
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa
File: 5c47ca63-7d35-3541-b247-554defca2e70.roa (raw, json)
Hash identifier: QOzewzt8CDCoUF+L/dEr03TschmhGdzfKqN5bvE3teQ=
Subject key identifier: D5:AA:93:25:C6:0C:FE:01:45:21:DF:C5:B9:94:A1:1D:D8:E1:9C:4D
Certificate issuer: /CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
Certificate serial: 010D0C9F4328584EA78744C7CA5310840EBD6BA0
Authority key identifier: 54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 53514
IP address blocks: 23.180.120.0/24 maxlen: 24
2602:f8da::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:44:c7:ca:53:10:84:0e:bd:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c28e56-4429-446d-9891-4fbd9fe90aee
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b3e0a9f8-df7e-44be-bc3a-5f6bd71a8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:3c:84:38:98:95:0b:6f:6c:e5:fb:b5:47:
f1:df:e8:84:43:d0:42:1a:48:7b:79:55:b9:86:50:
8e:01:f4:ce:8c:12:7b:42:f1:43:d0:5f:81:55:97:
a4:68:a2:73:1a:d7:a6:3a:b7:0c:be:65:48:21:5f:
cd:a6:4c:43:61:43:bb:ab:b4:7b:48:ef:a3:70:65:
7c:9e:cf:b4:22:58:3c:80:5e:c3:e7:bd:79:ad:f7:
c2:4d:e9:11:2a:e3:59:57:65:96:e2:6e:79:a3:8f:
cd:e8:ce:97:7e:35:6a:1d:b0:1a:b2:78:a0:7f:1e:
a0:1d:5f:4d:e5:55:54:7c:74:a1:c1:ee:b3:d7:cc:
bf:a4:a9:22:45:fb:f6:57:22:6a:26:87:59:8f:4e:
6d:84:3c:a7:cf:9b:ae:43:28:43:c2:cf:10:cc:47:
ac:fe:45:c0:a1:60:7e:b9:d9:0e:d3:b2:b9:3e:f3:
e6:3c:4a:6a:23:ea:08:cf:21:45:e2:a0:9e:7f:3f:
5e:2f:6b:d2:1b:8e:c6:1a:87:b9:ea:97:db:29:7b:
58:21:d7:e7:50:bb:08:b6:52:6a:36:1a:cd:dc:b3:
a7:cf:26:c2:cd:71:a9:9b:72:0d:c9:4d:a9:2a:71:
5e:03:75:1c:02:30:e2:88:34:5b:f6:38:71:69:08:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:93:25:C6:0C:FE:01:45:21:DF:C5:B9:94:A1:1D:D8:E1:9C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/5c47ca63-7d35-3541-b247-554defca2e70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee/a6c28e56-4429-446d-9891-4fbd9fe90aee.crl
X509v3 Authority Key Identifier:
keyid:54:D8:49:B1:75:A5:1A:6C:FD:A1:45:F3:41:D6:E5:05:94:B2:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6c28e56-4429-446d-9891-4fbd9fe90aee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.180.120.0/24
IPv6:
2602:f8da::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:99:7a:cb:60:c8:83:64:52:93:61:9c:f6:47:0c:f3:6f:97:
b2:d3:d5:32:ba:74:06:c9:27:60:02:e2:a4:33:8a:66:88:02:
b6:9c:53:c7:fd:e3:d3:51:5d:27:b1:08:78:b2:fa:ea:a1:a2:
ef:46:b6:74:75:a3:5b:44:92:79:b0:c0:2c:42:fa:14:4a:15:
c9:a5:e9:2b:3c:72:56:1b:d9:b0:a8:27:bb:e3:c2:fc:ae:aa:
33:e4:f3:c5:17:5a:3a:1b:1a:fd:ba:e5:1a:02:35:dd:49:9f:
fa:4a:01:6b:04:c8:8b:d6:ca:a0:a5:4d:ec:61:b8:10:5e:83:
b2:12:e8:5d:57:ed:c5:ba:6f:1d:a5:95:ad:c6:3e:66:a9:1e:
b4:05:cb:7a:24:f8:04:b6:15:3a:a0:28:6f:59:3e:60:ab:5a:
d3:8f:db:03:17:87:ba:ac:f4:a2:1e:17:30:d1:07:1c:a6:2d:
0f:15:e2:57:9a:24:8f:d3:31:44:a3:0d:8f:10:69:7f:43:df:
ea:fa:97:57:3f:a9:70:e8:71:cd:b4:39:2c:12:09:76:04:8b:
4e:c3:bf:cc:7b:56:a7:09:d1:0a:8e:bc:9d:e5:16:2d:0e:24:
72:c6:c0:1a:2a:50:ed:d3:4b:31:c7:59:b1:28:a0:e9:9f:ca:
d2:ba:b4:57
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nh0THylMQhA69a6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZjMjhlNTYtNDQyOS00NDZkLTk4OTEtNGZiZDlmZTkw
YWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjNlMGE5ZjgtZGY3ZS00NGJlLWJjM2EtNWY2YmQ3MWE4NjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Y8hDiYlQtvbOX7tUfx3+iEQ9BCGkh7eVW5
hlCOAfTOjBJ7QvFD0F+BVZekaKJzGtemOrcMvmVIIV/NpkxDYUO7q7R7SO+jcGV8
ns+0Ilg8gF7D5715rffCTekRKuNZV2WW4m55o4/N6M6XfjVqHbAasnigfx6gHV9N
5VVUfHShwe6z18y/pKkiRfv2VyJqJodZj05thDynz5uuQyhDws8QzEes/kXAoWB+
udkO07K5PvPmPEpqI+oIzyFF4qCefz9eL2vSG47GGoe56pfbKXtYIdfnULsItlJq
NhrN3LOnzybCzXGpm3INyU2pKnFeA3UcAjDiiDRb9jhxaQjY1wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNWqkyXGDP4BRSHfxbmUoR3Y4ZxNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNmMy
OGU1Ni00NDI5LTQ0NmQtOTg5MS00ZmJkOWZlOTBhZWUvNWM0N2NhNjMtN2QzNS0z
NTQxLWIyNDctNTU0ZGVmY2EyZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTZjMjhlNTYtNDQyOS00NDZkLTk4
OTEtNGZiZDlmZTkwYWVlL2E2YzI4ZTU2LTQ0MjktNDQ2ZC05ODkxLTRmYmQ5ZmU5
MGFlZS5jcmwwHwYDVR0jBBgwFoAUVNhJsXWlGmz9oUXzQdblBZSyiEkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hNmMyOGU1Ni00NDI5LTQ0NmQtOTg5MS00ZmJk
OWZlOTBhZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7R4MA4E
AgACMAgDBgAmAvjaADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2mXrLYMiDZFKTYZz2Rwzzb5ey09UyunQG
ySdgAuKkM4pmiAK2nFPH/ePTUV0nsQh4svrqoaLvRrZ0daNbRJJ5sMAsQvoUShXJ
pekrPHJWG9mwqCe748L8rqoz5PPFF1o6Gxr9uuUaAjXdSZ/6SgFrBMiL1sqgpU3s
YbgQXoOyEuhdV+3Fum8dpZWtxj5mqR60Bct6JPgEthU6oChvWT5gq1rTj9sDF4e6
rPSiHhcw0Qccpi0PFeJXmiSP0zFEow2PEGl/Q9/q+pdXP6lw6HHNtDksEgl2BItO
w7/Me1anCdEKjryd5RYtDiRyxsAaKlDt00sxx1mxKKDpn8rSurRX
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:11 2026 by rpki-client