
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
File: 3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa (raw, json)
Hash identifier: SQ1x9HrKOocA2NHoVAspU+Gma0XDMUwIiZvQ/3d4aYE=
Subject key identifier: 47:B6:7E:C7:D3:B9:CC:30:B1:6F:16:C9:E8:4A:94:2C:41:89:C4:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA787839008A41EB2171B5C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16625
IP address blocks: 23.54.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:83:90:08:a4:1e:b2:17:1b:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7bd3c526-e42d-42c4-b1aa-4437a93315f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:06:56:f2:79:9f:f3:1d:bb:98:76:50:a8:
c9:0c:e6:5a:1f:5b:4a:02:3a:bb:0f:a8:00:51:ae:
88:b5:4d:8d:09:8c:31:3d:e0:dc:8e:f3:eb:82:e1:
10:b5:65:40:8f:f6:48:c6:71:14:a2:fe:0d:1b:89:
80:19:e1:69:56:45:eb:1c:92:91:ae:76:20:01:a3:
60:67:91:7f:0d:4f:15:75:1b:a1:d7:7c:ac:d4:d6:
95:1c:5c:a4:0c:d2:81:fb:8a:52:58:aa:c7:73:cf:
94:57:93:18:93:79:53:62:3b:a5:c7:8e:fb:d5:a8:
4e:a3:39:25:f0:e2:e4:3e:85:00:03:f8:12:7d:47:
e6:a9:85:e3:ca:8f:77:0f:73:39:d9:9a:63:34:a4:
70:59:e0:bd:ec:64:54:87:61:28:01:bc:bb:4c:bf:
c6:6a:be:00:49:27:07:5d:f7:14:43:b7:86:f8:67:
03:a9:1c:88:a0:dc:a3:8b:da:18:52:e3:23:21:90:
9d:53:83:ef:47:9f:80:1a:60:76:72:99:08:1f:57:
52:97:fa:91:cd:7f:69:8f:46:fe:c8:c4:10:05:64:
70:b1:18:80:05:e0:60:1e:0d:03:dd:ab:2a:af:53:
ea:4d:61:13:48:d7:3b:ab:88:22:62:29:e9:f6:e1:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:7E:C7:D3:B9:CC:30:B1:6F:16:C9:E8:4A:94:2C:41:89:C4:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.54.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:10:0a:83:3f:66:f8:8c:ec:90:35:78:49:cf:0d:78:43:c4:
53:d6:f6:99:2e:c1:79:dd:32:cf:90:53:e2:4f:02:86:89:fc:
07:9d:12:83:3f:47:7e:a9:fe:39:d4:90:1d:53:31:70:ea:da:
bd:cf:28:81:dd:33:f7:5d:6a:86:1a:2f:e7:49:4e:47:cc:36:
60:4d:6d:6c:6b:b1:65:18:ec:94:72:5b:fc:f1:88:13:06:8e:
e1:43:4a:46:77:c2:98:eb:cc:a7:57:c7:5a:21:49:ac:10:74:
ed:ca:1a:d6:4b:55:cb:2e:b1:c0:33:83:d9:2f:17:f5:b5:85:
e6:50:6c:3e:b4:fa:45:f0:53:41:f0:85:44:b9:f8:9f:09:62:
00:65:16:24:27:83:88:56:1c:05:96:b5:f4:1e:60:51:8c:49:
0e:3c:74:ba:73:cf:07:28:20:da:98:ae:65:5d:a4:32:97:09:
8a:7d:f4:82:08:7a:8a:5b:f0:42:3e:4f:da:7f:6f:58:de:4f:
3f:e2:44:d8:9f:d9:ab:e5:cb:b7:47:da:1e:88:a2:fd:a1:2d:
ad:8f:ae:9f:c4:8e:f7:03:5f:1e:77:de:31:83:96:c8:be:46:
28:7b:9d:4c:d6:c7:9b:27:a8:0a:34:af:4e:5b:22:61:f1:29:
84:55:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:18:52 2026 by rpki-client