
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
File: a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa (raw, json)
Hash identifier: BvLSPMJg+hFxyNB6gOsh6Swq5CM8XlEZ2iHy+qryP0c=
Subject key identifier: AF:25:7C:D7:40:08:0F:22:14:3D:D9:15:2C:31:78:8D:B3:06:64:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E9BE51EC0CE5E965745C5A980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 16625
IP address blocks: 23.36.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:1e:c0:ce:5e:96:57:45:c5:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=f183a760-a974-42a7-b149-31360d9593cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:bc:1b:58:2f:b2:5b:0a:67:b4:70:db:a5:
49:ab:4c:df:d9:6c:19:75:12:2c:e1:24:cf:65:10:
18:2b:9b:6a:e6:35:51:a6:9f:33:d9:b9:81:2b:89:
52:b4:93:ef:76:80:35:03:3e:0f:95:9c:6d:44:0c:
71:07:a7:57:17:e7:30:19:88:a8:4d:57:b8:1f:6c:
f2:1f:46:2a:10:64:90:56:1a:14:01:c3:c6:ad:fb:
38:c7:25:e2:18:8d:98:8b:c6:03:92:4b:4e:ad:f7:
18:c2:a3:d6:e0:1b:c7:cb:4a:b9:38:5a:13:af:ed:
9c:e5:aa:53:bc:07:1f:f0:bb:41:f8:b0:41:7e:56:
b5:1b:59:d2:5d:62:46:0b:20:42:da:37:d6:41:ee:
e1:ef:1d:b2:77:0b:8e:c1:62:6b:98:06:51:43:4f:
6a:ea:0d:37:c3:f2:5c:92:5f:34:42:e6:9e:79:af:
71:7a:49:e6:11:24:ff:44:cd:37:75:7b:b2:2e:0e:
f8:a3:3c:db:b6:3f:fc:09:22:22:04:46:d5:45:81:
c6:29:1c:35:66:d6:bc:74:42:fa:6d:92:52:f1:27:
a7:95:62:ee:88:7f:04:5d:24:ce:a8:08:a8:31:a6:
e0:4b:f4:5e:14:57:d0:d8:8c:0a:62:a2:85:56:c1:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:7C:D7:40:08:0F:22:14:3D:D9:15:2C:31:78:8D:B3:06:64:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:94:55:63:f8:a0:b9:7d:37:46:25:72:e9:4a:55:20:8b:e5:
cc:32:8f:f1:d1:44:cb:43:0d:ce:d1:b5:a7:7a:ab:3f:0e:32:
85:e3:7a:3b:1c:a7:1e:9a:aa:93:44:4d:a8:b9:d0:77:ce:f5:
5a:84:17:9d:a0:d7:58:ee:00:11:cd:4b:30:2e:25:7e:5b:ca:
ea:80:05:a3:a8:4b:56:47:cc:3b:86:e5:2c:43:b3:40:11:b5:
fe:0e:e2:ab:1f:e8:fb:9d:51:bf:76:ea:ed:8b:2d:7c:fa:01:
1a:48:4b:ea:da:14:8b:04:b2:2b:e4:8a:b7:27:97:58:46:22:
ca:fc:34:e3:c0:de:6c:f7:bd:d1:d7:8f:32:9f:db:6c:a1:75:
c9:9b:24:fa:73:08:92:1b:35:12:78:d5:eb:4c:65:9f:14:8a:
0b:55:61:3f:da:bf:c9:fd:04:8b:8e:9f:e3:66:ec:eb:56:f2:
39:09:80:20:4d:23:ce:67:ab:c0:bd:87:e9:f3:5f:b7:84:6d:
90:30:7a:8e:c8:b8:1b:76:fb:43:96:e8:fd:11:78:b5:34:95:
6f:49:5d:65:25:f6:2c:df:4e:50:e2:fe:3b:b9:83:39:94:57:
79:a9:3d:cc:df:a5:65:29:e7:47:d8:eb:dc:3d:d8:94:a1:04:
18:ad:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:39 2026 by rpki-client