
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa
File: cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa (raw, json)
Hash identifier: s/Chs/4CYLXAOX94SkpzA6++s6m0Vx1r95nigoNLVpM=
Subject key identifier: 6D:4B:AB:2C:71:F1:1B:68:31:7B:86:B4:15:E8:0B:0D:39:73:61:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F31B7CB5DDB3D9264E8EEF940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa
Signing time: Wed 16 Sep 2026 13:00:12 +0000
ROA not before: Wed 16 Sep 2026 13:00:12 +0000
ROA not after: Tue 15 Dec 2026 14:00:12 +0000
asID: 7545
IP address blocks: 23.34.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:31:b7:cb:5d:db:3d:92:64:e8:ee:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 16 13:00:12 2026 GMT
Not After : Dec 15 14:00:12 2026 GMT
Subject: CN=aca8c251-92f6-4a0f-9c46-72dd93550cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:37:a8:cc:31:ef:ef:50:77:9c:cc:2c:8d:
a4:43:77:c3:09:53:86:20:85:5e:04:c6:38:4a:78:
37:56:60:cf:69:23:d0:d6:27:8a:b1:56:dc:8d:77:
94:a0:22:d4:cf:57:2e:20:80:15:0b:76:46:d5:0d:
c9:2b:86:3b:7d:fc:ed:75:33:bf:d3:37:97:12:2a:
2b:3e:45:79:c9:a8:e6:cd:c5:75:0f:98:32:4c:ea:
1d:8c:dd:c4:7d:95:dc:47:15:10:26:23:96:37:c5:
a1:f0:02:3d:cf:fe:c4:29:b1:39:88:71:a5:95:b2:
6d:64:75:75:10:ba:f2:90:aa:d9:95:71:6e:1e:c9:
30:97:67:1e:2b:e3:5a:55:d3:2f:e0:eb:04:21:ae:
4c:21:eb:55:76:8b:df:96:1f:dc:d6:8f:2e:0c:64:
ed:84:1a:00:b3:06:04:2f:ab:d4:9d:94:eb:c6:93:
70:5d:b5:14:8c:6d:7a:2b:17:4d:ad:0e:27:b8:2a:
74:06:86:5f:cf:4d:4d:57:4e:51:d8:da:2b:25:e2:
4e:7c:a8:b7:7b:8c:1d:30:d8:dd:70:67:02:a6:b5:
20:e8:27:71:2e:60:ec:87:fc:ea:33:96:85:54:d0:
41:44:d2:9a:a8:88:8c:96:e7:1b:f8:43:ed:57:47:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:AB:2C:71:F1:1B:68:31:7B:86:B4:15:E8:0B:0D:39:73:61:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbdecb51-8373-3c9d-839d-d0fd6c7eec4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:2d:29:98:14:dd:c8:72:ba:3a:61:72:04:b5:0a:c4:95:61:
b8:ef:40:a0:09:ab:44:d0:85:bf:77:11:6f:53:3e:2e:5e:2f:
2a:03:84:42:a5:0e:40:63:48:c8:e5:63:89:48:4a:f7:3a:fc:
f4:8c:89:77:15:89:0b:57:0f:2a:fb:dc:37:37:c8:61:a8:e6:
4b:b0:c9:4c:90:cf:f9:63:63:7c:66:28:93:6a:8b:20:f8:f6:
7a:0e:d4:8d:de:79:07:40:e6:71:1a:af:ea:ea:40:d7:b2:92:
41:17:d4:88:e9:a3:c1:18:60:56:a1:c6:6b:d1:d1:89:df:87:
b3:4b:18:ec:0b:0a:6a:38:70:16:a3:1e:00:8c:b7:a2:74:b0:
59:3a:8f:25:7c:31:e2:6d:8b:f1:47:16:02:32:ea:5f:20:a4:
ee:03:69:48:7b:75:05:79:aa:67:2f:23:61:9a:d5:47:7f:b4:
43:60:92:c9:44:3e:17:c0:71:09:83:0a:af:7e:91:80:25:43:
8e:dd:91:21:44:8f:ed:e3:74:f9:1b:8c:80:b2:5c:34:8b:31:
be:0d:b7:0c:3c:34:77:d3:04:92:36:5b:ac:22:73:c8:bd:e9:
92:84:82:84:b8:d3:5e:0e:d2:60:b4:1d:b4:35:1e:40:d9:d2:
19:db:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:32:53 2026 by rpki-client