
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa
File: 3c798600-596d-3e77-bb5e-d24d01e64ba3.roa (raw, json)
Hash identifier: 5bjbncju9dlhmSY04Su/PNbeZwJ6NL8GwrRQofCt+8Y=
Subject key identifier: 08:79:4E:21:FA:B4:04:A6:03:7B:0F:A6:D5:D3:96:6D:A3:F9:FE:A3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F4985EB479A961E3D84C23200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16625
IP address blocks: 23.211.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 25 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:85:eb:47:9a:96:1e:3d:84:c2:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e508a36c-c4ad-413b-ab75-bde3c717e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:8d:15:f8:28:5f:05:6d:26:64:02:0c:ef:
b7:3b:ca:cd:72:b3:f9:8e:4e:8c:71:09:3d:cc:b8:
17:33:8b:46:72:e9:e0:77:2b:67:de:ee:ff:ac:90:
85:56:60:dd:50:a1:a1:b9:81:5f:95:ee:da:6a:99:
c1:27:dd:19:17:4c:b4:56:f1:91:96:c1:92:4f:e8:
a9:a7:23:4a:b0:a4:7c:30:cf:aa:d1:ec:d5:59:d1:
8f:22:fa:9f:e2:08:77:02:92:39:a4:77:d5:60:ea:
89:11:7c:6b:8d:e4:4e:a6:5d:ab:b2:87:f9:f4:bb:
7e:06:89:fd:f5:3b:b3:3d:64:dd:0c:37:91:c7:2c:
96:59:da:26:36:ba:7a:87:4b:1d:5b:92:e5:13:2e:
7a:db:08:a8:76:0a:26:ff:02:9c:9f:99:e0:78:17:
a4:ae:b6:7d:53:e4:ff:7b:6b:18:1c:c4:2c:31:d4:
97:12:8e:0a:1d:15:20:74:93:60:70:4b:98:b7:36:
89:bf:0d:4f:6b:53:8d:36:0f:b7:75:86:f9:45:2e:
87:11:e1:c4:c6:f8:f1:da:b4:3c:5c:56:f0:1a:2f:
81:f6:81:4c:08:e3:c4:8e:c0:72:70:61:54:05:c7:
e0:01:4a:64:fc:dc:31:85:0f:0e:a1:e1:2d:a9:dc:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:4E:21:FA:B4:04:A6:03:7B:0F:A6:D5:D3:96:6D:A3:F9:FE:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:2f:f1:ba:dd:1a:f6:84:87:a4:b9:10:2f:69:80:96:bb:8b:
66:40:a3:06:b1:c4:1b:60:d9:97:51:ff:f3:17:82:89:76:42:
a0:7b:2c:7b:30:73:0c:ed:a8:ad:59:ec:05:12:ca:53:f2:be:
ce:73:65:21:24:26:6e:9c:8b:9f:db:95:f2:b8:ac:38:63:08:
f2:a8:a6:7c:06:a6:13:5c:43:23:98:39:cb:69:a9:ea:f6:0d:
f8:49:db:63:b6:1c:dd:93:83:8a:ca:a8:7c:a0:d8:f5:5a:20:
56:07:b4:2c:73:bb:1b:b3:c9:79:75:62:8b:54:e3:0b:5d:b8:
27:2e:21:9a:5b:d2:9f:14:03:27:76:d6:40:05:56:6e:ba:85:
8e:4f:03:91:25:1a:8b:57:25:7b:ec:3a:44:36:f4:fc:7f:85:
42:10:c7:c9:ac:19:74:ed:fa:8c:2f:72:ea:ea:4a:04:b7:90:
ae:7d:44:f2:eb:49:bc:8e:33:ee:1e:1c:ff:c8:ac:fc:d5:4e:
92:81:26:e3:8a:1a:5f:b4:dc:fe:08:52:f9:bb:7c:e4:15:be:
8c:1f:dc:7c:89:df:00:bd:e0:17:1b:d1:14:f0:48:89:8e:19:
9d:6d:92:09:af:74:5d:de:53:6a:1f:27:95:41:d4:0b:e8:df:
64:dc:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:16:39 2026 by rpki-client