
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa
File: 99040fbd-052b-3815-9f8d-3f48368c2a90.roa (raw, json)
Hash identifier: BuTMVIkSzw6Hc2LQAljrNbJSYLPuaXV170TjJNrzaJE=
Subject key identifier: 01:73:B7:9B:CF:7B:73:0E:9C:8E:AF:1B:FC:C8:CB:D9:42:17:48:9B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D87FA8D401292B3393D8A0960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa
Signing time: Fri 17 Apr 2026 01:00:27 +0000
ROA not before: Fri 17 Apr 2026 01:00:27 +0000
ROA not after: Thu 16 Jul 2026 01:00:27 +0000
asID: 16625
IP address blocks: 23.1.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:fa:8d:40:12:92:b3:39:3d:8a:09:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Jul 16 01:00:27 2026 GMT
Subject: CN=7f750ded-f544-4ec9-9517-78acbf047565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:36:b4:cc:f2:89:ea:52:65:b0:56:6d:2c:
44:e0:e4:4d:16:a3:13:14:37:80:b4:a0:65:73:24:
a7:00:15:17:b4:48:8f:77:02:e9:cf:10:4e:fa:44:
2a:c1:9f:b5:5c:9a:49:99:4c:d1:7c:6d:1d:b5:ae:
48:74:23:fd:05:42:dd:57:2e:40:ed:5a:77:2a:d4:
fc:25:2e:b8:c7:9f:ad:54:7c:ad:ed:67:31:ac:e9:
92:36:64:e6:39:fe:66:73:09:70:02:b1:fc:6c:b5:
9d:7d:a7:25:d6:26:c4:3b:85:0c:4d:8e:76:47:d0:
e3:ca:85:c6:13:17:73:48:5f:97:78:d4:bd:ba:94:
37:87:65:a1:9a:dc:f5:85:12:44:65:ff:ba:35:3d:
af:74:52:bf:93:c2:52:5f:10:4a:56:16:56:1f:ac:
bf:5f:58:1c:22:c2:67:83:75:11:ab:3f:0b:c2:f5:
78:17:68:c4:18:46:87:da:c4:d6:56:2a:3d:5c:a9:
ab:56:31:74:db:ff:4a:c3:01:a9:7a:da:a3:d1:77:
42:a2:ce:93:c7:88:c3:a9:54:9d:6d:36:58:bb:95:
bf:0f:eb:07:39:54:b4:d2:76:42:7b:38:40:b9:43:
eb:2f:9d:2c:a5:a2:33:3d:a0:08:9b:36:b7:db:d5:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:B7:9B:CF:7B:73:0E:9C:8E:AF:1B:FC:C8:CB:D9:42:17:48:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.1.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f3:7d:c1:46:4d:ef:95:b0:6c:7c:6c:02:fe:35:79:a9:4f:
e8:43:f8:fe:d8:ce:ba:b8:59:34:0f:e0:63:8f:eb:0e:5f:e2:
3e:52:2b:3b:fc:eb:24:c2:d2:2a:e0:17:56:46:8d:2e:50:09:
01:c1:b2:34:31:b7:2b:50:d6:53:5a:c7:e0:37:8c:70:48:29:
d8:7d:64:cb:47:a5:7c:eb:3c:b0:1e:4a:30:7b:6a:10:1d:30:
24:d5:64:f5:5d:07:87:43:55:f8:a3:32:45:35:00:58:0c:51:
67:4a:45:eb:30:3a:f4:b0:49:3d:fc:44:3c:85:5c:6a:b2:14:
c1:09:53:4e:9e:e7:3a:dc:08:b9:52:82:b4:29:fe:ae:12:0b:
91:68:ae:42:0e:8c:b5:a7:de:5b:42:4e:50:5b:c1:44:87:80:
3c:bf:fc:44:78:9a:a3:7f:d5:63:d1:88:2e:0f:71:2e:08:e6:
da:0c:9c:85:de:1a:d4:a8:12:4a:d4:34:e5:6e:1e:4c:f1:0d:
dc:93:21:71:df:24:8a:31:4f:6d:d5:86:d9:31:e1:93:74:f3:
73:2d:b9:41:c0:9d:99:99:e7:c8:2d:57:c2:f8:e1:f3:cb:0a:
55:9e:7d:c5:e2:bf:07:8a:e5:60:e7:b9:d0:55:49:6e:d3:74:
9f:96:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:27 2026 by rpki-client