
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa
File: 85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa (raw, json)
Hash identifier: 8Oe/NdcQ1vwj4NGethsSje1+9OOtwlRa1pEhuDnH+EQ=
Subject key identifier: 10:8A:4D:C2:E6:4E:61:AB:DA:3E:04:DC:06:5C:30:94:D4:7B:14:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E9BE52AE419072CE512AD3200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 16625
IP address blocks: 23.40.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:2a:e4:19:07:2c:e5:12:ad:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=73aa46ee-40da-4d60-9dcc-b0aed2eec6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:e4:1c:1a:56:17:73:4b:e4:e7:74:82:94:
4b:e4:16:d5:67:d5:18:33:e9:60:81:bb:ff:a5:83:
51:13:0b:45:98:7c:3d:5b:54:26:dc:c8:19:5e:24:
6e:02:62:27:56:6c:48:11:37:06:8c:07:7b:ae:9f:
a7:ef:7f:9a:ac:67:64:4d:bb:b3:c7:77:7c:4b:44:
73:60:9d:f1:4a:66:d7:fc:92:d9:cf:99:8c:52:15:
ac:fe:6a:c5:7b:b2:96:47:88:ff:ba:83:74:07:34:
d9:37:89:f2:2a:7a:4c:ea:16:d7:f9:91:01:ec:12:
52:de:09:7b:48:12:11:22:36:92:e8:f7:89:1b:84:
86:ce:66:96:12:24:a5:41:b6:69:98:8f:02:1c:08:
66:5b:7a:e5:fb:41:64:70:b4:2a:67:ab:63:6e:99:
79:3b:9a:47:93:f8:2d:ca:82:6c:af:00:28:82:2f:
2b:d3:14:80:2d:4c:20:b9:77:61:73:59:8f:a3:67:
f2:6d:09:33:20:78:08:3a:9a:23:0e:98:84:2b:be:
8c:84:ed:7c:ab:e7:5b:76:a9:38:68:4f:d0:9b:d3:
e9:f7:2e:77:15:bc:ae:92:2b:20:80:20:61:ef:b8:
98:7a:38:55:14:a5:66:55:a2:dd:36:fd:00:94:a0:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:4D:C2:E6:4E:61:AB:DA:3E:04:DC:06:5C:30:94:D4:7B:14:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85575f91-c5fa-3c53-ace1-5ed7ac20b44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:83:4b:54:bd:4f:85:cd:51:fe:3a:2f:c8:17:65:d3:e5:89:
54:00:30:7e:f4:b0:b2:f6:4b:9c:b0:19:1c:51:0a:01:84:c8:
8d:e7:8c:4a:4e:33:01:6b:8e:cc:f7:02:93:ac:ca:93:85:07:
27:5d:e1:eb:de:4d:c5:98:fe:1b:ef:9d:65:d4:79:75:e2:fe:
d4:0e:8f:8b:8a:d3:a1:8b:4c:81:de:45:8f:a0:60:92:f8:95:
9e:ab:70:e4:a6:01:27:bc:5d:65:f2:84:a1:60:0c:44:44:8c:
5a:43:f5:79:f6:85:e4:64:80:ee:31:53:3b:ae:df:1e:eb:dd:
b2:24:d4:60:10:52:27:fa:cb:0e:d7:5b:f6:9a:f8:63:27:98:
9d:41:58:77:7d:c3:d0:37:35:82:9c:20:cf:77:43:23:f0:28:
e3:4c:7a:2e:be:7c:24:36:24:cb:98:73:2f:ca:e9:fb:bf:d4:
58:29:4a:a2:05:fc:5b:62:4b:09:d1:33:ea:d5:f3:2a:5d:24:
8e:cf:38:68:43:53:e6:e2:9f:77:16:28:bd:c2:39:26:2f:3d:
3a:86:8f:94:47:09:bf:e1:13:0f:b2:7f:7d:86:2c:5c:f0:e5:
ad:96:4e:cb:21:1a:78:e3:ba:e7:1a:de:62:73:f4:3a:c7:45:
a2:1f:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:08 2026 by rpki-client