
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa
File: 24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa (raw, json)
Hash identifier: I6FKrpnn1omup0lzK/nqoX0bC62wPGb7I/n1ApvshZw=
Subject key identifier: 64:3D:7B:39:0C:DC:D1:5F:BF:69:8B:3E:39:87:7F:E9:0D:DD:1B:8D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F0242347B1EFC22B2FFD6E6E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 16625
IP address blocks: 23.210.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:34:7b:1e:fc:22:b2:ff:d6:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=5b02ead4-f931-4e0c-aa0a-459d15eea406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:c6:84:c1:fb:8b:6a:c2:5d:ca:98:59:cc:
af:3c:94:c1:38:cb:b1:9a:f7:fa:9a:47:b0:38:e3:
6a:1f:fa:1b:a7:24:bf:d7:ee:34:a2:d0:19:2a:cd:
6f:a6:7e:ca:da:44:06:93:ab:a9:64:b2:86:7b:3c:
ac:4e:60:0b:21:b3:c4:07:87:5f:a8:6c:df:cf:d2:
81:6d:da:24:43:76:3d:22:7a:9f:02:da:49:f7:8e:
52:1f:d9:e1:d9:c4:73:ed:e5:4b:1a:4b:21:55:2e:
85:e7:27:1c:70:28:3f:1c:1d:ca:e9:a2:a5:8e:0b:
a7:89:d7:aa:79:97:59:c6:66:1f:53:bf:6d:54:9d:
1b:d4:5b:02:67:77:ea:b6:7d:50:95:a4:ee:b3:42:
e4:5d:8c:25:32:4b:3c:91:e6:15:19:a1:c6:51:92:
bc:28:2c:dc:5f:08:39:a8:3c:12:57:10:17:82:56:
fa:1d:8e:af:7e:57:f7:ca:12:bb:1b:47:ae:a3:93:
f7:58:6c:03:06:f4:da:30:b6:7f:c8:4a:95:c6:b4:
68:bb:c9:39:d5:78:3e:58:72:a6:bb:2f:b1:e9:b9:
81:33:08:50:d8:cd:d8:ca:ef:d4:01:f0:21:fa:bd:
d9:bf:b2:60:26:e8:81:2c:3b:fd:dd:ac:a1:60:fd:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:7B:39:0C:DC:D1:5F:BF:69:8B:3E:39:87:7F:E9:0D:DD:1B:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:0c:9c:f7:86:e7:18:4e:e9:72:3c:2e:09:30:3a:2a:82:d6:
e9:26:6b:66:76:31:39:55:ae:15:10:eb:ae:70:8d:75:d8:b2:
c6:a6:70:96:6f:50:1c:96:ee:5c:08:80:bb:c5:4d:71:30:54:
26:e0:62:12:e9:24:3a:0d:06:73:87:87:e4:68:54:d5:6b:c0:
97:c9:46:17:5c:0b:64:2b:60:43:84:07:3e:ac:ab:51:ce:26:
d0:d1:cf:3d:be:70:d3:cc:d6:4f:17:93:6e:d1:d5:74:e4:eb:
69:d6:3a:b8:77:6a:4f:c5:7d:cd:54:a9:c9:fa:ed:d0:34:c8:
70:b8:21:a1:ab:0d:10:7c:3d:08:fc:b0:eb:f7:46:6c:3f:81:
fb:10:0f:0a:e5:a0:89:0b:a6:6d:c7:9b:9a:05:56:2d:16:dd:
f1:23:91:13:c1:c7:a7:13:07:c7:a8:91:25:24:76:2c:69:6f:
cb:e3:45:a4:f4:e4:54:d8:18:a0:59:68:f9:93:3f:fd:8e:f0:
85:8a:00:bf:42:bf:21:95:f6:e1:18:3d:89:0c:1e:70:c0:b6:
0e:50:b2:9b:8a:18:14:1c:6f:a9:f1:30:c7:52:a8:35:e3:53:
91:49:44:ac:d8:fd:2b:f9:5c:05:19:0e:fd:04:4b:d1:2f:2e:
20:67:26:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjR7Hvwisv/W5uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
NWIwMmVhZDQtZjkzMS00ZTBjLWFhMGEtNDU5ZDE1ZWVhNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeDGhMH7i2rCXcqYWcyvPJTBOMuxmvf6mkew
OONqH/obpyS/1+40otAZKs1vpn7K2kQGk6upZLKGezysTmALIbPEB4dfqGzfz9KB
bdokQ3Y9InqfAtpJ945SH9nh2cRz7eVLGkshVS6F5ycccCg/HB3K6aKljgunideq
eZdZxmYfU79tVJ0b1FsCZ3fqtn1QlaTus0LkXYwlMks8keYVGaHGUZK8KCzcXwg5
qDwSVxAXglb6HY6vflf3yhK7G0euo5P3WGwDBvTaMLZ/yEqVxrRou8k51Xg+WHKm
uy+x6bmBMwhQ2M3Yyu/UAfAh+r3Zv7JgJuiBLDv93ayhYP1jZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ9ezkM3NFfv2mLPjmHf+kN3RuNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkMWM2MjUtNTU0ZC0z
YzU1LWFmZjUtMmI4YWE5NDAzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIMnPeG5xhO6XI8LgkwOiqC1ukma2Z2MTlVrhUQ665wjXXYssamcJZv
UByW7lwIgLvFTXEwVCbgYhLpJDoNBnOHh+RoVNVrwJfJRhdcC2QrYEOEBz6sq1HO
JtDRzz2+cNPM1k8Xk27R1XTk62nWOrh3ak/Ffc1Uqcn67dA0yHC4IaGrDRB8PQj8
sOv3Rmw/gfsQDwrloIkLpm3Hm5oFVi0W3fEjkRPBx6cTB8eokSUkdixpb8vjRaT0
5FTYGKBZaPmTP/2O8IWKAL9CvyGV9uEYPYkMHnDAtg5QspuKGBQcb6nxMMdSqDXj
U5FJRKzY/Sv5XAUZDv0ES9EvLiBnJh4=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:25:44 2026 by rpki-client