
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa
File: 9619a71b-fbc5-38e8-bbb8-a1d975791119.roa (raw, json)
Hash identifier: gTPni+o/2cc4hOCqsYG8bM+Z+Uxr7FZ1BSWz3amiR94=
Subject key identifier: 67:37:82:DC:F4:5B:EC:CE:98:16:7E:40:46:48:13:25:4A:D8:FC:7F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CEE8CD1E72F5161AAF4244080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 20940
IP address blocks: 23.63.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:d1:e7:2f:51:61:aa:f4:24:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=5863c2b4-6025-4346-84f0-48a81a8f173b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d6:d2:0a:db:c4:ee:0b:6e:08:be:24:d8:ae:
50:2b:ee:c9:d7:e3:d4:78:f7:8e:59:15:07:43:74:
af:d8:d3:34:08:9b:c4:ab:dd:d3:3b:9f:fc:b6:0a:
0a:ef:dc:82:1b:46:e7:66:a6:8e:60:c6:b0:ab:83:
06:10:40:6d:67:87:d1:8f:17:9c:2a:03:9b:06:4d:
3d:e5:30:35:0d:fb:5a:b2:38:e8:7f:6b:d6:a5:b2:
f7:2f:af:de:29:9a:ff:26:08:4f:10:f6:8a:8c:91:
d6:f4:8b:a2:f9:c9:2b:e0:a5:09:1f:2d:76:93:81:
8c:6f:6f:37:39:c0:91:ab:99:64:88:9b:3c:4a:22:
9a:15:65:47:03:37:de:75:a7:3e:9a:36:db:d9:3c:
27:b6:e4:6a:f6:f4:44:22:83:80:f4:75:0d:80:17:
ac:e7:de:ed:5f:51:0a:eb:98:58:1f:da:4a:57:bf:
f0:31:d1:6a:3d:a9:26:19:fb:bc:f8:af:de:b3:aa:
be:85:44:ed:ab:1e:0c:dd:ac:39:9c:11:41:26:db:
61:39:4f:27:21:34:9f:7a:6a:90:be:c9:6a:38:91:
c6:e2:67:e6:86:d3:6a:f6:d3:03:52:10:50:cf:7d:
88:ce:06:e2:28:d6:8f:1b:cb:1b:e5:25:8c:da:e9:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:82:DC:F4:5B:EC:CE:98:16:7E:40:46:48:13:25:4A:D8:FC:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9619a71b-fbc5-38e8-bbb8-a1d975791119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.63.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:aa:5e:2c:cb:23:ca:72:a2:cd:cf:f9:8f:2b:eb:ba:15:19:
e5:16:96:fe:e7:09:5e:f7:9d:df:ed:61:c9:e5:81:32:91:d9:
1b:d2:1a:18:37:a3:e0:38:6e:48:19:71:58:2b:ea:3a:64:e6:
01:ab:f9:77:e4:6b:67:5f:0b:d8:b5:8a:82:40:63:ae:e1:6b:
04:dd:e9:68:2f:fa:89:ad:dd:be:33:c6:6b:2d:a5:81:31:f5:
33:33:ed:74:44:69:3f:6c:78:c1:81:9b:f4:22:e3:ae:eb:6c:
ef:51:77:0e:ca:38:ac:2e:25:ee:06:84:93:73:c6:e7:07:ba:
e3:ea:52:60:d1:16:ca:a9:34:04:03:55:88:e9:e8:38:ca:51:
8b:85:17:d2:db:9b:29:d0:d7:e3:ff:36:dc:b0:76:a1:31:4f:
5c:6e:15:6f:6d:dd:86:27:43:4e:f0:b5:12:a5:a2:4e:43:1b:
71:fe:28:3d:d8:ca:6c:65:8f:51:2d:54:e0:58:a5:c5:76:b7:
c1:fd:5a:9d:4e:04:30:cd:30:3e:cc:43:b0:09:e3:ed:5c:de:
b2:a7:f6:e3:07:b5:73:97:7b:3f:93:48:71:31:e8:6b:27:57:
42:8b:aa:00:71:43:8d:fd:5e:5e:a3:f4:a1:e3:8d:f2:a8:68:
a4:17:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:15 2026 by rpki-client