
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa
File: a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa (raw, json)
Hash identifier: 68TrFk0RXXim+6QlXcy08k9Fzof+/q4rdiHBSWJyfr4=
Subject key identifier: 0A:1F:8F:E8:A5:2E:6E:79:E5:40:7F:2D:0C:38:2E:55:A0:03:64:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA17A8ACFDA8FB0857C7242C8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa
Signing time: Sun 26 Jul 2026 21:00:11 +0000
ROA not before: Sun 26 Jul 2026 21:00:11 +0000
ROA not after: Sat 24 Oct 2026 21:00:11 +0000
asID: 16625
IP address blocks: 23.49.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:7a:8a:cf:da:8f:b0:85:7c:72:42:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 26 21:00:11 2026 GMT
Not After : Oct 24 21:00:11 2026 GMT
Subject: CN=43e2ce75-9ffc-404b-be7a-7f7a60411f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:b5:9c:cb:f8:8c:10:89:25:5d:5d:01:8a:
e4:df:44:96:d4:ef:c6:9c:34:05:ac:69:63:d1:2d:
e6:58:e5:0e:15:84:f5:be:2b:08:fe:e9:77:b2:99:
db:1e:27:4b:2f:c8:8d:d3:79:ee:68:25:60:7d:17:
1e:1d:df:61:94:ae:ba:62:12:eb:55:64:ba:0e:65:
fa:6b:f0:67:57:9f:b2:fe:8f:d2:af:c0:4d:ae:63:
2c:64:93:a3:f4:52:47:c7:74:63:30:5d:20:e5:ec:
c5:ef:7b:1c:b2:3f:e2:ac:0d:f4:bf:a8:d8:c1:79:
30:32:33:74:b6:da:a0:f6:2a:dd:e1:e5:3a:16:59:
de:55:57:0d:58:03:67:7f:f6:2f:08:9e:07:1c:ba:
2c:49:b2:35:e5:0a:42:e1:27:df:09:ae:1f:67:c4:
61:1e:b6:60:17:5c:74:07:27:6e:b1:8e:e2:ff:d3:
42:95:53:05:50:84:5f:08:da:78:2a:93:8f:1a:4b:
02:a7:c1:74:2e:7c:88:19:40:bd:cb:3d:77:c5:1f:
57:0d:60:96:14:4f:af:fb:5a:52:f2:80:e2:bf:6a:
1c:6b:97:b2:89:a2:7b:08:32:11:e4:d0:95:37:7d:
ca:6d:f9:3c:d3:93:bf:21:10:32:e2:8a:9d:cf:dd:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:8F:E8:A5:2E:6E:79:E5:40:7F:2D:0C:38:2E:55:A0:03:64:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04a7e87-9ec9-34be-b8f1-1d2c30e08de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:0d:d8:9d:f4:a4:15:a1:78:d3:d4:21:a5:56:4f:48:84:aa:
40:50:cc:eb:b4:73:2f:b1:4d:df:c1:32:c2:74:b5:b4:98:50:
88:da:d2:6d:ec:e6:99:ed:94:49:15:9f:d4:c7:2a:aa:36:1a:
4f:a9:30:ef:b8:e7:bb:15:d6:8f:f1:f6:66:71:40:c1:5a:1f:
6a:36:f9:ca:bc:63:e2:eb:b0:04:d6:b6:15:0d:49:30:d7:07:
03:57:2d:1b:15:60:3e:89:24:67:b5:54:68:61:5c:89:35:27:
7e:6f:c5:d7:58:07:4e:28:cf:b9:36:e7:bf:11:9c:06:65:da:
33:90:cb:1b:dc:1e:9f:74:bc:2d:63:36:c8:17:83:5b:bb:7f:
2d:80:f9:51:9e:7d:fb:38:de:36:d3:69:06:e8:21:33:26:47:
91:af:56:81:5a:1c:ec:a5:0f:10:22:b6:02:f3:d1:3d:74:ea:
fe:29:ac:4f:79:a0:99:c8:13:07:6d:e0:56:d2:ef:e8:e8:5c:
5f:8d:9b:0f:c1:d9:3c:d5:b4:24:85:3d:9f:67:cd:6b:3a:6f:
ce:ca:1a:e8:92:60:aa:94:14:4c:f7:fe:79:0f:64:51:7d:e5:
39:e2:67:40:84:8d:b0:c9:ca:a4:5b:9f:57:4c:6c:4a:3d:97:
f5:e6:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:21 2026 by rpki-client