
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa
File: 88da4a9b-a078-3908-bd52-ada1e01420fc.roa (raw, json)
Hash identifier: QB4oP+7F83aCDK1HHGbVz+lQh6p99v4j2Hw25w/X+qI=
Subject key identifier: 56:25:29:28:6F:8B:70:D6:25:D8:AB:59:CD:33:4D:0D:CB:8B:F0:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584AFEE6B7861A51CB42B9CC4D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa
Signing time: Wed 27 Aug 2025 13:00:41 +0000
ROA not before: Wed 27 Aug 2025 13:00:41 +0000
ROA not after: Tue 25 Nov 2025 14:00:41 +0000
asID: 20940
IP address blocks: 23.50.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fe:e6:b7:86:1a:51:cb:42:b9:cc:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 27 13:00:41 2025 GMT
Not After : Nov 25 14:00:41 2025 GMT
Subject: CN=6936f21e-99b7-421d-8b75-7bdbc3029a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:a9:d8:8a:35:dc:f0:37:c2:ec:a3:32:72:
54:dd:f8:6d:ac:c8:82:9d:d2:13:15:8b:b8:fe:32:
ee:00:c5:38:5a:7a:69:6b:5e:73:56:88:de:81:a1:
83:f1:fc:34:52:5f:81:30:b0:77:b3:8c:fd:36:ab:
68:fb:0f:a1:fb:c6:6c:2d:92:fd:a9:d8:f7:b5:9b:
9d:5e:86:ec:c5:90:50:ce:bc:f4:6a:9e:a9:71:0d:
11:04:c2:90:d3:de:ac:6a:73:48:fb:2a:0b:6a:8b:
35:13:71:74:4e:12:0a:58:af:a6:39:b6:9a:ef:5c:
78:e5:d5:cb:75:34:a6:29:52:a2:b7:3c:73:1c:bc:
7c:4e:59:45:d4:bb:a2:ce:88:4a:04:69:53:a5:27:
db:ff:39:32:07:60:56:5d:83:54:c3:99:ee:84:ba:
ac:b7:eb:a8:4c:31:6d:3a:11:8c:68:6c:43:93:e9:
ff:54:05:1a:c8:c6:fa:9e:f2:70:f3:42:91:33:b6:
c4:7d:25:95:4f:77:c1:a4:83:d6:0a:62:de:b6:c7:
ab:7d:05:c0:7e:62:84:64:49:ad:1f:29:61:d7:b5:
d1:e1:eb:d2:4d:9a:e4:ef:fd:d8:97:eb:40:8d:1d:
6f:0e:fc:48:0d:d0:cd:ca:a3:ff:63:f7:1d:14:6b:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:29:28:6F:8B:70:D6:25:D8:AB:59:CD:33:4D:0D:CB:8B:F0:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:29:ea:35:66:0a:80:45:ae:83:5e:46:17:f4:60:5d:94:76:
08:00:ca:62:15:13:99:4d:5f:70:17:e8:71:24:93:76:ce:e3:
a2:bd:87:b3:4a:6b:b5:29:85:cf:f0:c4:6e:3d:9e:47:10:99:
cb:ee:27:e5:8b:1b:7d:58:c7:2a:7a:12:b3:cf:62:55:97:16:
a6:6f:fb:00:f6:6e:20:18:69:33:21:1e:4d:e0:0b:17:21:b9:
42:41:5c:ff:53:b4:28:15:29:fa:83:91:6e:ce:81:96:29:a2:
50:6a:87:6b:66:3c:c3:74:32:d0:4a:e7:22:f2:80:da:92:7e:
05:5f:66:08:8f:93:79:8a:67:9c:d1:c0:4e:e6:f1:c5:8b:ae:
de:f4:ad:f1:58:bc:48:e0:b9:70:47:85:35:90:1b:1b:d7:52:
1b:b6:22:18:0e:80:cb:b1:0c:f8:e5:2f:03:37:7b:8e:3d:05:
81:d9:d8:77:f1:7b:bd:fe:ac:0d:4c:ab:56:18:0e:38:d1:27:
a2:85:58:45:04:8d:44:6e:e6:2e:09:83:4d:ee:a4:fd:98:a8:
ff:22:72:07:31:bd:33:14:2f:df:80:96:db:b9:53:bd:e3:43:
2c:45:b8:22:c1:6a:17:f0:6a:42:d2:e7:4f:8d:60:12:aa:ff:
01:e8:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:40:45 2025 by rpki-client