
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940d6214-bca8-3826-8398-c12c91416d89.roa
File: 940d6214-bca8-3826-8398-c12c91416d89.roa (raw, json)
Hash identifier: PMdDe1vf3UQsu2EoA8ABFOowo5K4Ad6jI2b6kSqu18M=
Subject key identifier: A2:58:4C:90:11:C2:CC:1E:1F:1C:31:6A:E2:1E:BE:10:F5:B6:D5:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA79B11D142AB838320ACF900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940d6214-bca8-3826-8398-c12c91416d89.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 20940
IP address blocks: 23.216.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:11:d1:42:ab:83:83:20:ac:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=43aebc5c-1a64-4a1d-97d2-2c2a369014f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:d8:e2:d0:54:75:9f:25:23:bd:44:f5:72:
1a:e1:66:fc:ae:d6:44:4b:39:e3:5f:f3:0f:5d:2f:
9b:b6:47:90:82:1e:8d:de:7e:9c:6e:fa:0f:2a:f9:
e1:6b:c8:a1:c5:3e:a1:2b:96:f6:d3:b8:5b:95:f2:
1b:93:f5:90:ef:5b:44:fb:5d:0b:e3:56:be:1f:de:
3d:d4:7f:55:f7:5c:3d:be:b5:2f:80:bb:2c:b5:39:
a7:93:ed:1e:c3:0a:a7:c5:7c:be:1c:f9:51:95:78:
45:0d:af:b7:2d:59:1a:6d:81:e3:a6:39:90:8f:34:
c5:dd:33:a6:4c:ec:05:0c:2d:d1:15:3d:a7:49:0a:
c6:2c:d7:b0:4a:63:a5:5f:25:01:cb:19:05:cc:fd:
3a:78:03:ca:13:17:0f:f3:07:a3:3f:d3:1d:53:80:
8d:e9:a5:a2:5d:89:03:47:8e:2a:ee:c8:2c:f7:11:
69:d1:8b:80:21:67:1c:fb:fe:d3:72:d9:5e:18:39:
02:49:24:77:5a:a2:b9:96:9f:9f:53:c8:e1:4c:5b:
52:d8:ab:d1:20:55:68:8e:5b:a9:a5:ef:79:e3:f3:
0d:1c:82:01:ef:18:94:23:5b:65:13:c9:9a:cb:61:
8b:c0:dd:d0:18:27:09:7e:d7:02:71:e4:6b:79:e9:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:4C:90:11:C2:CC:1E:1F:1C:31:6A:E2:1E:BE:10:F5:B6:D5:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940d6214-bca8-3826-8398-c12c91416d89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.216.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:40:55:23:7f:f7:69:7c:6b:54:27:27:97:24:2d:88:6b:9e:
37:9c:57:70:8e:ab:76:c2:4d:c3:51:64:fb:aa:6b:c3:01:35:
7f:dc:6b:79:8b:54:04:83:1d:76:12:ef:9e:51:1a:d1:36:69:
89:ad:f7:92:b8:cd:e5:fa:44:b5:b0:2b:90:93:90:be:14:30:
d5:f5:64:d1:ab:20:49:f7:26:eb:53:f5:e9:96:6e:82:9f:3b:
c6:bf:27:f1:bb:a7:b4:d9:73:d6:09:ef:47:1b:2a:c2:76:72:
96:52:76:e5:1a:95:0d:2b:46:b4:29:b7:d1:55:5b:cd:77:9a:
1f:30:8b:e9:63:b1:14:a3:04:dd:06:96:28:b2:5b:b5:1b:6d:
57:06:b7:d5:64:68:86:8c:9b:6a:1c:43:60:16:4e:bf:8c:71:
e8:af:05:54:40:af:bf:be:8a:24:e6:dd:a7:87:66:bd:e9:9f:
20:c6:1a:bc:dd:9b:44:2e:1c:6d:e0:39:39:91:6d:40:da:50:
e3:59:0d:25:8a:02:17:ea:d5:05:31:41:d0:e5:dc:29:44:26:
62:a4:ee:f2:7b:1d:3d:fc:46:67:a3:c2:85:ab:8e:a7:ae:99:
1d:a6:bc:ec:1e:6e:5d:10:b0:66:f5:06:31:0a:a7:4b:bd:d0:
f5:e7:b7:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmxHRQquDgyCs+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDNhZWJjNWMtMWE2NC00YTFkLTk3ZDItMmMyYTM2OTAxNGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPbY4tBUdZ8lI71E9XIa4Wb8rtZESznjX/MP
XS+btkeQgh6N3n6cbvoPKvnha8ihxT6hK5b207hblfIbk/WQ71tE+10L41a+H949
1H9V91w9vrUvgLsstTmnk+0ewwqnxXy+HPlRlXhFDa+3LVkabYHjpjmQjzTF3TOm
TOwFDC3RFT2nSQrGLNewSmOlXyUByxkFzP06eAPKExcP8wejP9MdU4CN6aWiXYkD
R44q7sgs9xFp0YuAIWcc+/7TctleGDkCSSR3WqK5lp+fU8jhTFtS2KvRIFVojlup
pe954/MNHIIB7xiUI1tlE8may2GLwN3QGCcJftcCceRreekvhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJYTJARwsweHxwxauIevhD1ttVOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQwZDYyMTQtYmNhOC0z
ODI2LTgzOTgtYzEyYzkxNDE2ZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9gMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpAVSN/92l8a1QnJ5ckLYhrnjecV3COq3bCTcNRZPuqa8MBNX/ca3mL
VASDHXYS755RGtE2aYmt95K4zeX6RLWwK5CTkL4UMNX1ZNGrIEn3JutT9emWboKf
O8a/J/G7p7TZc9YJ70cbKsJ2cpZSduUalQ0rRrQpt9FVW813mh8wi+ljsRSjBN0G
liiyW7UbbVcGt9VkaIaMm2ocQ2AWTr+MceivBVRAr7++iiTm3aeHZr3pnyDGGrzd
m0QuHG3gOTmRbUDaUONZDSWKAhfq1QUxQdDl3ClEJmKk7vJ7HT38RmejwoWrjqeu
mR2mvOwebl0QsGb1BjEKp0u90PXntxA=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:27 2026 by rpki-client