
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0c397a-7306-378c-8faf-d6930fad7cdd.roa
File: 3d0c397a-7306-378c-8faf-d6930fad7cdd.roa (raw, json)
Hash identifier: TngvRRaHMdRedhNmNPEjEQIpQHsy9VANnWsqQQulisQ=
Subject key identifier: 90:82:B2:37:7D:BA:01:FD:A0:62:5F:BA:E7:1E:28:F2:97:18:1E:9B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DFA708B3EEDC47DF34C2DEE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0c397a-7306-378c-8faf-d6930fad7cdd.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 16625
IP address blocks: 23.206.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:8b:3e:ed:c4:7d:f3:4c:2d:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=3bd717c1-8edc-4210-9c07-cb941b92f95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:1b:f8:95:6c:8c:d2:97:82:be:9f:09:e8:
bf:c9:ee:dc:1c:da:92:25:76:a0:88:c0:53:36:99:
58:74:fb:55:31:b1:f3:10:86:8d:0a:fc:17:a9:8a:
ef:fd:55:7f:be:1f:d1:58:e3:68:e0:1a:e2:bb:af:
27:47:52:60:f3:fc:dd:4e:cb:93:38:d0:ea:1e:22:
94:2c:8d:84:93:44:ad:87:3e:c2:f9:32:0f:e4:1b:
41:27:7a:89:89:39:cf:3c:de:a8:8d:24:ce:6c:0a:
0a:ca:dd:48:bd:59:dc:93:cc:d5:07:c9:63:d3:59:
38:2c:46:f4:be:bf:6b:b9:a4:80:52:96:43:53:90:
83:e8:2a:dd:53:46:89:8a:af:fa:94:fc:36:68:0f:
d8:ec:be:6a:63:90:6b:6b:76:1d:71:35:56:f1:94:
d3:56:05:cc:a3:b9:9f:f6:4b:38:ce:4f:b4:57:ed:
fb:93:2f:26:f6:56:08:af:02:5f:bb:1b:e0:4e:a5:
96:15:50:64:f3:69:6c:8a:28:6c:7e:86:46:c6:7f:
47:15:ab:0a:b6:d7:d6:f5:cc:86:75:1d:43:76:03:
7b:12:07:0a:f2:c0:f8:2d:3b:0d:b1:2f:c5:63:9c:
06:e6:15:62:1c:f1:35:2f:99:1f:42:fc:08:78:80:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:B2:37:7D:BA:01:FD:A0:62:5F:BA:E7:1E:28:F2:97:18:1E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0c397a-7306-378c-8faf-d6930fad7cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:e6:9f:5d:b8:9a:35:69:1f:89:6b:26:8f:92:8d:40:e1:52:
58:5c:3f:b3:cd:db:62:e1:49:be:87:10:b3:cc:0f:12:ec:ee:
01:3b:b3:50:ea:6c:bb:d3:6a:db:21:01:12:da:9a:f0:8d:e4:
4d:6e:24:78:61:c4:ae:11:cd:d7:21:29:60:94:0c:32:ed:52:
0d:47:a0:5b:cf:aa:e4:7f:46:2f:2b:91:63:ec:52:bb:2d:61:
6a:7b:ba:de:f8:1c:82:94:9b:de:15:9a:ca:5c:71:c2:96:26:
64:54:8a:75:11:c5:c1:c4:84:ce:6b:49:22:21:72:39:8e:46:
51:66:7c:de:11:5e:60:b4:ef:ce:ea:1b:83:5a:c2:cc:7b:f3:
09:34:78:a7:4a:f7:00:04:52:0f:b0:8a:00:cd:22:b2:93:6d:
f5:85:9f:a9:0e:33:ae:74:5a:34:46:ba:67:5c:79:7e:03:9b:
53:de:bb:d5:7d:75:81:5d:33:49:07:d9:0c:dc:64:20:ae:a9:
9e:d4:71:90:23:c3:86:e1:a4:ed:f5:bc:83:e7:64:4d:cb:48:
0a:56:99:bc:c6:6d:6d:72:d7:42:b6:bf:9a:75:65:52:d9:77:
1f:c4:45:53:63:c6:4c:42:cf:b3:02:b2:11:3c:4c:d4:68:17:
2a:b2:1a:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIs+7cR980wt7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
M2JkNzE3YzEtOGVkYy00MjEwLTljMDctY2I5NDFiOTJmOTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYUb+JVsjNKXgr6fCei/ye7cHNqSJXagiMBT
NplYdPtVMbHzEIaNCvwXqYrv/VV/vh/RWONo4Briu68nR1Jg8/zdTsuTONDqHiKU
LI2Ek0Sthz7C+TIP5BtBJ3qJiTnPPN6ojSTObAoKyt1IvVnck8zVB8lj01k4LEb0
vr9ruaSAUpZDU5CD6CrdU0aJiq/6lPw2aA/Y7L5qY5Bra3YdcTVW8ZTTVgXMo7mf
9ks4zk+0V+37ky8m9lYIrwJfuxvgTqWWFVBk82lsiihsfoZGxn9HFasKttfW9cyG
dR1DdgN7EgcK8sD4LTsNsS/FY5wG5hViHPE1L5kfQvwIeIBuXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCCsjd9ugH9oGJfuuceKPKXGB6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QwYzM5N2EtNzMwNi0z
NzhjLThmYWYtZDY5MzBmYWQ3Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF84YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErmn124mjVpH4lrJo+SjUDhUlhcP7PN22LhSb6HELPMDxLs7gE7s1Dq
bLvTatshARLamvCN5E1uJHhhxK4RzdchKWCUDDLtUg1HoFvPquR/Ri8rkWPsUrst
YWp7ut74HIKUm94VmspcccKWJmRUinURxcHEhM5rSSIhcjmORlFmfN4RXmC0787q
G4Nawsx78wk0eKdK9wAEUg+wigDNIrKTbfWFn6kOM650WjRGumdceX4Dm1Peu9V9
dYFdM0kH2QzcZCCuqZ7UcZAjw4bhpO31vIPnZE3LSApWmbzGbW1y10K2v5p1ZVLZ
dx/ERVNjxkxCz7MCshE8TNRoFyqyGtM=
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:30:34 2026 by rpki-client