
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5a5b3c-97f4-389f-98c7-40e5f4dfebb9.roa
File: 3d5a5b3c-97f4-389f-98c7-40e5f4dfebb9.roa (raw, json)
Hash identifier: 37OuNebIQ2Q0jDH0XMX5P66lR65I2QB8F1RNNDI8Jyg=
Subject key identifier: 29:A7:FA:C5:0E:E3:3B:63:80:92:11:DD:EC:21:E6:6B:16:4F:6E:7E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EAE81AB136793A392F1268D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5a5b3c-97f4-389f-98c7-40e5f4dfebb9.roa
Signing time: Fri 31 Jul 2026 13:00:12 +0000
ROA not before: Fri 31 Jul 2026 13:00:12 +0000
ROA not after: Thu 29 Oct 2026 13:00:12 +0000
asID: 16625
IP address blocks: 23.222.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:81:ab:13:67:93:a3:92:f1:26:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 31 13:00:12 2026 GMT
Not After : Oct 29 13:00:12 2026 GMT
Subject: CN=76285fab-f33d-4b78-a61b-e02e57ec8251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:c8:8b:eb:b9:d2:7a:9f:2f:d6:1f:8f:d5:
61:d0:84:a5:77:3c:56:59:ec:7a:d9:cb:f5:32:37:
67:f6:c3:d4:1a:38:9a:a2:83:d7:9f:5d:6f:48:f3:
0d:61:33:7d:70:b7:c7:86:2a:31:35:08:31:50:9f:
04:7f:80:ef:37:26:e7:de:8d:7b:2c:45:ce:95:13:
f4:a3:1d:dd:ee:85:54:09:a1:73:bc:9c:6f:04:8d:
c1:7b:72:34:e2:c9:49:f7:11:5a:a2:be:0b:ef:a9:
99:82:0f:a5:01:5e:aa:85:47:15:b1:ba:b5:13:9e:
dd:24:b5:fb:3d:13:96:13:a2:81:00:49:9b:f3:8d:
b4:a9:6f:49:db:52:78:2d:38:46:a7:fb:6c:e5:8f:
27:6e:65:7e:ac:59:9c:bd:5a:f2:08:06:94:af:f1:
85:67:64:40:ab:11:7f:a2:89:fa:4b:3d:83:89:73:
db:c8:7d:9a:fc:f1:0d:78:f3:09:99:94:35:39:7f:
c1:be:ea:aa:13:14:e9:07:58:3d:d9:48:5e:dd:df:
27:f6:ae:2d:3e:39:6c:10:9f:b5:1a:6e:fd:d7:22:
59:28:f2:65:3c:8e:05:b0:5f:32:61:dd:57:f3:77:
b2:e2:15:4c:e3:94:ee:9a:bc:cd:75:f7:4a:6b:b6:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:FA:C5:0E:E3:3B:63:80:92:11:DD:EC:21:E6:6B:16:4F:6E:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5a5b3c-97f4-389f-98c7-40e5f4dfebb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c0:04:f8:9d:f5:44:c3:aa:42:3d:bd:c0:d9:c7:58:d3:17:
d2:4f:e5:16:8f:68:9c:75:3b:e2:b8:d6:51:4d:91:29:d1:e8:
a2:e3:c2:d3:d2:25:be:d6:be:ec:22:85:bc:0a:d4:67:68:1b:
dd:b2:ad:7e:ae:fb:01:94:19:d6:34:47:ab:82:8a:7f:26:fa:
76:79:fa:7d:40:de:af:29:19:95:89:f2:a6:71:6d:98:5e:86:
6c:bd:12:53:ae:fb:04:43:8e:08:b1:c7:34:8f:a0:62:99:80:
ba:a1:20:a4:54:ba:fe:95:7d:56:ec:03:d2:7b:60:46:e1:f8:
63:35:06:4b:86:31:5d:cb:32:2d:2f:02:e2:44:49:70:52:88:
f3:80:ad:a7:6a:cf:a9:b2:27:10:c5:52:38:2a:14:68:2b:59:
29:fd:a1:20:26:6d:47:50:f7:87:e9:79:d5:de:1d:76:11:57:
70:f5:6b:4f:8e:a3:ac:66:9f:b8:f7:e4:7b:25:de:42:a1:17:
e7:d6:db:31:4a:ed:9f:e0:cf:05:0e:83:0c:3a:7b:8d:f3:e8:
1e:0e:7f:87:c9:c7:aa:ed:0f:47:4c:a5:b3:ee:cb:a5:3e:79:
45:4f:c1:f3:5b:b4:c9:24:36:c1:a2:91:e0:2b:68:40:76:fd:
ff:64:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:16:27 2026 by rpki-client