
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d328aca-e158-3f02-a7cd-1f89a03f2d14.roa
File: 7d328aca-e158-3f02-a7cd-1f89a03f2d14.roa (raw, json)
Hash identifier: 6n+2jVbeSHKbwTSUBIunZRTaXJ1T3lhmSEA6Bo5uQ7c=
Subject key identifier: 79:13:DC:74:52:6D:54:73:A1:E9:90:06:AA:42:96:91:59:C9:F8:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA798FD432FF5E9F23FE81800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d328aca-e158-3f02-a7cd-1f89a03f2d14.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20940
IP address blocks: 23.212.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:fd:43:2f:f5:e9:f2:3f:e8:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=c284be94-8e33-4bcf-8392-a8666211250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:4e:f5:b0:9b:42:74:f9:2a:1c:e7:19:c1:
00:42:4a:3d:aa:1d:fc:69:6a:6d:c7:9a:3c:b3:1f:
ba:c4:79:4b:ab:58:c1:7e:44:14:d2:6d:59:d3:36:
38:66:4b:e8:06:01:b6:57:ec:38:56:2a:72:09:01:
94:a5:21:e0:38:54:d1:3f:6e:63:14:3c:2b:2b:25:
4e:d0:4d:fe:7e:ae:d2:f2:49:9f:0d:66:e9:28:28:
97:5e:a1:75:64:ce:7f:62:ed:da:dd:9d:df:cf:be:
76:b9:64:19:78:13:31:0a:b2:ed:f1:ba:05:a2:ba:
4a:be:b4:6c:a1:c5:56:ef:43:a6:02:e8:b7:e7:21:
57:b7:b7:eb:62:62:94:c1:1c:6d:f9:39:ab:92:8e:
41:01:ab:6c:3b:78:97:3a:25:c1:95:f9:ba:88:96:
6f:28:e7:54:24:04:59:aa:42:70:e4:21:3b:96:14:
29:db:3f:db:1c:d5:5b:8f:69:07:8d:14:c3:e9:7f:
a5:b4:8c:b0:30:12:fb:56:3e:2f:d4:69:21:07:ea:
5e:f4:06:93:61:82:6a:37:e1:66:27:cd:51:61:02:
43:13:43:c1:aa:01:a3:49:71:b5:15:31:42:10:3b:
c1:b3:7b:7f:10:6a:bb:cc:c4:8e:f6:5b:32:50:2c:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:DC:74:52:6D:54:73:A1:E9:90:06:AA:42:96:91:59:C9:F8:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d328aca-e158-3f02-a7cd-1f89a03f2d14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:76:52:0e:eb:e0:c1:73:5b:cd:50:44:fa:57:22:78:08:13:
1c:5a:c0:ba:ca:58:b5:d0:7a:0c:b0:1f:fd:57:32:09:b4:85:
c7:8d:b2:b7:ab:bf:1e:79:74:93:0b:c7:a0:3a:3e:69:44:cf:
58:32:0d:2a:5d:38:49:42:ff:f6:da:4d:f6:a1:72:90:1b:17:
47:aa:7d:6a:49:23:0a:68:46:77:2c:b9:8d:6e:4f:71:9b:07:
b9:47:e6:a5:f4:f9:db:ba:74:b7:5a:3c:fc:45:92:46:cf:b9:
26:bd:88:2a:07:44:8c:8a:f2:56:15:4f:4f:09:c5:f7:db:93:
b6:96:cc:36:3e:4f:ca:67:8c:61:ab:73:6f:7a:a2:11:06:df:
59:b9:de:16:f9:df:b0:ee:38:9d:d0:42:c0:5c:d1:52:ef:f9:
32:45:b9:70:1a:a2:6d:af:77:bf:ed:b9:7e:3c:67:ac:06:f1:
6f:db:d8:27:b5:5e:d5:11:77:6e:d9:26:fd:07:a3:65:24:5e:
88:0a:fc:83:55:4a:a1:82:aa:60:dc:21:4c:56:b8:56:39:61:
1e:bd:3c:69:e6:da:d8:4b:d1:bc:7b:eb:0d:e3:ed:1d:89:6e:
b5:ae:b4:4e:72:47:3a:97:4f:ea:67:4f:30:eb:23:6d:9c:25:
10:10:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:28 2026 by rpki-client