
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
File: 0d21c904-c2f6-375e-bdf1-5323573a0f60.roa (raw, json)
Hash identifier: G9AGVZgl7q1wOiuG89P+SAwnjkl8ZrFgSHw3q7Fxb4w=
Subject key identifier: C4:92:79:C9:DC:49:F0:6E:65:23:CB:98:D3:F0:23:3F:C4:22:C8:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA78787CC3B42EF9C16199700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20940
IP address blocks: 23.57.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:87:cc:3b:42:ef:9c:16:19:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5017788f-4e0d-484c-9350-192fb991e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:77:9a:4e:d3:59:20:13:1b:e8:f0:bd:61:
82:a1:8e:60:12:cc:b6:cf:b6:db:14:5c:61:9b:61:
c9:56:14:0c:05:11:1d:24:51:68:8e:a4:d1:56:65:
e2:9c:94:1d:53:26:50:89:a2:14:37:ec:d2:05:47:
8f:ea:ca:c6:9d:83:fc:2c:08:9a:50:69:4a:5a:08:
d4:d3:7f:60:90:68:e1:a9:73:eb:d0:ff:1e:73:6e:
aa:8e:dd:7c:c4:4b:21:78:d3:59:8e:da:3a:51:b4:
ae:5f:c0:f4:49:da:aa:73:d5:de:6f:7e:e8:40:df:
a8:51:ef:1c:d4:82:1e:18:f9:c9:02:88:8f:17:67:
27:16:41:82:7f:c8:f7:95:cc:bd:45:9a:34:e1:23:
20:17:12:27:b3:4e:c6:8a:61:c9:20:5d:1f:9a:a1:
b7:17:45:57:25:46:07:50:5c:1b:8e:11:fe:24:83:
bf:e8:30:8a:4a:fb:2f:6b:b8:73:27:9d:6f:83:70:
eb:ad:bc:39:ad:d2:32:31:f4:24:21:99:6b:45:7d:
9f:34:09:79:3c:5b:45:6e:9e:e8:d3:be:5f:0f:0b:
b9:37:e1:3f:6a:fa:d6:2f:8c:8d:f1:89:1d:a9:66:
70:4e:5d:64:3e:b3:71:eb:da:f7:12:46:35:87:68:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:92:79:C9:DC:49:F0:6E:65:23:CB:98:D3:F0:23:3F:C4:22:C8:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.57.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c3:18:33:4c:ab:d0:83:53:6c:76:b2:ca:79:64:3e:16:20:
0d:72:a9:9f:05:4e:7f:9f:61:f3:0f:c1:df:05:16:58:c0:9b:
0f:97:3e:c7:93:61:06:7e:6a:b6:36:43:c2:ed:44:77:3b:ce:
93:0a:05:2a:d9:4b:11:9a:b5:e8:1d:a2:88:87:4e:eb:4c:cd:
02:96:34:03:09:c0:80:4a:1a:49:44:fb:ea:39:fe:63:b9:ef:
ee:7e:0a:88:da:16:87:5e:f8:b3:04:6c:05:73:36:55:79:99:
9c:31:d2:ff:b8:13:e0:6a:67:98:94:4b:cd:8e:ff:09:34:9a:
34:78:65:cb:35:2d:69:80:ea:98:d9:ef:64:31:e8:39:b5:22:
f2:fb:85:4e:68:60:dd:ce:c7:52:a1:5e:85:ec:74:58:01:90:
72:e8:68:33:ec:63:7e:33:8d:f4:59:de:24:d7:01:9c:b1:04:
a7:6a:30:56:3d:37:4e:4f:a2:29:aa:d3:a0:90:15:f0:25:a4:
9b:f2:59:50:3d:15:86:34:c0:f9:53:a3:66:47:e7:9e:05:c4:
c9:ef:c5:db:6c:d1:ba:db:b7:0b:60:d9:5c:88:c3:79:04:9f:
15:c1:c5:ce:37:6c:24:30:fa:70:26:a8:31:9b:81:c2:7b:5c:
14:0b:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:46 2026 by rpki-client