
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a9e29e-0b02-390d-8ddc-f69a788bb871.roa
File: 91a9e29e-0b02-390d-8ddc-f69a788bb871.roa (raw, json)
Hash identifier: rtndzu/7yv27lJ0r/QIMI1JMrELbR9IxfA+8WIEBJts=
Subject key identifier: AD:4E:C3:28:26:4C:7E:05:57:14:20:1B:5C:BB:15:4F:A2:E0:11:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EB2B1DEF8382CBAF6ED4197C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a9e29e-0b02-390d-8ddc-f69a788bb871.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 20940
IP address blocks: 23.40.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:de:f8:38:2c:ba:f6:ed:41:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=6b35edb7-1a08-425f-919c-dbb725bd17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:ee:9a:79:0b:26:f5:2c:d7:77:aa:29:01:
fa:17:51:fc:e9:89:30:f3:ee:9e:fe:bb:34:81:0f:
67:fd:3f:23:05:c5:62:8d:67:d1:fb:b3:d8:44:1a:
ad:e7:05:7d:b5:a1:f8:f6:84:89:80:63:95:51:a9:
cb:bb:72:4d:51:24:48:26:f5:f5:6d:2a:d7:15:b1:
18:2d:af:e8:51:28:c6:4e:93:7e:9b:70:c3:9c:e4:
5c:50:e0:0b:d9:12:4d:16:10:87:df:60:01:53:e6:
88:81:7a:d7:37:00:21:09:d3:d1:b1:78:61:58:1a:
f1:23:af:1b:ad:e9:92:57:4d:45:47:36:54:6c:29:
11:6a:c4:48:07:ce:24:cb:7b:1c:37:74:d5:e1:21:
6b:de:35:68:5d:49:3e:79:fc:bc:67:56:dd:90:c8:
33:f8:2e:d3:a5:8e:e7:92:3e:c6:48:e2:bd:1e:c0:
d2:fb:ab:53:00:97:8c:27:9d:32:b1:3d:44:57:82:
c8:10:54:68:3e:22:e3:58:d9:49:56:27:25:4e:73:
7c:b2:51:b7:79:1c:0c:33:95:92:86:53:07:f8:b0:
04:7d:dd:dd:bb:fc:e9:e5:3a:d7:4a:70:d8:fa:1d:
18:57:4f:36:15:73:01:57:13:9f:bb:f6:cd:77:5e:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:C3:28:26:4C:7E:05:57:14:20:1B:5C:BB:15:4F:A2:E0:11:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a9e29e-0b02-390d-8ddc-f69a788bb871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:0b:a0:9f:0f:ce:86:35:64:7d:53:83:c8:3d:63:f8:99:7b:
17:1c:0e:78:7e:7c:02:91:2a:fc:5a:52:f6:e2:0e:12:b6:d5:
8e:68:d6:60:09:ee:2d:30:07:95:58:38:79:db:e3:54:78:9a:
56:76:60:ac:f0:ad:b1:4c:bf:f9:3d:f0:67:e7:bd:e7:9e:93:
db:0d:e6:a0:02:26:85:9d:05:f9:70:2b:42:43:bd:d1:72:cb:
4e:96:e5:be:72:98:b6:2c:16:51:4c:fd:a9:a5:35:ce:8a:b8:
2d:2d:66:0c:5d:a3:57:41:1b:68:8f:06:3e:7c:53:4a:83:34:
29:03:5c:fc:de:38:c1:fe:21:e1:21:4b:cb:eb:2c:6f:78:45:
62:4c:b5:f5:51:2b:06:79:48:24:cb:6a:2f:26:68:e0:75:53:
71:da:b1:a0:07:9d:0f:70:d3:1e:3f:a0:2a:31:5b:78:bf:0d:
ef:97:bb:39:34:4c:2e:65:50:04:37:cd:4e:64:3a:2c:b0:93:
71:24:3f:06:6f:95:98:90:c4:82:cd:78:0b:a5:9f:a3:43:5f:
74:1d:5d:6a:80:b9:4d:3a:df:72:9d:77:6c:80:83:49:4a:fa:
e7:d8:16:f9:72:e3:c3:4b:32:3b:03:5c:2f:3d:97:98:a3:49:
71:61:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:29 2026 by rpki-client