
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82aca362-f3f7-39c9-8e2b-43bfa3bb1550.roa
File: 82aca362-f3f7-39c9-8e2b-43bfa3bb1550.roa (raw, json)
Hash identifier: LV/hMw7+ZI9WrorNE3v5IrR7XaMxPU0vz2ojwdvopgM=
Subject key identifier: C3:10:D4:1C:06:37:3C:77:12:A3:93:01:D5:C1:48:34:26:7E:89:0B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA7878957F188FC0DA363F000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82aca362-f3f7-39c9-8e2b-43bfa3bb1550.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20940
IP address blocks: 23.59.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:89:57:f1:88:fc:0d:a3:63:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=7d7a231b-963c-4953-98f4-f1188a543c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:9e:47:69:5d:53:42:ba:73:c7:19:9f:0e:
af:ca:4d:ea:46:40:b1:33:22:56:c3:03:af:93:4b:
fe:89:86:48:34:73:f3:09:33:d8:d5:0a:d1:7c:95:
2a:c1:8f:b7:70:f8:01:c3:b2:44:78:31:cc:96:cc:
6b:0b:28:4e:c9:fa:ef:6e:f4:93:2c:39:fd:b0:37:
27:0f:09:c9:23:f8:50:86:05:c5:ff:79:0f:5a:b1:
3a:80:38:49:b4:3b:47:4b:76:e7:d2:9f:48:8e:3f:
b6:da:d4:fd:6f:20:86:27:98:fa:0b:40:c2:31:ee:
b6:d0:2c:15:84:3a:4b:a1:a1:af:8e:09:34:c4:74:
98:47:b3:da:1c:48:a3:d5:c7:ea:3f:05:aa:2b:dc:
ec:ec:a1:9c:9b:4f:39:1e:21:96:96:42:57:8e:cf:
7b:c7:31:b3:67:f3:2e:66:8e:2a:77:9d:1d:7c:b9:
7f:df:7e:90:2f:63:54:52:75:19:f5:ca:88:e4:16:
5e:1a:49:f9:bc:04:ec:3f:4f:26:48:b1:68:27:2a:
7d:dc:33:f1:a7:63:c6:ec:1d:ed:c8:0d:4a:68:7b:
e0:06:a1:d2:c8:b4:fc:fc:ba:4c:59:a1:86:08:ea:
98:8d:2c:15:79:d7:d7:ee:20:cb:6c:f8:c6:db:e8:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:10:D4:1C:06:37:3C:77:12:A3:93:01:D5:C1:48:34:26:7E:89:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/82aca362-f3f7-39c9-8e2b-43bfa3bb1550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:77:c9:71:e0:53:5c:81:0a:f5:5a:e0:65:b4:15:89:2b:f7:
be:19:ea:04:c8:bf:6e:7c:0f:b8:b1:ad:e1:9d:9d:4a:ce:ba:
f1:17:39:08:01:c6:03:65:ba:c7:2b:9d:d4:88:84:47:9d:01:
d7:f0:c3:85:a5:12:f5:45:fe:55:8e:30:3a:94:48:c6:79:8b:
3d:37:2d:60:1b:7c:22:d1:14:46:b1:45:5f:bf:bf:ba:ea:a1:
79:cc:ac:a2:c3:4d:14:39:f3:b0:b3:6e:47:47:81:31:1d:47:
d5:74:ce:e0:d9:43:09:af:f8:bb:e4:66:9d:66:bb:52:90:a0:
2a:53:31:64:5c:e8:db:63:95:a4:76:96:62:67:8f:08:a6:28:
12:de:ab:2a:e5:82:2a:04:45:2a:41:86:41:1c:7a:09:e9:5d:
17:1c:d7:e2:d5:38:c9:a5:c7:01:43:c3:1a:9c:e4:f9:6e:16:
24:99:8f:b9:51:78:2d:d4:2a:b4:91:68:1d:06:93:5f:2c:5f:
92:03:07:fc:44:59:32:b6:1f:8b:25:16:22:e2:ff:d5:0d:d9:
d8:94:2d:50:ef:86:3e:13:d4:07:c4:45:07:fe:e1:d9:d0:9a:
ec:f8:61:7c:52:fb:d2:64:21:51:e9:fa:67:ea:80:5d:4c:1f:
f1:1d:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:02:57 2026 by rpki-client