
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa
File: 439a45eb-6aac-3e07-a6cd-a58855498729.roa (raw, json)
Hash identifier: UvaGmRyCeuG2GLDLxIQziTmw/GN1b9IgJtBEgzh9qsg=
Subject key identifier: F2:58:AF:A9:32:29:BF:AB:AA:BD:41:02:A1:E4:5E:47:D9:0E:BC:CB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D0647AFA198B3D440E8597400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa
Signing time: Sun 01 Mar 2026 14:00:41 +0000
ROA not before: Sun 01 Mar 2026 14:00:41 +0000
ROA not after: Sat 30 May 2026 13:00:41 +0000
asID: 16625
IP address blocks: 23.199.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:af:a1:98:b3:d4:40:e8:59:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : May 30 13:00:41 2026 GMT
Subject: CN=d92f4afb-8ab6-45bc-a0b3-6cdd7284c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:6b:af:2c:cc:8d:c8:2f:b1:3c:45:6f:03:
ca:86:e4:c4:34:e8:75:4a:b1:f5:1b:79:64:98:03:
67:c9:9c:af:8a:22:78:96:93:7c:f7:bf:b8:d0:a4:
89:02:df:ed:1a:06:9f:86:f0:5e:5d:fe:a3:9f:b6:
7a:d0:4d:a6:5a:4d:fc:c5:b4:fd:0f:de:22:f6:1e:
f7:96:23:7f:bb:b5:92:ed:4f:1c:70:5e:c0:18:90:
77:73:31:48:b2:53:e4:c2:6b:24:a1:17:bb:fa:90:
19:e6:a8:39:c9:d8:cc:dd:5c:a2:8a:18:3f:be:03:
cd:2d:6e:c1:ab:32:4d:29:78:ac:61:0a:0d:76:3d:
d1:1c:d4:9c:ce:2e:c1:c0:03:fe:82:6d:76:a2:5d:
50:54:28:9f:de:e5:1f:2b:42:e4:d6:25:e1:c5:ff:
b8:4d:c6:91:14:a7:a6:d8:0c:6a:3c:1d:ba:34:3a:
6e:30:06:05:db:8e:4c:f0:d8:d8:c1:65:48:bc:17:
a8:4c:5f:4d:cb:62:a3:1b:83:a2:44:9b:bf:58:d3:
d6:a6:d7:97:dc:c5:0a:6f:bd:24:aa:3e:de:71:38:
65:af:8e:0a:ac:6c:0c:91:d5:16:b3:73:9a:88:96:
2c:60:29:48:03:48:2b:87:91:b9:1b:eb:9b:42:cb:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:AF:A9:32:29:BF:AB:AA:BD:41:02:A1:E4:5E:47:D9:0E:BC:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/439a45eb-6aac-3e07-a6cd-a58855498729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a9:0c:b5:ee:b6:02:a4:11:8b:67:68:21:d8:50:5f:d7:ee:
b9:53:79:0f:9e:f3:93:57:87:b8:5a:ed:c1:6f:43:6d:6e:1f:
10:df:52:0b:77:dd:37:83:f5:1e:1d:84:a2:01:40:98:b7:27:
81:34:7c:a6:2b:e9:3f:3f:77:11:d5:13:8a:7e:be:2a:d2:f3:
70:77:2c:2b:16:79:7e:ff:9c:cf:2c:f2:9b:79:cd:af:0e:c6:
bb:6e:eb:6d:b3:cc:8d:5e:bc:77:75:68:1b:48:da:56:f5:e1:
50:61:0b:d9:9d:99:b7:b9:18:d0:b0:9c:2b:99:45:b7:72:02:
1c:21:70:fa:3c:a4:71:58:b7:38:25:90:45:13:6a:e6:4e:c2:
92:f6:17:2f:ab:20:e1:6d:ec:15:7d:06:58:d8:86:79:88:a4:
2c:8e:77:9f:ee:7b:5c:a6:e1:d3:f7:bc:19:11:9b:ad:f7:4c:
1d:b6:48:d5:7b:85:19:96:0b:e5:fb:68:ed:31:b7:ed:80:cf:
c8:8a:e5:94:2b:23:85:dc:e5:da:57:0c:91:11:42:17:aa:2f:
8e:2e:0f:38:5b:d8:b9:1e:69:35:5d:4d:a5:2c:84:ff:47:31:
42:6d:3f:7e:88:86:0d:f5:49:8b:c9:79:b0:e1:71:17:75:80:
d2:49:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:14 2026 by rpki-client