
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
File: 541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa (raw, json)
Hash identifier: VlYdHEKvzQXHWkO2ClN59oH4XV+qoVQ5YvmzspPeo/g=
Subject key identifier: C8:42:4D:06:9F:39:ED:4E:39:F6:E2:1D:EE:17:AC:EB:CF:DF:D2:A2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CA491B1BB6C42B426DDDE1EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
Signing time: Sun 25 Jan 2026 14:00:40 +0000
ROA not before: Sun 25 Jan 2026 14:00:40 +0000
ROA not after: Sat 25 Apr 2026 13:00:40 +0000
asID: 20940
IP address blocks: 23.52.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a4:91:b1:bb:6c:42:b4:26:dd:de:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:40 2026 GMT
Not After : Apr 25 13:00:40 2026 GMT
Subject: CN=023f2900-2d91-4a94-a81d-941973d7f25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:4a:ce:10:9d:56:b0:f3:fc:0f:ef:de:08:
79:d4:52:1a:16:e1:c0:0f:e9:b0:e8:c4:7b:32:df:
44:ab:ec:d0:94:03:55:2c:f3:5e:6c:be:cd:d2:32:
49:8c:c0:86:d5:cf:94:a7:da:60:a8:9c:a1:65:21:
fb:45:6f:54:50:4f:12:f9:db:f3:a0:df:fb:98:fc:
fd:e0:04:ab:b9:af:0d:8b:05:48:63:69:01:6e:d3:
58:91:4a:ee:99:7e:57:cb:68:7e:2e:1f:63:86:25:
ab:ea:4e:80:dd:ae:5e:74:c6:7b:8e:4c:a6:61:5e:
d3:a2:94:36:c5:31:08:91:d9:d6:e8:97:69:27:92:
01:7b:b5:3c:6e:c8:a0:4c:30:4e:4f:3d:ed:4c:fa:
63:d8:e3:9b:be:19:32:39:90:91:b8:31:32:a1:93:
c6:9c:90:bf:53:49:07:b0:8f:ac:22:87:3e:9d:49:
74:0b:5f:2b:e9:7a:00:70:af:c0:36:6a:84:a8:dd:
b6:35:01:da:f7:e3:90:f3:8f:c6:b6:a1:19:28:0f:
93:e8:79:82:19:19:f3:59:cb:36:86:fd:9c:80:43:
a5:ed:5c:4f:df:3d:59:44:97:0f:55:33:71:fa:c6:
d2:2c:c8:6d:e3:f8:5c:d7:38:da:14:87:6e:8c:27:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:4D:06:9F:39:ED:4E:39:F6:E2:1D:EE:17:AC:EB:CF:DF:D2:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:52:68:e4:59:54:f1:e4:cc:d0:e3:d0:6f:04:1d:14:66:96:
3e:80:58:a8:bf:97:dc:4b:32:6f:e3:39:5f:e6:e9:58:95:66:
46:2a:ef:a1:bc:03:5b:55:86:12:53:0a:28:00:af:56:60:9b:
93:c6:14:22:2b:1c:f0:ce:dd:92:be:ef:00:ab:f1:ba:e5:ca:
65:9e:31:46:db:c7:cb:7a:cb:52:be:c7:86:9e:f2:99:79:0d:
e1:b6:6f:37:f9:6a:0e:42:ac:00:1b:d9:c7:a7:d9:33:c2:7a:
52:6e:80:9d:13:54:ca:a6:c1:cd:1c:57:2f:d5:70:7f:9f:2e:
19:64:e6:b5:63:69:b2:b4:77:95:51:27:a6:fa:09:65:e2:00:
90:ea:0a:e8:87:2a:0a:32:d2:69:ba:4d:d1:68:18:eb:63:f2:
95:6a:97:bd:58:79:40:b4:ae:a6:bd:08:a8:07:b5:de:ac:1f:
44:fe:b7:6e:58:d9:09:fa:57:72:44:8c:03:62:69:66:77:cf:
6d:c9:27:81:df:4e:fc:06:29:15:e6:86:76:2a:2e:ff:b5:28:
b0:9c:91:cf:01:d7:1e:1c:7c:85:2c:cb:c4:44:bd:73:28:d9:
32:ee:3f:8b:6c:5f:b1:e9:16:ac:9f:d3:3a:dc:1b:29:55:32:
3c:e0:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:58 2026 by rpki-client