f:b5:0b:de:7b:8e:6d:08:66:c3:2f:73:0d:ec:
a6:7e:19:ce:f3:01:d5:7a:f6:68:62:17:33:b4:c9:f8:f9:58:
36:74:a8:7c:c5:06:f5:9e:8c:c6:5e:88:92:ed:17:24:97:25:
ce:1b:53:66:97:d2:a8:54:c1:b4:e7:fc:d2:13:06:59:fa:88:
db:04:5d:19:82:f7:9d:f2:8f:b1:cf:eb:8f:30:a0:a7:5d:d8:
53:aa:c0:63:34:e9:5f:70:70:c1:08:86:d7:32:86:5a:e1:01:
78:a2:78:8f:9e:73:51:2a:8f:0c:e5:1c:2d:04:d4:ff:4c:f8:
28:9f:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:51 2026 by rpki-client