
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa
File: 6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa (raw, json)
Hash identifier: 3T98Jc56fnj6IhZdYXvuLq2TZUQ9WTINdAtOpAwBXF4=
Subject key identifier: B1:EE:E4:28:D2:01:C0:4A:C0:B2:37:5F:8A:9E:DE:B9:1D:BF:A2:8F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D75D548D125BF640AF5F43580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa
Signing time: Fri 10 Apr 2026 13:00:31 +0000
ROA not before: Fri 10 Apr 2026 13:00:31 +0000
ROA not after: Thu 09 Jul 2026 13:00:31 +0000
asID: 20940
IP address blocks: 23.66.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:d5:48:d1:25:bf:64:0a:f5:f4:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 10 13:00:31 2026 GMT
Not After : Jul 9 13:00:31 2026 GMT
Subject: CN=a289744d-087b-49dc-8627-b4bed0b25b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:04:47:17:30:09:fb:c4:63:1f:3e:fb:ab:44:
37:28:a4:37:b8:2c:95:4d:8e:ac:aa:88:dd:4a:67:
ba:44:c7:78:b8:7e:e1:b7:c3:e6:2b:e8:90:ad:f4:
5d:fb:21:03:2f:55:90:f0:ac:48:26:8e:7e:fb:71:
34:92:e0:f0:df:00:e9:52:39:00:ac:fc:4f:78:4b:
62:0e:56:f8:18:92:16:6a:b3:25:e8:65:80:b8:17:
38:9b:57:c8:45:f9:f4:a2:9e:7c:b2:ed:3a:d5:01:
65:3c:c7:e8:6d:fb:10:e6:4b:0a:42:0d:3c:da:41:
6e:6d:c1:cb:9e:a0:95:38:fa:a8:37:02:73:6b:e1:
91:0c:ac:67:1a:02:90:4f:9f:c7:f6:fd:8c:4e:b4:
13:e0:92:9e:26:7c:d1:9e:5a:31:39:e4:78:b0:ff:
7a:4b:40:3c:34:a3:1f:3a:4c:45:2a:b0:70:57:4b:
fc:c3:67:a1:05:e3:48:8c:b8:9e:2a:d9:32:77:58:
b3:78:81:7f:18:f3:07:8e:13:23:28:cc:8e:b4:28:
e4:e4:e2:ae:aa:35:d2:0b:44:77:48:47:4d:bd:c9:
25:b8:b9:c5:35:35:a1:11:c1:8f:fe:98:49:8f:18:
fe:3b:84:7e:45:9f:8c:ad:d2:94:07:20:8d:96:18:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:E4:28:D2:01:C0:4A:C0:B2:37:5F:8A:9E:DE:B9:1D:BF:A2:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bdd57fe-1bf3-33b5-ada6-a95391ea3748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2b:a6:76:cd:f1:60:b3:a7:f3:76:b0:39:82:c1:76:b9:f7:
e5:2c:ad:4b:a7:b1:dc:74:63:ff:af:5f:5d:e8:ec:b5:de:53:
3a:69:c9:1a:b3:82:b3:9d:56:79:64:a7:ab:c9:fc:73:92:57:
02:03:9d:b8:00:5a:78:38:10:ca:02:1d:b1:2f:33:d2:da:57:
21:3e:3e:96:65:e9:e4:a0:19:e6:23:27:b2:8f:fe:a1:00:82:
93:b1:f6:1c:57:b3:83:b9:d0:17:ee:ae:7b:f6:ec:07:6e:11:
a4:3c:e8:89:96:e3:1d:d8:ba:f4:b4:93:06:f4:7d:3f:90:a9:
1a:42:1e:da:57:00:c6:71:fb:e3:9f:e5:84:bf:0e:98:1a:f8:
ca:47:ff:29:82:da:e2:da:d9:88:40:33:92:22:c7:99:88:04:
c8:8e:c1:47:dc:15:44:8f:0f:98:4d:ad:96:e0:ae:08:e5:20:
de:13:6b:66:73:5e:47:a0:9d:12:9b:d5:b8:83:5b:34:c8:41:
10:79:d9:89:e1:f3:61:e1:ec:3d:b2:e7:85:0e:6c:0b:2a:3d:
94:ae:f9:15:0d:70:60:2b:2b:e3:08:1a:13:0d:a6:2d:fe:e4:
50:f8:2d:e1:9c:c8:81:ab:05:13:1f:c3:0a:24:3d:27:58:78:
d9:c5:c5:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UjRJb9kCvX0NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
YTI4OTc0NGQtMDg3Yi00OWRjLTg2MjctYjRiZWQwYjI1YjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwRHFzAJ+8RjHz77q0Q3KKQ3uCyVTY6sqojd
Sme6RMd4uH7ht8PmK+iQrfRd+yEDL1WQ8KxIJo5++3E0kuDw3wDpUjkArPxPeEti
Dlb4GJIWarMl6GWAuBc4m1fIRfn0op58su061QFlPMfobfsQ5ksKQg082kFubcHL
nqCVOPqoNwJza+GRDKxnGgKQT5/H9v2MTrQT4JKeJnzRnloxOeR4sP96S0A8NKMf
OkxFKrBwV0v8w2ehBeNIjLieKtkyd1izeIF/GPMHjhMjKMyOtCjk5OKuqjXSC0R3
SEdNvckluLnFNTWhEcGP/phJjxj+O4R+RZ+MrdKUByCNlhhG2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHu5CjSAcBKwLI3X4qe3rkdv6KPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJkZDU3ZmUtMWJmMy0z
M2I1LWFkYTYtYTk1MzkxZWEzNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0J8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACErpnbN8WCzp/N2sDmCwXa59+UsrUunsdx0Y/+vX13o7LXeUzppyRqz
grOdVnlkp6vJ/HOSVwIDnbgAWng4EMoCHbEvM9LaVyE+PpZl6eSgGeYjJ7KP/qEA
gpOx9hxXs4O50Bfurnv27AduEaQ86ImW4x3YuvS0kwb0fT+QqRpCHtpXAMZx++Of
5YS/Dpga+MpH/ymC2uLa2YhAM5Iix5mIBMiOwUfcFUSPD5hNrZbgrgjlIN4Ta2Zz
XkegnRKb1biDWzTIQRB52Ynh82Hh7D2y54UObAsqPZSu+RUNcGArK+MIGhMNpi3+
5FD4LeGcyIGrBRMfwwokPSdYeNnFxXk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:27:57 2026 by rpki-client