
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23ddc286-5913-3f2c-af05-6b4fa71ba9c5.roa
File: 23ddc286-5913-3f2c-af05-6b4fa71ba9c5.roa (raw, json)
Hash identifier: 2T7VBke/4C8poRLbzpkt8VncNSCbntUEK/7PKzeAA58=
Subject key identifier: 6F:58:BE:31:73:23:71:C8:1A:E7:F5:2B:C0:28:47:CA:5F:BE:E6:ED
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA788AA2D713F68AF56F20940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23ddc286-5913-3f2c-af05-6b4fa71ba9c5.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20940
IP address blocks: 23.14.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:aa:2d:71:3f:68:af:56:f2:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=fa311901-fecb-4ba4-9953-71300a60b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:f8:0a:be:99:33:bc:e3:af:f2:4b:88:59:
c0:d6:5f:87:ef:85:d0:70:66:a6:19:a5:fa:f4:b4:
6b:34:99:58:0a:3a:8f:50:a3:d8:d2:6b:a0:5c:95:
8d:e8:fd:3b:ba:93:9c:d4:bb:4a:6a:7d:46:03:d2:
32:48:86:ac:b0:34:c0:5c:5c:35:00:98:9e:dd:c1:
ad:9a:47:60:1e:e0:3c:66:0c:eb:b8:31:45:2d:1e:
fb:42:29:87:21:14:91:12:cf:ad:2f:ca:3c:75:7a:
7b:8e:db:30:e0:8f:d9:ef:07:15:b2:60:90:20:9a:
0f:13:27:b3:fa:b5:a6:53:b7:54:f5:b8:1c:49:e8:
9d:d7:08:a0:0d:a1:69:0d:db:27:48:ad:d2:1d:bd:
54:7b:c8:8d:2e:14:fc:25:26:f4:83:3f:67:12:ad:
1e:af:85:b2:be:77:c4:51:b2:82:37:07:ef:fc:c2:
77:0f:55:05:ae:28:24:9b:6d:a7:33:57:12:6a:ab:
fe:f6:37:14:cc:7e:f9:54:64:f9:26:d5:53:8b:60:
59:0f:fd:d7:1b:d4:50:77:ca:24:1c:da:48:77:99:
d9:27:38:5a:45:52:fb:89:51:2d:e3:ab:6d:55:ea:
e2:13:f9:53:8c:5e:6c:76:4c:e0:c8:1a:1b:c4:0d:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:BE:31:73:23:71:C8:1A:E7:F5:2B:C0:28:47:CA:5F:BE:E6:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23ddc286-5913-3f2c-af05-6b4fa71ba9c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.14.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:6e:01:c5:fe:45:b7:f4:1a:f4:00:53:de:d9:a2:3b:e5:e2:
f7:a2:ec:6c:97:88:96:a5:2f:73:bc:59:16:0e:38:db:52:84:
2c:8f:bb:35:1b:6a:37:ae:a0:8c:5c:b7:e4:97:ef:28:1d:77:
d5:c6:b4:6e:ab:e2:95:e7:8d:b4:1c:f9:ae:82:5e:97:5b:7f:
4f:dc:1a:2d:74:ec:1c:03:90:02:97:dc:55:ff:47:07:3e:bb:
02:53:ff:58:ce:63:4e:08:2c:c9:d3:08:dd:c7:7a:1a:47:73:
cd:6b:6c:be:43:5c:a1:6b:5b:ca:58:fa:8c:3f:ba:f0:7b:05:
87:00:42:3d:89:b3:3e:da:fc:a5:10:76:31:34:33:38:0b:2b:
fa:74:f2:c4:f7:bf:57:e1:ff:e3:74:67:85:4f:e3:19:8b:42:
d0:0c:02:77:5e:b6:db:4a:3d:8a:89:1e:e1:ab:03:bb:8f:6e:
85:4d:d9:2b:38:b5:10:53:5f:a9:e4:b0:84:26:28:c9:24:27:
e9:2a:87:a1:00:3b:a4:c1:a3:07:38:6b:66:26:87:0c:da:f3:
ef:7f:70:b5:04:18:58:19:28:e3:95:02:c7:11:68:15:95:2f:
ba:cd:02:f1:e2:f4:1d:fa:70:24:d8:b1:d0:16:cc:d3:bf:e2:
36:f3:94:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKotcT9or1byCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmEzMTE5MDEtZmVjYi00YmE0LTk5NTMtNzEzMDBhNjBiMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvT4Cr6ZM7zjr/JLiFnA1l+H74XQcGamGaX6
9LRrNJlYCjqPUKPY0mugXJWN6P07upOc1LtKan1GA9IySIassDTAXFw1AJie3cGt
mkdgHuA8ZgzruDFFLR77QimHIRSREs+tL8o8dXp7jtsw4I/Z7wcVsmCQIJoPEyez
+rWmU7dU9bgcSeid1wigDaFpDdsnSK3SHb1Ue8iNLhT8JSb0gz9nEq0er4WyvnfE
UbKCNwfv/MJ3D1UFrigkm22nM1cSaqv+9jcUzH75VGT5JtVTi2BZD/3XG9RQd8ok
HNpId5nZJzhaRVL7iVEt46ttVeriE/lTjF5sdkzgyBobxA0s2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9YvjFzI3HIGuf1K8AoR8pfvubtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNkZGMyODYtNTkxMy0z
ZjJjLWFmMDUtNmI0ZmE3MWJhOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw5WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhuAcX+Rbf0GvQAU97Zojvl4vei7GyXiJalL3O8WRYOONtShCyPuzUb
ajeuoIxct+SX7ygdd9XGtG6r4pXnjbQc+a6CXpdbf0/cGi107BwDkAKX3FX/Rwc+
uwJT/1jOY04ILMnTCN3HehpHc81rbL5DXKFrW8pY+ow/uvB7BYcAQj2Jsz7a/KUQ
djE0MzgLK/p08sT3v1fh/+N0Z4VP4xmLQtAMAndetttKPYqJHuGrA7uPboVN2Ss4
tRBTX6nksIQmKMkkJ+kqh6EAO6TBowc4a2Ymhwza8+9/cLUEGFgZKOOVAscRaBWV
L7rNAvHi9B36cCTYsdAWzNO/4jbzlAQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:37:02 2026 by rpki-client