
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c5a0ce-d913-363f-b594-cbc3ae33d64e.roa
File: 34c5a0ce-d913-363f-b594-cbc3ae33d64e.roa (raw, json)
Hash identifier: nWozvnPceBVmeFcBFMuoWS9rt3Fo4Exjjqub1gH3WFU=
Subject key identifier: 6C:FB:1A:E2:B4:19:D4:B2:24:81:D6:19:53:41:77:56:9D:C1:37:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E8F54FEC4AC58EA22045E9B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c5a0ce-d913-363f-b594-cbc3ae33d64e.roa
Signing time: Mon 20 Jul 2026 09:00:11 +0000
ROA not before: Mon 20 Jul 2026 09:00:11 +0000
ROA not after: Sun 18 Oct 2026 09:00:11 +0000
asID: 20940
IP address blocks: 23.35.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8f:54:fe:c4:ac:58:ea:22:04:5e:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 20 09:00:11 2026 GMT
Not After : Oct 18 09:00:11 2026 GMT
Subject: CN=67130dd1-785c-45a6-b957-ca1fa5b24bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:a4:76:29:ed:0e:e2:7a:5d:cf:2f:21:34:
2a:f6:82:fe:ff:5c:cb:73:9e:67:e2:23:38:1b:d6:
c8:63:ec:b5:1b:d9:cd:37:7a:88:ef:59:a4:04:8d:
5a:d1:cd:7a:8d:5b:79:93:67:2a:04:84:b6:fe:05:
a1:2e:a0:88:2c:3b:51:fd:bd:cb:6c:b5:bb:c4:d2:
c8:c8:7f:25:e4:0b:6e:5f:83:da:1a:c9:b3:73:5c:
75:3f:4a:44:6e:5b:d5:de:63:de:8a:4d:5c:82:3f:
bb:41:83:bb:92:b2:58:69:5c:f6:33:5c:90:33:91:
ef:0c:8b:7d:2f:16:ad:a4:30:e3:d3:fc:d2:6b:7f:
b5:7d:00:01:09:df:66:9c:e1:a2:bf:14:bb:37:dc:
2b:f6:38:82:16:ed:a0:a7:65:4c:6d:89:9c:79:6b:
30:d0:5e:e3:03:c8:7f:ed:c7:e2:75:98:2c:28:73:
49:71:2e:2f:69:65:1f:38:48:d1:85:d6:4f:f3:73:
6b:5d:3f:bd:0a:91:f8:ee:a3:5e:60:51:c9:26:6f:
ce:9d:d8:dd:73:e0:94:72:57:33:16:ad:7b:ac:8b:
07:5c:2d:23:be:f9:a0:bc:3a:cb:58:2a:5b:7a:ae:
38:7e:95:97:eb:90:f3:04:a4:4e:4c:7c:47:62:ca:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:1A:E2:B4:19:D4:B2:24:81:D6:19:53:41:77:56:9D:C1:37:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c5a0ce-d913-363f-b594-cbc3ae33d64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:1c:df:85:b7:c1:ec:2a:57:e5:8f:26:a0:5b:3f:d8:a0:44:
84:fd:b4:b0:34:f5:d6:15:fe:69:16:74:7a:79:21:d2:94:88:
8f:94:2e:ae:43:c4:2e:84:60:32:10:ba:91:88:3b:b1:37:e0:
ce:46:45:84:81:e7:9c:7b:79:57:d2:76:3a:7d:c2:b0:65:37:
ae:bb:79:10:2f:05:6d:7d:1c:56:42:92:2c:0c:d7:0b:1a:50:
73:62:c3:9a:31:6d:4a:fb:7c:b9:4a:cd:35:bd:cc:06:41:4f:
21:67:7a:c3:11:08:59:31:a0:4b:9f:45:7c:09:47:b6:d9:3f:
8f:b9:54:0f:67:ad:c6:2b:10:88:a4:eb:35:c3:48:51:0e:1f:
95:c6:e3:28:f9:1b:f3:bd:a2:e7:54:0e:03:57:da:28:db:83:
bf:f9:eb:8e:68:fd:12:56:45:2f:77:9c:c5:48:c8:35:37:bc:
ed:3e:ce:fb:97:06:dd:5b:a1:bb:d2:f8:51:14:08:3e:10:91:
24:62:f4:2b:11:bf:17:95:06:70:fa:d4:3e:c9:5d:f0:e0:b0:
f5:c2:b0:f1:a7:0e:08:5e:68:2b:96:3d:a3:02:b9:ce:90:0e:
6b:2d:33:80:da:db:82:48:80:91:b9:ff:b5:59:01:51:35:9d:
25:a2:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:17 2026 by rpki-client