
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa
File: 0c565353-fea2-3856-88ce-f2955b2932be.roa (raw, json)
Hash identifier: Cird3JiDQlUDr5/9LMgfCCdkWapMs2IHxygfe+9i2Rk=
Subject key identifier: 7F:BE:AE:BD:5F:52:5E:B7:6A:93:AA:44:29:B0:E5:4D:F1:8B:32:B8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F8DD87B4150E7D7A7F0AD65C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa
Signing time: Mon 19 Oct 2026 13:00:12 +0000
ROA not before: Mon 19 Oct 2026 13:00:12 +0000
ROA not after: Sun 17 Jan 2027 14:00:12 +0000
asID: 20940
IP address blocks: 23.217.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8d:d8:7b:41:50:e7:d7:a7:f0:ad:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 19 13:00:12 2026 GMT
Not After : Jan 17 14:00:12 2027 GMT
Subject: CN=bcaccb1c-1d9c-4f9f-9964-8eae06c5779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:ae:84:4f:73:64:f1:02:b8:c7:3d:b1:81:
b9:ad:44:77:a0:91:21:d3:d1:89:22:84:90:2d:47:
a2:09:58:c5:99:7f:e0:00:64:02:e8:06:a3:c5:4a:
1e:ef:26:7a:7f:98:06:3d:5b:5e:96:fe:39:62:58:
ea:c5:87:2e:81:38:9f:5a:18:df:73:bf:30:d3:bc:
49:e5:11:07:4b:e9:8e:c9:ba:68:3c:38:ff:6d:cb:
85:fa:33:06:b1:93:a1:6d:8b:63:bf:76:82:dc:96:
1c:df:76:66:88:9a:20:5b:65:93:cc:62:77:eb:a8:
b2:54:e4:11:d4:92:29:a4:25:c6:1b:83:75:69:09:
e9:32:92:2b:40:ed:da:a1:a1:0c:79:ea:95:fb:4b:
f9:a0:aa:56:0f:c3:95:2e:64:73:16:38:30:ff:48:
69:8b:c3:b3:24:da:de:8a:96:b4:0b:38:a3:33:f5:
82:0f:67:19:57:07:d3:f0:12:83:5a:ab:7e:42:c3:
d7:af:32:b1:cf:cf:00:4e:f5:70:97:23:9a:d6:49:
83:5a:80:35:0d:b2:0b:94:c0:40:c5:44:97:0a:33:
46:2b:51:e9:86:a6:08:39:27:eb:18:ed:2b:df:f3:
30:0b:85:dd:78:00:54:22:a2:41:07:c9:f6:e0:88:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:AE:BD:5F:52:5E:B7:6A:93:AA:44:29:B0:E5:4D:F1:8B:32:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:3a:95:83:8a:5b:8a:4d:e4:13:ca:dd:9b:15:7a:8e:c8:e1:
e5:96:df:76:1f:9c:e8:87:7a:94:2e:9f:9c:d2:b0:67:fb:bf:
f8:df:fd:29:8e:7e:91:9e:43:a8:c1:65:81:79:34:8a:01:a4:
4d:b2:2a:25:2c:f7:d5:b7:5b:4f:e4:16:28:98:d4:72:d7:a4:
6e:46:fe:20:b5:ad:29:c3:c5:7d:ad:10:ff:f5:0f:c4:ee:9a:
79:0d:40:b0:ea:ee:74:5f:77:05:f6:01:21:5b:8b:1f:38:75:
b1:48:a4:44:73:58:6e:be:af:5a:f3:c5:52:ec:e3:ba:87:3f:
bf:09:af:1e:33:13:c9:1a:3d:c6:af:27:2d:34:06:c4:a8:2e:
c0:6f:4b:22:dc:3e:e1:16:85:ec:1e:ea:0f:3e:f9:44:8b:4e:
7b:4c:58:37:92:7d:42:c3:cd:39:64:2b:f4:80:e5:a9:62:73:
99:25:e3:d4:85:38:59:70:6a:f4:f5:9e:9a:23:76:86:4c:e3:
91:f9:a5:c0:24:4f:9c:92:be:bb:d9:2c:2f:ed:46:a2:28:eb:
c1:55:70:7e:f0:f5:43:76:5a:0b:f8:e6:81:97:85:ba:9a:ab:
1a:13:ea:57:c5:50:8e:fd:6e:d7:dd:ef:cc:5e:63:fb:67:82:
d0:94:ba:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2HtBUOfXp/CtZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk
YmNhY2NiMWMtMWQ5Yy00ZjlmLTk5NjQtOGVhZTA2YzU3NzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96uhE9zZPECuMc9sYG5rUR3oJEh09GJIoSQ
LUeiCVjFmX/gAGQC6AajxUoe7yZ6f5gGPVtelv45YljqxYcugTifWhjfc78w07xJ
5REHS+mOybpoPDj/bcuF+jMGsZOhbYtjv3aC3JYc33ZmiJogW2WTzGJ366iyVOQR
1JIppCXGG4N1aQnpMpIrQO3aoaEMeeqV+0v5oKpWD8OVLmRzFjgw/0hpi8OzJNre
ipa0CzijM/WCD2cZVwfT8BKDWqt+QsPXrzKxz88ATvVwlyOa1kmDWoA1DbILlMBA
xUSXCjNGK1HphqYIOSfrGO0r3/MwC4XdeABUIqJBB8n24IgyvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH++rr1fUl63apOqRCmw5U3xizK4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM1NjUzNTMtZmVhMi0z
ODU2LTg4Y2UtZjI5NTViMjkzMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw6lYOKW4pN5BPK3ZsVeo7I4eWW33YfnOiHepQun5zSsGf7v/jf/SmO
fpGeQ6jBZYF5NIoBpE2yKiUs99W3W0/kFiiY1HLXpG5G/iC1rSnDxX2tEP/1D8Tu
mnkNQLDq7nRfdwX2ASFbix84dbFIpERzWG6+r1rzxVLs47qHP78Jrx4zE8kaPcav
Jy00BsSoLsBvSyLcPuEWhewe6g8++USLTntMWDeSfULDzTlkK/SA5alic5kl49SF
OFlwavT1npojdoZM45H5pcAkT5ySvrvZLC/tRqIo68FVcH7w9UN2Wgv45oGXhbqa
qxoT6lfFUI79btfd78xeY/tngtCUujA=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:42:38 2026 by rpki-client