
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
File: 2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa (raw, json)
Hash identifier: /RgFiF4BM8kSXKf4A+2I886/JP9EEOOjkk+RPn+Bp24=
Subject key identifier: 53:1E:83:71:66:47:36:E2:5A:D8:3A:ED:E5:EF:88:50:4A:91:F7:05
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E8C8A5A341780D6A56C9EF4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 16625
IP address blocks: 23.63.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:5a:34:17:80:d6:a5:6c:9e:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=8300554a-40ad-4da0-82fc-00cddc111f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:bc:6c:7b:5c:9b:f7:fa:52:be:75:c1:99:
ae:56:6d:55:0f:a0:53:e4:cb:c1:55:d0:55:ab:93:
2c:5a:66:8d:5d:b3:1f:21:d3:d5:63:34:e1:5a:1f:
7c:cb:65:8e:08:0d:10:5a:43:db:f4:03:01:6f:20:
68:11:4c:a2:09:9c:49:6e:ad:81:43:71:19:c1:29:
97:66:0c:d0:fe:2d:40:b6:27:25:36:30:7b:d9:cc:
f3:51:e8:f5:64:ea:b8:09:ab:86:e8:84:ef:8e:57:
c5:5a:d8:69:61:b8:d8:9b:d1:ac:91:b5:72:f3:37:
13:ca:d2:16:33:11:29:85:c3:46:43:5b:3f:8e:fd:
76:72:ed:ce:21:5d:77:ad:43:00:64:70:cf:26:a2:
e1:97:a2:a5:78:53:9b:2b:30:6b:9f:17:6d:91:af:
13:a0:5b:4d:aa:1c:84:e3:50:c6:6c:f2:eb:30:b8:
41:1c:c9:29:d6:90:93:03:c6:19:6e:2f:51:09:7b:
46:cf:d8:12:4b:a0:dd:84:74:b3:3e:7a:95:2d:39:
6e:8f:ac:cf:26:ba:b5:d4:bf:8e:fb:2f:e7:4d:f3:
32:94:b9:94:1f:ef:90:f8:31:88:3c:ff:38:df:ab:
04:5c:7e:80:f8:6d:33:64:ee:76:9f:9c:9c:f0:e0:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:83:71:66:47:36:E2:5A:D8:3A:ED:E5:EF:88:50:4A:91:F7:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfb0fa5-e063-35db-84f3-e8017a6b0971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.63.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:45:ec:68:aa:1e:3b:f1:c5:7d:61:a7:2f:87:1f:10:28:1f:
f0:2a:e7:1e:d5:8b:92:7f:c7:13:47:b1:fa:c0:31:f5:e4:eb:
3f:e9:a5:23:69:e2:0d:e6:f9:2d:26:fd:4b:5b:e9:9f:ce:d4:
7f:43:b1:c8:9d:c1:70:ba:23:a6:2b:10:0c:6a:3e:37:e1:ec:
a4:68:c7:14:c8:0e:46:9a:72:e6:63:0f:42:d8:f9:d3:c4:94:
27:34:b3:74:c6:c3:af:1e:2b:6b:bf:02:c0:5e:c7:44:81:89:
20:7c:e2:8f:c4:fa:14:14:2c:ea:41:2c:1f:c8:ff:39:5c:bd:
f7:05:d1:34:f3:78:d6:19:de:15:48:b4:a6:47:d9:c4:4e:e6:
02:14:45:6d:56:37:ae:77:f0:ee:e2:fb:87:22:10:3c:f9:46:
54:c6:55:3f:92:8a:f9:57:1f:2e:c9:17:cb:c0:7c:eb:b3:6b:
11:f0:49:8e:75:e6:63:b9:ed:19:96:3d:8b:35:d5:c2:2d:9e:
47:71:78:2e:6a:5c:d9:7d:64:8f:bb:be:f3:6e:82:11:e7:49:
c6:c2:4b:72:d1:08:20:d4:8b:f4:e5:d3:2b:21:48:bd:8a:44:
07:85:7d:03:5f:3c:42:c0:2a:f4:5c:e5:f3:6a:c6:d8:cf:91:
a9:0b:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:16:38 2026 by rpki-client