
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
File: 4f069955-05ce-3662-8eeb-cf6fe17aa628.roa (raw, json)
Hash identifier: OV8RNvrPsCKOV2GjUG1KnkX7y+O835e9Lz3IZfG/OF0=
Subject key identifier: 81:00:F8:88:98:2E:B7:8E:A4:32:5B:F8:0E:0C:A9:EF:C4:3D:09:A5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E9BE51F05A2A7406FE2928980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 16625
IP address blocks: 23.36.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:1f:05:a2:a7:40:6f:e2:92:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=8fef4e0e-8219-4130-853c-24e63ed7edd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:07:46:5d:c7:cc:d4:40:b3:de:d8:34:84:
e0:23:d5:1d:d0:e4:2d:31:cd:2c:63:93:32:79:7c:
b9:bc:fa:c0:ef:f3:ea:9e:2d:8f:02:00:f4:e5:80:
b8:eb:10:72:be:cf:77:50:06:24:a0:84:1a:1e:c8:
5b:3f:82:bd:97:18:6e:de:c3:5d:5b:07:0a:60:cb:
5b:d7:a3:22:b3:a8:5a:0c:4e:d5:d0:19:91:b9:e4:
5e:b5:2b:65:5f:32:aa:2d:59:00:ce:8c:37:dc:1f:
be:26:71:28:b3:96:49:c8:f4:d1:d0:a1:5f:d5:6d:
ff:b1:af:65:88:a5:5e:d6:26:7a:bd:1c:d6:58:72:
cf:fe:9a:4e:78:51:59:b4:28:4a:13:05:e6:18:81:
4e:68:64:d5:e3:3c:08:84:22:26:c5:63:b4:89:1a:
ed:72:2b:fc:53:d9:ec:53:df:ae:89:62:2d:d7:c5:
b8:84:f5:c8:37:fc:ed:23:d4:47:8c:ba:42:2d:a8:
b8:9d:b9:d6:56:97:31:ea:5f:6d:25:96:50:70:4c:
ff:a3:67:61:ab:59:a4:44:a8:1b:5c:33:eb:a2:2c:
0c:d8:ed:4b:f7:8c:dc:16:e2:42:b2:fa:dc:7d:80:
38:fb:e6:f1:01:7b:ef:d2:98:be:fe:76:5d:b6:a0:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:F8:88:98:2E:B7:8E:A4:32:5B:F8:0E:0C:A9:EF:C4:3D:09:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f069955-05ce-3662-8eeb-cf6fe17aa628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:cc:de:75:00:e5:df:20:01:6e:81:27:8c:57:3f:25:a8:7b:
dd:c3:06:f4:7d:a6:db:3b:8a:14:6e:ff:8b:72:91:aa:f9:6d:
45:38:3f:7f:3a:de:bf:60:52:f6:f2:08:de:59:bf:f2:d0:98:
26:d1:94:2c:08:1b:32:b9:02:ed:de:98:9c:53:ae:9e:52:30:
f1:29:11:ef:41:3b:5f:88:4e:9a:d1:44:fb:b7:9c:f0:15:7a:
1d:40:7c:42:53:5c:00:b4:09:14:e5:ac:96:1a:72:4d:b0:53:
d9:b2:7e:b4:2e:b5:7f:df:7e:a1:ab:9d:05:ad:c2:a2:18:29:
08:5d:6b:74:22:14:7e:09:50:69:eb:3d:42:6f:ae:0f:a2:17:
25:b8:94:a5:50:09:20:0a:38:7a:83:a2:14:58:52:03:5c:76:
59:6b:97:42:70:1b:f9:d1:ad:cd:8c:70:ee:fc:08:28:d2:46:
bd:33:6b:d9:ec:42:a1:e2:c1:f2:72:21:df:32:0c:4e:46:5a:
d3:b2:e1:2d:f7:fa:67:83:4e:0a:57:2c:9b:95:c1:72:56:6f:
61:83:72:1a:90:61:f5:b1:79:7a:fd:69:a5:2a:73:c4:16:15:
df:87:fa:a0:5f:ae:ee:4f:2a:d7:b6:d3:57:67:0d:9b:28:60:
43:b5:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:53:08 2026 by rpki-client