
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa
File: 3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa (raw, json)
Hash identifier: kgDIMvuvvClk7/JklxZlOJvF1R3ulWfr6MBCllj8tCY=
Subject key identifier: 2F:A8:40:1C:6B:BE:95:09:F8:4E:AA:8A:78:C6:F3:D0:5E:F9:D1:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DE41B37222A30F5FC25AD1BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 20940
IP address blocks: 23.195.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:37:22:2a:30:f5:fc:25:ad:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=04b3c8c1-43c1-4e6c-a6fd-d1e0657d1c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:09:b5:f2:bf:e8:ca:b6:f8:e3:71:2f:65:
88:48:8b:76:ef:aa:53:09:3a:cb:27:7e:fd:61:8d:
a8:91:ff:92:0e:38:b0:c1:62:7e:d4:84:2c:f6:b2:
b5:a8:38:dd:be:1c:6a:05:0d:5f:3e:27:66:c9:40:
c5:29:35:f1:95:c8:91:66:73:06:23:30:e6:15:99:
93:1f:35:a1:cd:97:84:ed:2f:b8:b2:85:81:79:20:
31:e8:7e:34:8a:aa:05:0e:ad:81:b7:88:43:d7:05:
f9:b9:68:de:2c:8d:c0:ab:4f:16:07:c6:39:65:e7:
8d:16:8f:02:01:20:32:f5:ea:cb:16:39:0a:d2:7d:
50:b0:9c:b3:11:0e:43:93:e8:b3:72:c4:54:5c:69:
8b:c2:1a:f9:da:1f:39:1f:37:49:85:29:22:d0:d9:
32:fb:b9:16:af:2a:2b:d3:d8:e0:cb:7c:68:66:2d:
f3:a0:72:90:23:c0:85:c3:38:4b:33:c7:c7:12:c3:
58:5a:f4:c0:29:10:67:1f:b5:cc:2e:7b:ed:38:1b:
26:1c:96:55:87:45:e0:99:95:bc:38:16:d9:4e:0b:
9f:e0:7f:10:1a:0c:af:8a:6d:e4:d1:10:77:f7:0d:
10:df:bf:23:e1:b8:97:19:06:1e:76:10:f2:9a:57:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:40:1C:6B:BE:95:09:F8:4E:AA:8A:78:C6:F3:D0:5E:F9:D1:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ad:3a:24:25:93:8e:b1:d7:e4:21:ca:2d:04:dd:ab:56:52:
55:c0:e8:13:72:d2:90:18:25:d1:db:b4:ea:dd:09:c2:d3:22:
e5:59:81:69:f7:57:f1:3e:57:3e:48:0c:be:72:22:28:5a:b6:
78:cf:67:99:c5:df:f1:fe:0e:df:9a:3b:6b:b4:d7:e8:84:83:
d3:58:e6:16:3e:2f:b1:8c:fc:38:c2:77:ee:2d:1b:9c:50:f3:
07:62:93:d8:55:46:3e:37:2c:0d:8a:41:4c:aa:03:10:69:b8:
ed:f3:21:1b:13:fa:60:90:66:7d:cb:8c:12:63:bf:19:7f:55:
e1:ef:86:fd:58:0b:3d:28:43:41:5d:99:55:89:92:21:a4:9b:
a8:16:7a:8f:8e:45:87:98:1e:24:ef:ce:a5:a1:03:7a:0d:56:
83:c9:32:05:64:ab:44:8a:b0:71:54:5b:30:af:bc:c6:6d:f2:
70:7d:52:4d:3f:ce:ce:c8:72:c0:3a:cd:8f:66:2f:ea:82:c0:
a6:24:d6:8e:72:27:23:93:c9:1d:2c:19:35:a3:86:83:67:88:
61:de:31:6b:92:57:b8:c5:9a:1d:77:31:28:59:30:c7:1d:f0:
f1:81:f7:5a:f7:76:fd:e3:1f:a7:ba:60:95:82:00:21:bd:07:
3c:6f:e8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzciKjD1/CWtG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MDRiM2M4YzEtNDNjMS00ZTZjLWE2ZmQtZDFlMDY1N2QxYzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4cJtfK/6Mq2+ONxL2WISIt276pTCTrLJ379
YY2okf+SDjiwwWJ+1IQs9rK1qDjdvhxqBQ1fPidmyUDFKTXxlciRZnMGIzDmFZmT
HzWhzZeE7S+4soWBeSAx6H40iqoFDq2Bt4hD1wX5uWjeLI3Aq08WB8Y5ZeeNFo8C
ASAy9erLFjkK0n1QsJyzEQ5Dk+izcsRUXGmLwhr52h85HzdJhSki0Nky+7kWryor
09jgy3xoZi3zoHKQI8CFwzhLM8fHEsNYWvTAKRBnH7XMLnvtOBsmHJZVh0XgmZW8
OBbZTguf4H8QGgyvim3k0RB39w0Q378j4biXGQYedhDymlfrAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+oQBxrvpUJ+E6qinjG89Be+dEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY0M2U5YTMtNWRkNi0z
Y2NkLTk1NzQtZDY5ZWZjODYyYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8P8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABetOiQlk46x1+Qhyi0E3atWUlXA6BNy0pAYJdHbtOrdCcLTIuVZgWn3
V/E+Vz5IDL5yIihatnjPZ5nF3/H+Dt+aO2u01+iEg9NY5hY+L7GM/DjCd+4tG5xQ
8wdik9hVRj43LA2KQUyqAxBpuO3zIRsT+mCQZn3LjBJjvxl/VeHvhv1YCz0oQ0Fd
mVWJkiGkm6gWeo+ORYeYHiTvzqWhA3oNVoPJMgVkq0SKsHFUWzCvvMZt8nB9Uk0/
zs7IcsA6zY9mL+qCwKYk1o5yJyOTyR0sGTWjhoNniGHeMWuSV7jFmh13MShZMMcd
8PGB91r3dv3jH6e6YJWCACG9Bzxv6Pc=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:16 2026 by rpki-client