
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
File: 7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa (raw, json)
Hash identifier: bgD7kMljYY7veLez5Y0zaYHDx7208BlzMY4EoYPGSBs=
Subject key identifier: F7:67:24:19:AA:41:28:53:53:B6:0B:DE:26:F0:33:12:3A:8E:F1:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CDB0227E9F4A02533BD4536C1
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 20940
IP address blocks: 23.39.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:27:e9:f4:a0:25:33:bd:45:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=9a2e7e51-a9ea-4ca3-9198-99dba20938c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:60:c9:cf:f8:ff:12:36:c3:c3:91:bb:30:
1c:f2:0e:b0:9f:d8:16:6e:16:49:16:9e:6b:67:8d:
ce:10:21:af:40:74:20:0c:22:6a:3d:fe:0a:34:2a:
60:47:c2:5f:e2:8f:35:95:be:3c:14:67:87:f3:83:
9f:eb:3d:db:42:f5:57:93:04:58:02:72:b7:5c:f0:
6b:d7:1e:e1:94:6b:54:47:7e:80:72:be:aa:1a:07:
b3:ed:78:29:1a:52:17:c3:71:af:42:dc:7b:d4:b8:
82:67:5f:65:4f:21:0c:71:4c:2d:15:52:81:14:29:
6a:d5:f5:3e:d1:ab:ad:3d:5c:e0:ce:17:83:0c:9d:
6c:8b:24:8e:a0:4f:99:70:50:31:de:8a:d0:8a:75:
24:53:85:66:1a:9a:bc:94:d5:44:d0:97:1e:08:1b:
94:bc:c3:60:a4:2c:8e:33:d2:dd:9b:cf:f2:fa:ca:
86:d4:10:1b:9d:74:ed:59:b4:ed:10:2f:bb:b3:09:
db:c3:aa:5f:a6:86:a0:ee:86:84:da:ad:cb:a5:8c:
f5:2b:fa:ff:c4:ef:cc:f6:5a:ba:20:22:dd:07:1f:
5b:8a:f2:f2:80:a0:06:7c:cb:a7:f3:02:15:6f:e6:
f1:37:43:f0:54:b1:e9:0d:d9:6f:1f:40:dd:a4:ad:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:67:24:19:AA:41:28:53:53:B6:0B:DE:26:F0:33:12:3A:8E:F1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:e3:28:f0:df:b2:cb:b0:df:b3:f0:b9:cf:a2:f4:f4:65:b1:
5b:81:1e:1f:05:1f:41:fc:4d:e5:a5:21:f0:40:b8:92:55:6f:
89:51:a6:54:60:10:21:33:81:52:0d:83:6c:b6:a9:e4:97:b7:
cb:ff:46:8b:02:81:72:f6:46:64:9f:18:b3:f3:72:4d:30:46:
c2:34:d0:98:d7:32:ce:e9:8f:a1:b2:ea:f3:bd:8c:52:0a:cb:
c6:ea:0d:5e:e5:54:0f:24:33:e2:fa:9a:d6:de:2f:e1:a8:c0:
2d:a2:93:e5:be:01:db:bc:39:bf:74:b2:6b:f8:3c:8b:1e:9b:
0e:46:19:93:5b:8c:56:03:33:04:b1:57:50:db:e4:28:68:a3:
6c:6d:36:3e:dd:4d:73:e2:62:3c:bb:fe:7c:a9:3e:c0:2b:4d:
82:87:25:1f:9f:a1:a7:20:f9:94:3b:aa:c8:7c:4e:1f:fc:c1:
cd:23:95:13:aa:89:cf:0c:46:44:e3:5a:ab:e2:98:df:9d:e8:
0f:79:57:3e:b1:40:3a:1f:00:31:73:f4:07:b3:96:ae:2c:e3:
35:c6:36:d9:18:b8:76:55:ce:a8:2d:ff:eb:9a:e3:3a:4d:9a:
25:1f:22:19:54:6d:56:bf:ed:05:24:42:bc:d5:9f:b1:9c:47:
b0:a2:71:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAifp9KAlM71FNsEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
OWEyZTdlNTEtYTllYS00Y2EzLTkxOTgtOTlkYmEyMDkzOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82Ngyc/4/xI2w8ORuzAc8g6wn9gWbhZJFp5r
Z43OECGvQHQgDCJqPf4KNCpgR8Jf4o81lb48FGeH84Of6z3bQvVXkwRYAnK3XPBr
1x7hlGtUR36Acr6qGgez7XgpGlIXw3GvQtx71LiCZ19lTyEMcUwtFVKBFClq1fU+
0autPVzgzheDDJ1siySOoE+ZcFAx3orQinUkU4VmGpq8lNVE0JceCBuUvMNgpCyO
M9Ldm8/y+sqG1BAbnXTtWbTtEC+7swnbw6pfpoag7oaE2q3LpYz1K/r/xO/M9lq6
ICLdBx9bivLygKAGfMun8wIVb+bxN0PwVLHpDdlvH0DdpK38PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdnJBmqQShTU7YL3ibwMxI6jvEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M3MWUzYTItYWQ5Yi0z
ZWNkLWE4NmQtMjdmYzk2NmQwYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfjKPDfssuw37Pwuc+i9PRlsVuBHh8FH0H8TeWlIfBAuJJVb4lRplRg
ECEzgVINg2y2qeSXt8v/RosCgXL2RmSfGLPzck0wRsI00JjXMs7pj6Gy6vO9jFIK
y8bqDV7lVA8kM+L6mtbeL+GowC2ik+W+Adu8Ob90smv4PIsemw5GGZNbjFYDMwSx
V1Db5Choo2xtNj7dTXPiYjy7/nypPsArTYKHJR+foacg+ZQ7qsh8Th/8wc0jlROq
ic8MRkTjWqvimN+d6A95Vz6xQDofADFz9Aezlq4s4zXGNtkYuHZVzqgt/+ua4zpN
miUfIhlUbVa/7QUkQrzVn7GcR7CicW4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:17 2026 by rpki-client