
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa
File: 68c68fe7-f159-39c0-aa8b-22c9125473ad.roa (raw, json)
Hash identifier: N/sdTVft8cbFHJ/SW8WWuzAqUQaU6AcYyhzsG2qkbgk=
Subject key identifier: BF:F0:79:B1:B5:AC:3D:BF:07:A7:E0:C3:3D:CE:F6:A0:E0:A9:55:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D59EA4580DD8CDC32E5D94D88
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 20940
IP address blocks: 23.210.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:45:80:dd:8c:dc:32:e5:d9:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=5690e498-5cab-43f9-92ef-1778b6993947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:51:5d:c5:be:84:59:d6:8f:dc:2e:3a:6f:
a3:2a:c1:fc:4d:95:ee:a3:e2:1d:61:1f:43:f1:0e:
ad:c5:c9:8e:68:c9:18:b9:9f:e4:44:e7:6d:99:e8:
a9:7e:7e:f7:e6:41:ac:10:fb:4f:da:b6:63:e6:6e:
e4:fc:d6:16:70:80:19:2c:d0:bd:90:63:e1:27:93:
de:67:0c:bb:aa:da:03:72:bd:72:22:e0:49:06:7e:
c6:fb:e3:dc:72:ad:1a:9d:a7:31:1b:6d:24:4b:04:
c6:31:bc:b6:24:e4:c6:6f:8d:bb:17:85:94:6a:0f:
1f:e4:8a:23:f8:90:1f:33:94:2b:e9:1c:eb:27:50:
9d:60:85:59:c0:ff:ce:78:5b:1a:08:97:04:21:ac:
0a:6e:23:c0:c2:c2:41:b6:36:4d:75:d5:ba:cf:c4:
d4:5f:be:0c:91:1e:74:d4:d6:cd:d3:6d:4e:b2:cf:
5b:ef:d9:01:d7:29:e4:eb:c1:2a:00:78:da:83:19:
bd:c3:5a:f7:48:40:e4:d2:3d:b2:37:e7:74:b0:5f:
3f:61:0a:80:d8:25:d0:84:3c:ca:07:91:33:34:4a:
6d:e9:b6:62:81:5f:08:36:36:2a:b0:50:c2:3c:5c:
9c:eb:5b:c6:06:3a:8c:1b:ce:7f:26:8a:96:27:47:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:79:B1:B5:AC:3D:BF:07:A7:E0:C3:3D:CE:F6:A0:E0:A9:55:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68c68fe7-f159-39c0-aa8b-22c9125473ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:53:f4:49:97:ff:0e:ee:87:97:b9:00:00:69:34:92:a5:c3:
a0:85:04:d4:cc:e2:a0:17:47:ac:4e:ed:75:e7:d8:5f:09:e6:
03:6d:62:b9:f9:6b:a4:da:b8:9b:47:68:d6:50:f9:fe:1d:b8:
f7:74:ea:79:73:80:b6:7e:6a:cf:60:41:6d:28:72:97:d7:26:
e4:97:a4:ce:43:fe:89:8f:83:ec:7e:79:91:82:5e:00:c1:62:
d3:a6:ba:21:33:44:bd:78:3a:7b:d9:ca:fd:db:9d:90:3a:b8:
a2:72:2a:36:32:a8:77:9b:d5:e1:d1:cc:00:38:48:79:b4:af:
ad:f3:04:10:e5:51:07:4f:86:4a:ee:c4:20:2f:08:92:6b:3f:
67:ad:fd:22:2f:bc:f7:f1:ab:96:88:89:59:aa:aa:37:72:49:
10:33:24:61:de:34:2f:9f:1e:01:fa:05:9f:a5:d1:29:53:4a:
c4:5d:09:4a:6b:d3:b6:45:65:a3:c1:ca:d7:61:05:37:db:4e:
23:62:77:92:56:2f:a8:f8:78:04:15:c2:57:9d:f6:eb:39:aa:
04:ac:08:50:59:44:e1:2c:41:0d:82:a5:31:ad:c6:89:da:86:
8e:66:95:94:05:cb:cc:32:56:f3:ea:6d:de:87:57:a8:84:5a:
35:c2:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:07 2026 by rpki-client