
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
File: 3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa (raw, json)
Hash identifier: sUACqBkxq4p4hlF3aPdlG3OvftQQYt1/G4jrvSgndaA=
Subject key identifier: CC:BE:38:71:4E:D3:5B:DB:A2:53:51:9F:23:79:43:26:90:BB:CF:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F093CF9833F8A10C74545D2E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
Signing time: Wed 02 Sep 2026 01:00:12 +0000
ROA not before: Wed 02 Sep 2026 01:00:12 +0000
ROA not after: Tue 01 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 23.15.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:09:3c:f9:83:3f:8a:10:c7:45:45:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 2 01:00:12 2026 GMT
Not After : Dec 1 02:00:12 2026 GMT
Subject: CN=7ccf77d9-a569-495b-bfc7-ae8449d5803d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:51:3b:df:93:14:8b:74:84:93:7b:ae:34:
24:51:b6:b3:1f:4c:99:bd:ff:25:f2:53:81:a3:9a:
5d:d2:95:1d:db:a2:66:3e:35:1d:99:f8:f5:ab:a8:
a9:af:25:da:de:ca:f4:3a:3e:83:7f:19:f8:42:6b:
58:4c:19:32:9c:60:ba:bd:ef:b9:55:82:7a:6c:ae:
5d:da:5d:bf:9f:9e:0b:b7:7a:9a:b8:3c:56:54:8f:
5a:53:09:de:a1:d3:6d:e7:d0:2b:a7:ec:8d:b9:26:
3c:7d:52:62:6e:fd:dd:d0:47:46:71:2b:01:f7:4f:
e3:3d:41:64:2c:41:2b:4a:16:a1:0c:ca:46:75:c7:
29:b5:7f:eb:aa:aa:c3:11:bd:3d:2b:6d:d0:2d:f4:
1d:b7:0a:47:19:fa:5f:d4:93:11:b5:56:20:50:fa:
97:e8:b7:84:77:86:c2:3e:cc:0b:3e:d1:6d:dd:37:
83:dd:63:7e:de:92:7f:29:c1:27:c0:16:31:93:be:
5e:57:42:92:4d:85:21:b9:d6:73:0d:76:e8:e1:bc:
0d:25:00:a5:44:3f:36:2a:ae:d8:aa:6e:ec:0e:ee:
ea:1c:b0:c6:7f:22:cb:5d:9e:84:3c:4f:f6:2a:7d:
20:6d:8c:04:16:2f:92:e8:49:66:95:55:82:95:51:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BE:38:71:4E:D3:5B:DB:A2:53:51:9F:23:79:43:26:90:BB:CF:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.15.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c7:89:fb:07:02:f3:9f:e4:8f:1b:40:1e:ac:c6:e1:d7:b1:
0b:47:85:fd:41:f8:32:0c:20:7a:17:4b:5d:25:50:f0:9f:b4:
9c:8e:75:48:99:5b:77:d2:33:4e:15:c8:a9:dc:55:51:5e:5f:
e0:f3:e4:85:f7:19:44:e4:b9:64:ed:4c:ba:63:22:c0:1e:38:
da:40:8f:2b:81:4d:33:0d:58:ed:e7:bb:32:9f:7f:03:6d:68:
2d:fe:51:c9:a3:68:7f:42:27:e7:5c:2f:ae:a9:ab:a8:88:e5:
58:0b:9b:c8:1a:8c:22:8d:b3:42:69:ff:ad:a9:e1:a0:4f:66:
7f:fa:92:64:8f:62:5e:86:96:de:02:dc:d5:51:a1:6e:fb:41:
c6:f9:5b:ef:1e:76:0b:95:8b:8c:93:3e:c1:d8:45:db:af:8e:
cd:ab:52:12:59:e1:95:1b:24:1d:b4:29:65:d6:4a:c2:53:33:
4b:17:9c:ea:a2:76:c1:ae:04:4a:1a:26:53:25:d5:16:15:01:
66:d9:73:ac:09:9d:0e:e0:e0:b7:05:cd:b1:27:e6:41:0c:d2:
c7:2c:1e:cd:fe:64:6a:3d:28:27:af:aa:26:c4:a2:59:f2:83:
bd:4f:0d:37:53:76:b2:ed:e1:bf:93:b7:d5:d3:96:c4:58:59:
9d:80:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:30:03 2026 by rpki-client