
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a960ff1a-4a7e-3fd9-bfd4-40c7a0f0b8dd.roa
File: a960ff1a-4a7e-3fd9-bfd4-40c7a0f0b8dd.roa (raw, json)
Hash identifier: nniuPdg9DOq0kXSdEZfyZ7iigfLQ4nqGbIFqQeuw+k4=
Subject key identifier: 2C:F3:CB:32:36:31:6C:7A:12:5E:EB:24:D9:82:E6:CF:5B:04:74:9E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA01559E8FC47BFFBCC16A500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a960ff1a-4a7e-3fd9-bfd4-40c7a0f0b8dd.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 16625
IP address blocks: 23.48.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:59:e8:fc:47:bf:fb:cc:16:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=be32d6bd-27a3-4792-85ca-fafe154d7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:66:31:a6:47:c5:d9:bf:74:7e:71:bb:67:
0e:cf:10:56:56:bf:b2:5b:7e:0a:da:81:65:27:dd:
36:98:2b:81:fd:90:82:82:7f:96:a4:dd:16:03:c8:
e5:13:e0:c8:6a:00:64:67:1e:a8:70:88:83:da:ab:
d4:aa:fb:d0:e6:cd:55:4c:0a:85:4e:88:76:c0:6b:
e9:d0:da:6f:e3:88:c0:5a:f8:93:21:2d:1d:9e:66:
8e:59:be:82:6f:7a:83:98:2e:b5:33:af:a7:44:e6:
eb:0a:09:40:01:f5:cd:03:76:03:ff:b0:c0:87:03:
1a:bb:5f:5f:9c:20:7a:4c:c1:84:40:24:1d:90:0c:
09:7b:d1:d2:0e:ed:61:a3:2d:0e:c6:b6:51:99:c2:
5e:b5:7c:92:77:2b:92:8d:c2:0c:c3:49:e0:a0:a4:
19:3e:5c:1c:39:1c:5b:09:c9:65:dd:31:75:25:c9:
e7:f6:e8:f7:72:7a:9d:3a:27:ce:7e:cb:3d:6a:32:
a0:da:20:f6:bd:3c:8d:16:eb:5b:0e:16:4c:e5:66:
54:94:b1:e5:70:ad:e7:aa:6a:e5:ca:5b:13:81:5d:
9e:99:a2:49:b4:ed:3d:ae:aa:d6:4e:17:5a:a6:4c:
f3:c9:22:69:e1:4f:11:61:72:53:04:dd:b7:8b:d0:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:CB:32:36:31:6C:7A:12:5E:EB:24:D9:82:E6:CF:5B:04:74:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a960ff1a-4a7e-3fd9-bfd4-40c7a0f0b8dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.48.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a9:f8:11:53:0d:2b:c3:69:23:96:6f:84:03:a7:02:65:b0:
64:07:2e:e0:72:aa:05:66:51:f9:ed:1e:74:0f:2a:d0:4b:f6:
bb:0a:86:3e:f2:44:71:20:ea:b2:e8:c0:13:74:78:f5:e4:bb:
95:2f:0b:70:cf:e1:6f:50:66:47:43:a7:ee:50:06:96:a4:56:
dd:d0:d5:e3:4b:66:f1:70:cf:30:22:aa:75:ce:b4:e9:80:61:
be:1f:37:d5:05:0d:5b:a0:4f:a2:07:04:f9:4d:dd:89:06:33:
69:51:92:77:7f:66:d2:6e:f2:2a:0b:f3:97:bd:99:7e:af:a8:
69:07:7d:3f:f9:28:79:8d:44:b3:19:e6:bf:1e:9d:07:09:aa:
02:41:2c:58:6d:4b:28:8e:4e:2b:19:d8:a6:db:e2:fe:8a:26:
7d:e9:cb:c1:78:70:3c:ce:97:bf:a7:c1:56:cf:9d:83:a8:ef:
06:10:3c:55:11:e4:dd:3e:f7:66:e7:51:98:b0:1b:ca:e0:0c:
c6:b9:c4:9c:d0:26:14:cd:7a:63:77:40:cc:b3:c1:36:91:e9:
41:87:81:5f:73:21:de:9c:a7:1e:da:b5:d9:b0:ee:8a:28:1b:
00:72:9b:d2:f4:05:a2:a0:6b:a6:e0:26:d8:7b:2f:2d:f1:b2:
b8:84:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:55 2026 by rpki-client