
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa
File: ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa (raw, json)
Hash identifier: HH1Cs0RrTIm5KMShj/lQpZYfUZRK7+qW7gG+4uX/eDo=
Subject key identifier: 89:DE:C0:B1:0F:89:8F:7D:38:70:01:13:32:1B:1E:6F:5A:67:B9:E9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CB981DFF9A9A0159B82A24DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa
Signing time: Mon 02 Feb 2026 02:00:32 +0000
ROA not before: Mon 02 Feb 2026 02:00:32 +0000
ROA not after: Sun 03 May 2026 01:00:32 +0000
asID: 4780
IP address blocks: 104.123.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b9:81:df:f9:a9:a0:15:9b:82:a2:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:32 2026 GMT
Not After : May 3 01:00:32 2026 GMT
Subject: CN=ef37c4ff-9298-4784-bcb3-dda955f29783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:07:18:ad:b6:3e:1d:af:07:e7:d7:77:45:
03:c0:1e:d8:00:f5:60:bf:ff:d3:bd:19:f8:02:d8:
bf:42:fa:08:10:8f:ed:75:47:7d:24:29:9a:eb:8a:
02:72:4d:61:01:fe:e5:a4:74:81:e3:5b:ec:48:87:
0d:da:7b:3a:72:8c:ea:4d:e6:e3:07:50:0e:d4:cf:
ac:f8:c5:16:41:17:59:a2:59:90:f2:ac:5a:de:50:
54:91:16:3f:47:51:63:9e:e6:41:7a:c9:d6:94:17:
1e:80:66:29:42:57:89:e5:15:36:ee:58:5d:e8:64:
cd:76:78:c3:2b:39:63:f7:d3:57:f8:38:2f:f1:09:
9d:db:7c:46:00:77:51:e5:ff:36:75:0d:2c:0f:0a:
56:cd:cb:e8:ce:38:26:91:85:41:c2:32:2a:d4:16:
24:7d:fb:f4:54:01:2b:56:e8:f4:a7:32:b3:fb:50:
dd:1d:8f:05:d1:f4:96:d9:7e:42:d7:95:5d:df:6a:
a6:39:44:e4:c4:86:f7:bd:db:d3:4c:0d:0b:cb:d5:
06:d3:a2:c5:de:dd:8a:70:51:1d:f8:fb:03:31:0e:
f9:1d:4d:74:4b:ef:e8:97:76:ba:66:57:db:d9:60:
be:71:db:d7:cc:cc:0f:80:ff:2a:0c:e9:7c:61:4a:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:C0:B1:0F:89:8F:7D:38:70:01:13:32:1B:1E:6F:5A:67:B9:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:69:2b:cc:32:70:6d:a3:4c:5f:98:d5:49:8b:e5:5f:36:58:
ef:28:0e:5e:d6:69:c6:f5:fd:81:17:f1:ea:b1:ee:0c:db:06:
15:a2:eb:f2:2f:e1:83:bc:0f:f2:95:38:dd:cb:6a:f3:e6:92:
7a:03:e3:25:74:b0:76:79:10:81:c0:72:cc:7f:f9:e8:3a:52:
d7:59:fc:dd:ee:7e:82:ad:b5:26:70:0b:11:ac:0d:0c:a6:e1:
1b:85:e8:46:38:23:f9:99:c7:99:49:fd:c0:2b:53:04:26:ac:
8c:a6:0d:14:46:a9:81:d3:40:8d:07:5a:b0:c0:0d:50:26:95:
e1:1e:3e:e6:f3:8e:83:d4:dc:5c:f5:d3:6d:57:d6:ca:88:6a:
67:b8:66:18:6d:88:76:76:b4:ab:b0:48:9d:b8:67:f9:32:f2:
c3:a3:51:f6:0a:f5:97:4c:ab:9a:de:24:42:9d:1d:4f:0c:3a:
73:55:10:07:19:76:7c:41:61:6f:8a:fa:96:73:e2:f0:22:20:
da:fd:f0:49:09:53:27:11:ec:64:7f:5e:59:fa:ef:2e:31:5f:
bc:c4:2c:9a:2d:08:04:3d:b7:17:6b:a0:2a:6b:89:48:88:fd:
44:dc:bd:c7:b2:84:1b:02:fa:de:25:6a:e1:14:d6:3e:2a:7a:
e9:07:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:36 2026 by rpki-client