
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce74f598-3ec8-3872-b168-5f5ec99ea938.roa
File: ce74f598-3ec8-3872-b168-5f5ec99ea938.roa (raw, json)
Hash identifier: lwlaRwS7ZqiUrqi3h6IKof+NcMWI54GkaY/mWzwPyHw=
Subject key identifier: 99:3F:B2:29:68:47:22:A0:B2:A3:FB:D6:01:18:7C:45:47:C4:4B:90
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CDB0222F4E6EAA80BB3FE1B90
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce74f598-3ec8-3872-b168-5f5ec99ea938.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 35994
IP address blocks: 23.36.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:22:f4:e6:ea:a8:0b:b3:fe:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=c009e0a3-5285-4249-8368-b63cee908066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:26:71:a8:9b:b7:99:23:bf:95:f2:70:0c:
4d:ca:c6:c8:d7:a9:3d:f3:26:f1:52:90:88:1a:0c:
83:85:87:9d:8a:d5:cd:34:21:bf:8d:f7:36:cb:53:
59:35:6a:8e:02:53:d0:ab:4e:25:fb:a1:dd:03:3d:
90:a0:22:e9:4c:d7:d8:95:b3:af:fb:e7:e4:a3:bf:
05:d1:79:48:79:68:68:55:b5:14:29:1e:31:7e:26:
67:93:31:85:c9:cf:87:e5:08:cc:05:94:ab:60:43:
02:72:9e:99:20:15:b9:5a:d2:65:33:b2:26:61:33:
a9:75:dc:e9:09:8e:00:5a:0e:42:e6:94:5a:47:d8:
73:4a:86:bc:0b:0c:9c:ca:f8:81:fc:c0:0c:ca:2d:
04:23:cf:ae:f1:f7:c1:e8:b5:d1:5e:5a:2b:78:79:
fc:9d:6c:2d:52:b6:da:d7:2a:c2:51:3f:87:ae:ed:
16:dc:e1:9a:ca:5c:d9:c9:c1:d6:71:93:6f:f8:4d:
ff:04:18:75:bb:5e:a6:26:03:ba:b1:65:3d:a5:b5:
7e:7c:35:fc:c1:8f:31:e7:bf:82:9d:2a:8d:47:dd:
d6:90:62:41:d2:e0:63:bb:cc:e5:69:66:f7:fe:be:
81:dd:c5:be:de:a5:2d:e7:35:29:74:b8:f1:ad:30:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:B2:29:68:47:22:A0:B2:A3:FB:D6:01:18:7C:45:47:C4:4B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce74f598-3ec8-3872-b168-5f5ec99ea938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:91:94:1c:99:13:e2:69:d2:32:1a:1d:a3:32:30:5b:54:d4:
75:dc:9e:c0:9e:54:c9:95:18:d5:da:a6:53:59:f1:50:fa:30:
a0:ac:ea:d0:62:05:80:16:05:69:dd:fc:d0:f9:9e:5a:70:ed:
58:49:e7:ad:8b:c9:ac:59:66:78:3d:95:ab:2f:8b:63:db:45:
56:3c:dd:97:ce:6f:f4:90:d3:be:de:84:6b:eb:b5:00:05:0f:
5c:59:21:10:5b:e2:2c:b3:10:c1:c9:98:6c:e4:65:ad:6f:31:
91:00:51:50:d3:83:b2:ff:36:ef:92:c3:d8:6f:4c:30:68:85:
65:e7:b9:04:df:7e:ed:b7:e9:63:34:63:65:c1:b4:33:ea:8b:
c4:80:bb:ef:2d:a4:59:59:16:3f:8e:38:48:01:c1:c4:9b:fc:
07:18:89:6f:da:a1:c6:2c:0a:eb:16:ba:54:1d:89:85:32:18:
df:43:54:b2:87:43:d6:32:45:3d:58:c4:43:d4:49:cc:eb:c5:
8e:2e:7d:59:91:62:34:6d:a2:5f:0f:9f:7d:d7:07:87:df:ec:
5e:7b:0d:cd:5a:6f:34:de:af:b9:64:ea:0d:36:06:75:38:28:
b4:94:1a:f2:dc:d6:75:cb:bf:ec:3f:71:23:26:23:3e:89:49:
e5:05:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:27 2026 by rpki-client