
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa
File: 3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa (raw, json)
Hash identifier: zJzcSsQba1Oh3rmv2d+G+Jf2VemX1u3WNNFyb4op5h4=
Subject key identifier: BF:AF:74:71:70:30:AA:8C:01:E3:22:B9:81:9C:59:CF:28:70:AB:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EF87CD881C20B723785AB0690
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 35994
IP address blocks: 23.67.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:d8:81:c2:0b:72:37:85:ab:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=3eb83bba-2de5-43c1-b29a-105c093e8c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:3d:11:dd:93:d3:b9:41:b4:4c:8b:ec:38:
e6:26:70:84:ae:44:2a:e7:5a:35:38:b4:32:39:36:
dd:fa:30:23:e6:0b:53:4f:95:8b:e7:41:bf:81:9f:
df:fd:6c:bc:2e:1e:06:d4:12:45:6d:18:7b:9c:c8:
47:52:58:0c:35:c1:19:c2:bf:5f:86:79:42:bc:cf:
38:5e:51:29:a1:b7:23:f6:54:17:61:fa:56:62:86:
46:32:56:0f:74:8f:5a:35:a8:d7:57:58:82:4a:f2:
64:ca:18:3e:76:36:8e:92:81:94:39:e7:ba:03:a0:
b8:d4:19:52:b1:a0:65:7c:d8:46:61:04:03:e0:38:
97:43:86:cc:d3:0b:98:07:e1:1f:82:46:d4:df:91:
b4:f9:a9:b3:93:38:06:e3:57:12:66:4c:38:55:ca:
8d:57:7a:94:7c:8a:82:48:a8:a1:46:aa:a3:4a:7a:
3f:17:fc:d1:e5:15:fb:e5:c3:1f:f2:65:c6:b6:5c:
7a:85:fc:da:87:ce:c3:d2:87:18:4e:e6:44:d0:0a:
e8:3b:61:cf:cc:10:c0:ca:7f:cf:a8:f4:d5:74:f6:
fd:6f:0d:1f:71:91:d5:77:a8:f3:51:0e:a1:c4:64:
b1:28:17:be:05:23:e7:20:4a:aa:4f:09:55:ba:87:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:74:71:70:30:AA:8C:01:E3:22:B9:81:9C:59:CF:28:70:AB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d929c8a-04cd-3216-aa93-4ba90d33a77e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.67.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:94:d0:38:89:63:f5:08:3c:4e:cd:62:96:08:be:56:d1:8f:
a8:38:59:85:1c:3e:3e:65:58:71:00:2f:a9:38:fa:ea:42:e6:
b8:49:7c:96:a6:1a:a6:88:b0:b6:b4:4d:ae:5b:2e:16:d7:a6:
cd:7e:42:c1:49:e5:10:32:cf:80:60:03:21:27:2b:4d:79:12:
6c:46:3a:28:e8:7a:64:1f:57:3b:61:b3:44:d2:2e:b7:fa:a1:
66:f4:54:06:46:0c:11:80:45:18:a2:be:c3:1f:8b:1d:9a:85:
8f:da:ec:e9:ac:ba:22:53:ac:b9:46:84:8d:d6:38:3b:7b:a2:
a1:95:29:e6:fb:cb:7c:b1:3d:ab:6d:41:3b:fb:60:51:09:67:
93:b6:a7:3a:a9:bc:78:33:2a:96:66:6a:a0:37:5f:7a:64:71:
08:4d:22:be:94:e1:d0:9b:08:44:12:43:4d:0f:31:cc:35:9e:
53:3d:52:15:5c:22:3c:92:9e:7f:ee:a1:c5:d7:0a:d8:63:ff:
a5:16:a8:e2:5b:d5:b3:8c:a4:92:8f:00:ec:48:fa:f2:c6:ac:
19:c4:14:1d:35:78:44:12:01:21:52:e4:36:a5:82:3f:48:01:
41:86:d2:7b:ca:fb:c9:f8:8b:f3:d6:b7:ad:a6:d6:bd:9b:47:
b9:4b:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:18 2026 by rpki-client