
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa
File: c89999ba-0996-384f-bcec-b5fd7e66af22.roa (raw, json)
Hash identifier: GrrZWMRi/rUsCyKBxB3+rZf4K7b+dRvzVdGQdezKnsE=
Subject key identifier: 96:D3:28:DB:BB:F9:4D:4E:2A:BD:21:C8:CB:9E:AD:C9:53:37:38:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E0C1EE7DA187EFA3D41C4FCA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa
Signing time: Wed 03 Jun 2026 09:00:13 +0000
ROA not before: Wed 03 Jun 2026 09:00:13 +0000
ROA not after: Tue 01 Sep 2026 09:00:13 +0000
asID: 16625
IP address blocks: 23.221.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0c:1e:e7:da:18:7e:fa:3d:41:c4:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 3 09:00:13 2026 GMT
Not After : Sep 1 09:00:13 2026 GMT
Subject: CN=1f957b33-47c0-431c-b152-83fd01fdf6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:7b:8f:7f:64:e2:84:30:d9:4f:b5:bb:4a:
34:45:da:a7:a3:ef:23:b1:84:a1:6d:67:ab:2c:24:
61:50:46:88:db:dd:fc:74:32:1d:b4:ef:7b:91:41:
f4:d6:f8:24:7d:3b:02:ff:e1:68:87:9c:aa:3e:06:
3e:93:fd:f8:d5:fa:5f:13:76:b3:52:34:d9:1b:91:
f7:43:be:66:75:7d:fd:bc:36:c1:a3:50:9e:f5:7f:
7c:e7:4f:05:53:b2:92:54:5d:78:0a:f2:3b:11:e8:
4a:78:76:88:bc:23:9b:29:e0:87:df:36:da:43:94:
51:8a:6e:90:d9:49:56:39:a2:1a:99:fa:b4:2c:c0:
eb:d9:ed:2c:5f:d0:8c:59:42:ff:a9:06:57:5b:75:
6f:f7:e3:6b:01:bc:4c:17:b3:5c:fb:b9:e3:bc:8f:
20:d2:51:4d:77:77:a6:a3:50:22:eb:82:aa:6c:50:
60:ea:6e:ad:18:89:1c:40:24:bc:d8:f4:ad:71:fb:
b3:24:ad:69:fb:fb:99:33:e0:cf:eb:77:d9:f7:67:
6a:a8:5b:96:91:a2:93:b8:29:c2:1d:10:43:fd:61:
a1:77:10:0c:7e:b9:5f:07:7d:b7:b0:17:63:ea:b0:
b7:7d:9f:36:86:78:b6:02:b6:e2:ea:f7:cd:7b:f8:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:28:DB:BB:F9:4D:4E:2A:BD:21:C8:CB:9E:AD:C9:53:37:38:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c89999ba-0996-384f-bcec-b5fd7e66af22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fd:81:95:9f:31:ff:b2:41:4c:19:2f:41:16:05:18:25:1c:
b2:2d:40:07:a4:0e:32:20:ef:36:97:19:70:0e:c6:dd:50:2f:
a0:a2:b8:2d:18:20:82:40:69:4a:0c:44:f1:51:92:d9:c0:c1:
5a:9a:b3:f7:49:d0:36:26:30:2b:f4:30:41:c6:b6:90:62:d9:
3e:d2:56:b0:60:fb:06:29:54:da:8c:70:9e:1b:66:de:f4:ca:
84:6b:02:68:41:30:d8:11:0a:af:d9:94:98:aa:31:12:92:e6:
8c:0c:ec:1f:1d:a0:87:f4:a4:87:9a:c4:1c:b1:ea:db:b0:99:
4d:cb:0c:f2:8c:08:62:33:b2:01:a6:eb:0c:9c:a1:ba:d8:9c:
b6:c6:1c:0b:9d:40:0a:30:ff:a7:38:c8:b9:13:51:4a:9d:7b:
8e:05:98:d2:ed:c1:46:90:c1:38:8c:94:56:40:cf:cf:03:2e:
f2:86:72:f6:01:a7:7d:6b:50:05:f2:cb:0e:9c:c0:d8:31:85:
99:8a:05:d7:f6:b8:c8:61:43:e8:e0:98:60:95:65:de:0a:9d:
2f:05:05:45:93:fc:1b:cd:3f:92:55:d3:02:30:cf:cd:c3:79:
b3:b9:1a:4e:4c:60:13:97:09:1a:a4:2f:9f:ad:78:a3:a3:83:
06:fe:61:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHufaGH76PUHE/KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
MWY5NTdiMzMtNDdjMC00MzFjLWIxNTItODNmZDAxZmRmNmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvad7j39k4oQw2U+1u0o0Rdqno+8jsYShbWer
LCRhUEaI2938dDIdtO97kUH01vgkfTsC/+Foh5yqPgY+k/341fpfE3azUjTZG5H3
Q75mdX39vDbBo1Ce9X98508FU7KSVF14CvI7EehKeHaIvCObKeCH3zbaQ5RRim6Q
2UlWOaIamfq0LMDr2e0sX9CMWUL/qQZXW3Vv9+NrAbxMF7Nc+7njvI8g0lFNd3em
o1Ai64KqbFBg6m6tGIkcQCS82PStcfuzJK1p+/uZM+DP63fZ92dqqFuWkaKTuCnC
HRBD/WGhdxAMfrlfB323sBdj6rC3fZ82hni2Arbi6vfNe/i1rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbTKNu7+U1OKr0hyMuerclTNzhaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg5OTk5YmEtMDk5Ni0z
ODRmLWJjZWMtYjVmZDdlNjZhZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF930MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP9gZWfMf+yQUwZL0EWBRglHLItQAekDjIg7zaXGXAOxt1QL6CiuC0Y
IIJAaUoMRPFRktnAwVqas/dJ0DYmMCv0MEHGtpBi2T7SVrBg+wYpVNqMcJ4bZt70
yoRrAmhBMNgRCq/ZlJiqMRKS5owM7B8doIf0pIeaxByx6tuwmU3LDPKMCGIzsgGm
6wycobrYnLbGHAudQAow/6c4yLkTUUqde44FmNLtwUaQwTiMlFZAz88DLvKGcvYB
p31rUAXyyw6cwNgxhZmKBdf2uMhhQ+jgmGCVZd4KnS8FBUWT/BvNP5JV0wIwz83D
ebO5Gk5MYBOXCRqkL5+teKOjgwb+YSE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:52 2026 by rpki-client