
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0572d316-5586-351f-9eda-acc264ccfbf3.roa
File: 0572d316-5586-351f-9eda-acc264ccfbf3.roa (raw, json)
Hash identifier: eY+ppTRcdA62L/rQkLE9GxA0Z/my/Aimpz6KBCsLsk8=
Subject key identifier: FB:21:41:3F:02:CF:C0:60:10:1A:2D:1D:C8:F3:05:A5:E7:A4:80:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DFBD5F32C4D9E85F5E001A680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0572d316-5586-351f-9eda-acc264ccfbf3.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 16625
IP address blocks: 23.211.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:f3:2c:4d:9e:85:f5:e0:01:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=d84e7ebf-cc6a-4fd9-9720-7a566ef9edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:b1:b7:7a:e9:e0:75:91:ce:62:80:2d:1f:
97:d8:c2:4e:c0:2b:ca:e9:f2:ec:50:ab:2b:a2:b8:
c1:d6:be:95:97:9b:86:e3:66:6e:f6:fa:ce:67:57:
a0:3e:b9:72:c7:5e:bf:c5:d7:d6:65:a3:fb:cf:91:
98:0e:e9:53:28:c1:85:5c:5b:74:92:04:fd:10:32:
03:33:ef:a5:79:aa:f8:32:bb:9e:1c:a1:bc:50:70:
a7:cd:94:e8:30:c9:7e:40:20:0d:23:59:25:b7:36:
ca:8d:b1:b5:52:cf:e1:0a:31:0a:41:08:96:50:53:
f9:e1:fa:a4:7b:90:f5:ae:92:1e:5e:e0:f5:6c:07:
65:a6:b7:ac:2c:2f:ef:be:22:50:8a:23:a3:74:3a:
2b:90:df:94:a3:e5:d6:9f:20:75:be:bf:3a:8d:81:
d9:16:f6:34:0d:5c:ac:9c:80:ca:e8:04:0f:01:a5:
17:e6:f2:27:de:29:46:70:53:23:b3:2c:cb:0d:9a:
1e:e1:9a:c9:12:88:2c:b5:91:69:16:a7:c3:0f:24:
1c:0e:1a:81:70:c6:df:67:c7:ab:8b:70:dc:2a:76:
9a:a8:4a:40:b2:7f:03:61:e0:ea:ca:5e:eb:da:23:
45:cb:29:c9:7d:9a:d9:55:8c:41:b3:b9:7d:ea:e8:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:21:41:3F:02:CF:C0:60:10:1A:2D:1D:C8:F3:05:A5:E7:A4:80:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0572d316-5586-351f-9eda-acc264ccfbf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a0:2c:8e:35:92:e8:dc:41:02:28:9a:b5:da:fe:ca:5c:97:
7b:69:a0:5d:8d:78:b5:95:20:ce:8e:19:80:63:4a:79:02:db:
9c:a4:32:b5:a4:6a:7e:d5:31:6d:d5:37:6d:16:07:3e:0e:2b:
7a:ac:e1:3c:dd:45:10:f3:34:44:da:2f:ad:52:6c:c3:ca:70:
99:ac:b9:7e:e4:8b:b9:80:25:06:21:8e:07:38:06:c6:2a:30:
de:16:74:b2:c3:e6:73:1c:43:40:78:9b:68:23:d6:11:b1:25:
46:31:d5:7f:9c:20:79:bc:a4:5b:2a:f6:2a:69:ac:04:7f:d9:
64:21:5a:fc:fb:cd:17:e9:39:0c:da:d7:c8:d2:5b:0e:11:3a:
75:b4:bd:12:ba:cc:05:c1:86:43:d6:53:b0:59:6c:20:08:72:
70:13:a0:16:ef:a7:e3:c4:ad:e9:b0:c8:4a:cc:b7:77:16:c2:
81:20:17:97:53:90:8a:35:e6:14:f7:20:79:94:54:52:e6:a6:
36:86:2a:2a:4a:6e:7a:7e:ba:33:72:07:57:8a:6e:37:81:01:
7d:de:a7:9e:b2:c4:90:ab:99:bf:1b:db:40:26:61:c4:65:49:
a5:92:74:ba:3f:3c:a9:68:47:22:55:77:be:6c:2e:b6:3d:b3:
6e:8a:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:20 2026 by rpki-client