
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87f3616-85b5-3dca-8bff-fb5557036244.roa
File: c87f3616-85b5-3dca-8bff-fb5557036244.roa (raw, json)
Hash identifier: ZrbZ5SJvtD2ZyNciYaxB2bzk1rkjlUCuXiqfdkqG1/M=
Subject key identifier: F9:8E:17:14:31:85:69:5F:13:04:D5:0B:87:76:EF:88:88:CC:E4:CE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D037D312966AA7BC805054140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87f3616-85b5-3dca-8bff-fb5557036244.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 16625
IP address blocks: 23.193.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:31:29:66:aa:7b:c8:05:05:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=f42c6e84-d698-4490-8b21-ddb979559d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:28:b7:f7:99:0f:55:7e:49:b9:ab:60:a2:
f8:79:b6:50:30:7e:32:44:4c:a0:1c:47:f2:b0:a0:
da:5e:da:2e:d5:c9:0e:60:96:ee:37:1c:57:a0:a5:
1c:cc:6d:4d:ca:42:ad:dc:de:b2:6e:a9:09:4b:ce:
89:43:79:39:0b:aa:d6:34:2b:aa:f5:d4:f5:50:62:
06:b7:88:d8:33:de:9a:a9:17:f4:fb:c7:7d:f9:26:
dc:df:70:a1:78:98:ea:8a:71:82:b0:a3:3b:08:9a:
a1:72:c0:cc:3f:f6:17:be:5f:8e:ca:9b:5e:da:e2:
55:9b:9f:08:f8:5c:b1:d8:94:a1:a1:60:54:40:19:
34:4b:31:f0:82:6b:5d:fc:15:73:40:3d:ed:ae:c2:
8f:6d:b1:69:60:fd:f2:ad:43:8a:d6:5e:52:f4:70:
2e:9f:ba:e1:5a:bd:29:47:07:83:fb:e1:d4:75:d8:
6c:bd:60:fe:84:55:7a:0a:a4:6d:86:96:95:e6:db:
67:d8:02:ff:b6:cb:df:72:f8:ae:6d:73:05:34:21:
6f:6b:78:6c:68:f0:97:a4:69:75:5a:9e:e9:7a:bc:
00:39:7a:22:da:68:fe:9f:1a:00:de:11:a6:ac:51:
06:e0:84:03:1b:30:d2:5a:89:5b:32:3b:1d:96:cd:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:17:14:31:85:69:5F:13:04:D5:0B:87:76:EF:88:88:CC:E4:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87f3616-85b5-3dca-8bff-fb5557036244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:7f:6d:9e:9d:82:87:e5:13:30:74:b5:f4:cc:89:06:71:b0:
81:b3:02:a8:f9:6a:e6:94:f1:ee:ff:16:9c:75:5c:a6:6a:77:
e8:41:4f:ff:20:75:b9:d2:9c:bb:5a:a4:04:8a:fa:b7:29:1c:
29:38:86:7f:f7:67:b2:44:6d:52:65:b6:42:46:c0:8e:b2:33:
45:85:d3:0b:7f:a7:86:82:f8:07:1c:63:22:bd:70:07:2b:35:
23:a0:86:09:8f:0e:36:83:53:01:83:53:e3:d6:97:e8:e9:d9:
b8:da:59:43:39:33:8e:e5:f4:45:dc:b9:17:b7:13:76:2c:65:
01:ca:50:cd:7b:93:a1:64:c7:7c:ee:41:dd:6e:df:1c:6d:04:
bf:42:a2:be:61:76:68:6e:b2:b1:39:6e:7e:d6:c2:61:43:22:
9a:d6:b8:4d:a1:66:11:92:07:6a:a4:fa:4b:81:d2:0b:d3:03:
7c:57:8c:df:16:98:e5:66:ba:7e:6d:70:c1:34:61:41:e8:71:
e3:d1:bb:f2:4a:2f:3a:51:ae:ba:51:f9:20:b5:24:cf:c1:b0:
c5:79:c7:90:f2:75:f5:89:f5:44:b4:35:61:92:1f:63:e4:7a:
dc:3b:bb:a7:d9:fb:43:4d:af:20:89:a3:47:a0:da:8f:16:47:
d0:f2:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:04 2026 by rpki-client