
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1219d75-0c60-338a-b120-9731cde96f5e.roa
File: c1219d75-0c60-338a-b120-9731cde96f5e.roa (raw, json)
Hash identifier: Dq1QHaVOXYjr/fnUnM8+yob9F5rHPcuS/7sX/pGC6KY=
Subject key identifier: 40:21:84:E2:48:50:CC:BA:03:35:33:E3:01:56:AD:75:D1:82:1E:D8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E1E444A2CD5E4AF2E46FB3240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1219d75-0c60-338a-b120-9731cde96f5e.roa
Signing time: Tue 09 Jun 2026 21:00:12 +0000
ROA not before: Tue 09 Jun 2026 21:00:12 +0000
ROA not after: Mon 07 Sep 2026 21:00:12 +0000
asID: 16625
IP address blocks: 23.222.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:44:4a:2c:d5:e4:af:2e:46:fb:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 9 21:00:12 2026 GMT
Not After : Sep 7 21:00:12 2026 GMT
Subject: CN=5ae533cb-6baa-4118-a8c7-e3a5549b1619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:a4:26:03:96:02:a5:bd:09:98:35:b6:05:
cb:d1:e6:00:2b:af:55:5c:e9:8a:97:5b:37:69:83:
ea:6e:2d:03:4f:95:96:3f:85:4b:e0:08:b9:16:9a:
75:88:69:79:00:bc:e4:80:9f:12:0a:7a:6a:0b:fa:
9c:d6:3e:76:90:b3:47:64:ab:51:5a:a2:ce:c0:f2:
8d:97:6b:14:1d:16:d4:f9:7a:e9:3f:60:95:02:33:
8e:fe:2a:b5:f6:76:10:d4:84:1a:4e:08:e7:ff:62:
77:49:b8:e9:68:12:ba:d8:ba:77:61:1f:0d:16:27:
da:b3:53:14:94:dc:fc:88:79:e2:44:33:cb:6f:9a:
71:9f:15:bc:24:3b:a1:72:58:e9:cd:10:6e:73:d9:
15:4e:52:76:dd:6c:ca:17:e0:bf:3d:13:aa:51:36:
e3:90:d2:3b:e4:43:ce:70:4c:c3:c0:2b:6f:00:35:
51:f2:13:0f:a4:cc:99:73:9e:05:15:f6:a7:c9:4b:
a7:fc:45:e2:e6:2d:43:ee:43:77:fd:31:75:80:54:
ca:c4:c8:ce:93:26:9d:fb:e8:a5:20:48:00:06:c6:
a8:d3:bf:50:fe:3f:1a:82:e8:58:99:29:6f:cf:ee:
5b:f3:a2:e9:ff:48:cf:bb:8a:97:96:cc:36:16:64:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:84:E2:48:50:CC:BA:03:35:33:E3:01:56:AD:75:D1:82:1E:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1219d75-0c60-338a-b120-9731cde96f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:be:3a:cd:cf:50:38:35:93:9f:60:d2:2f:ff:b1:a7:8d:f5:
d1:15:ef:84:f1:24:3f:50:ce:e4:fd:05:08:20:11:ae:35:04:
86:f1:c2:81:b5:16:6b:dc:0f:29:d3:e6:1f:d4:21:f1:17:b8:
9f:27:4b:cd:c5:00:04:79:8b:d9:5c:7f:dd:56:f9:7b:b4:23:
82:ad:4b:cc:cf:2f:bd:d2:11:c9:6e:d5:7d:25:45:d7:bf:61:
4b:95:ef:39:21:6b:f3:c1:de:6d:1a:c3:55:93:40:47:0b:bd:
b6:69:be:3a:5a:8f:88:00:12:33:a6:32:39:39:1d:f9:d8:1a:
7e:5e:5f:89:92:b0:6d:88:60:67:26:be:ef:c3:89:20:4b:f1:
53:64:5d:9a:11:37:22:41:46:8d:2d:82:92:b0:50:a0:6c:8e:
e3:07:3c:98:91:1f:d4:de:9c:0f:62:3b:64:75:da:5a:be:ef:
61:b0:15:44:ba:ba:a5:94:4b:0a:41:a2:ac:5a:f6:19:82:7c:
f7:bc:1b:cf:47:1e:54:c2:fb:be:11:b0:3c:e4:54:cf:95:95:
05:5a:d1:2f:b5:fc:6e:98:97:96:28:49:b9:75:26:83:45:d3:
03:b1:18:ae:9e:93:54:88:6d:21:0a:86:cd:a7:11:49:c8:6e:
4e:9c:02:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eREos1eSvLkb7MkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
NWFlNTMzY2ItNmJhYS00MTE4LWE4YzctZTNhNTU0OWIxNjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+GkJgOWAqW9CZg1tgXL0eYAK69VXOmKl1s3
aYPqbi0DT5WWP4VL4Ai5Fpp1iGl5ALzkgJ8SCnpqC/qc1j52kLNHZKtRWqLOwPKN
l2sUHRbU+XrpP2CVAjOO/iq19nYQ1IQaTgjn/2J3SbjpaBK62Lp3YR8NFifas1MU
lNz8iHniRDPLb5pxnxW8JDuhcljpzRBuc9kVTlJ23WzKF+C/PROqUTbjkNI75EPO
cEzDwCtvADVR8hMPpMyZc54FFfanyUun/EXi5i1D7kN3/TF1gFTKxMjOkyad++il
IEgABsao079Q/j8aguhYmSlvz+5b86Lp/0jPu4qXlsw2FmSe8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAhhOJIUMy6AzUz4wFWrXXRgh7YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzEyMTlkNzUtMGM2MC0z
MzhhLWIxMjAtOTczMWNkZTk2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF974MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABC+Os3PUDg1k59g0i//saeN9dEV74TxJD9QzuT9BQggEa41BIbxwoG1
FmvcDynT5h/UIfEXuJ8nS83FAAR5i9lcf91W+Xu0I4KtS8zPL73SEclu1X0lRde/
YUuV7zkha/PB3m0aw1WTQEcLvbZpvjpaj4gAEjOmMjk5HfnYGn5eX4mSsG2IYGcm
vu/DiSBL8VNkXZoRNyJBRo0tgpKwUKBsjuMHPJiRH9TenA9iO2R12lq+72GwFUS6
uqWUSwpBoqxa9hmCfPe8G89HHlTC+74RsDzkVM+VlQVa0S+1/G6Yl5YoSbl1JoNF
0wOxGK6ek1SIbSEKhs2nEUnIbk6cAhE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:15:53 2026 by rpki-client