
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa
File: 2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa (raw, json)
Hash identifier: ZBSASaQ6TZ1kp75qeblurBoHZSYphwSK8FUCjFJqBl8=
Subject key identifier: BD:63:AB:55:15:79:64:C7:A5:3A:F2:E7:DA:E1:C1:D5:CA:19:37:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EF44CB63F984EFC95F5799C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa
Signing time: Tue 25 Aug 2026 13:00:12 +0000
ROA not before: Tue 25 Aug 2026 13:00:12 +0000
ROA not after: Mon 23 Nov 2026 14:00:12 +0000
asID: 20940
IP address blocks: 173.223.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:4c:b6:3f:98:4e:fc:95:f5:79:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 25 13:00:12 2026 GMT
Not After : Nov 23 14:00:12 2026 GMT
Subject: CN=b8732ae1-f395-42fd-8a0e-21f46242957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:5f:a2:5e:fa:2e:0a:ed:f7:f8:48:16:fd:
03:89:69:e2:44:56:ec:30:e9:8e:2f:d4:67:6b:92:
eb:2b:02:83:a9:a9:60:0a:7c:9c:96:9c:e3:07:6c:
c4:6b:6c:e1:c8:93:4c:e5:5e:58:55:7f:e2:28:df:
8e:32:5a:a0:01:17:e2:94:d0:73:13:07:75:77:46:
86:b8:05:08:cd:13:0f:74:06:e8:ff:39:7b:28:e8:
80:73:70:14:aa:1b:ad:79:e3:ae:71:03:b1:eb:01:
6e:6e:5c:e2:05:77:a3:87:2b:fa:84:34:22:06:8b:
e1:a7:28:5a:02:a0:59:dd:90:e8:4b:c2:b5:44:9f:
7e:fe:3a:d1:9e:54:9a:cb:17:73:35:c1:42:51:85:
63:df:e6:9f:d3:f9:6d:24:74:20:b4:f8:d7:3c:be:
1e:73:fb:89:df:11:5a:9d:e4:88:03:38:83:5e:6e:
16:d8:27:1a:65:bd:99:e7:eb:01:59:86:a3:5f:c2:
b3:4a:6a:d5:e0:70:af:5a:41:fb:73:be:30:f8:60:
f7:72:3e:13:40:fa:7b:8c:2f:52:fc:e1:2e:05:77:
b4:c1:3d:ca:97:7c:f9:2f:97:11:bd:db:20:72:97:
67:e7:14:02:b5:5c:f9:10:2c:88:eb:c0:e4:e5:23:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:AB:55:15:79:64:C7:A5:3A:F2:E7:DA:E1:C1:D5:CA:19:37:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:7e:10:c1:f0:dd:2f:a8:09:04:a9:0f:d8:7e:61:d4:a2:b5:
f4:36:44:04:74:c3:7e:99:64:8b:1a:d5:4c:43:7d:0c:75:53:
28:60:6f:9e:39:82:bb:2d:fa:b8:b4:97:ff:47:c3:84:71:ac:
22:23:ed:04:83:3f:ef:35:cc:00:fe:74:27:b5:30:31:63:34:
99:4e:aa:32:b0:ff:1c:47:55:e0:77:a2:7d:43:db:36:3a:54:
3d:b7:d2:ca:e2:0c:6f:81:06:ac:b9:50:f4:03:0d:02:45:7e:
0c:c2:c3:79:52:e7:03:fb:1c:a0:16:ca:a2:d7:d5:c9:eb:e8:
cc:c2:c4:81:70:90:ed:b9:95:d7:58:60:3e:5a:0d:e4:ae:18:
25:06:13:94:ea:25:1e:79:a0:30:6d:86:75:77:2d:89:21:f6:
ba:99:ea:54:ce:50:65:b9:de:4a:90:52:08:80:cc:1a:ab:88:
46:b2:c5:b4:e9:fe:2c:1c:a9:02:1e:f0:41:41:25:d5:bc:9f:
e6:7f:53:e7:2b:4d:9d:ef:20:29:18:ea:0d:8b:eb:d1:91:85:
de:46:cb:f5:bd:5e:88:dc:b8:5b:4a:52:31:40:c2:f8:b0:81:
1d:00:02:9d:d2:23:3f:b4:57:fb:11:54:f6:57:a0:2d:fb:d1:
0a:79:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:49:14 2026 by rpki-client