
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
File: 4165ca3f-83b4-34a3-8f24-e13d876b5294.roa (raw, json)
Hash identifier: wjvMHfFDRwfVSim3TTJljxK6+uYUM1QMgk94vw52o/g=
Subject key identifier: 7A:82:53:61:34:9A:4C:F2:5C:73:FB:6B:3D:8F:BE:77:D2:D8:A5:DD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E4AEF38F04B822A889C3D7F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 12222
IP address blocks: 23.56.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:38:f0:4b:82:2a:88:9c:3d:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=0e8f28c7-7e4a-4368-9aff-1da5189ecf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:b0:8c:d2:21:73:02:05:23:14:dc:83:4b:
b3:29:43:ad:c7:e5:e3:cb:2e:b3:bf:f1:ea:1d:e9:
6c:2d:92:8f:a3:e8:7a:04:b8:c5:34:29:ba:3f:a3:
0d:4d:c6:5d:eb:a9:d2:a6:04:31:33:e2:05:fc:b9:
e5:de:96:45:cf:02:ae:87:2d:15:c3:ad:73:19:7f:
d8:84:8e:7e:7e:d3:5c:33:87:7e:33:15:f3:f5:25:
5e:82:d0:0e:39:59:46:95:48:07:0c:3c:9e:83:cc:
1e:6e:1d:d4:56:3f:e6:3e:d6:49:1a:27:d6:66:b8:
ab:e3:58:b6:ac:18:3a:34:c4:8b:6d:ba:ac:2f:28:
67:8a:f2:8a:2b:1b:7f:42:2c:e9:bd:e3:30:66:6d:
97:d2:a8:5a:ee:51:16:19:80:64:8f:cf:1d:b8:bc:
84:73:6a:a3:c1:bb:99:82:4a:97:9f:55:eb:8f:15:
25:2d:aa:f1:8a:d7:45:01:48:9f:cf:d4:66:3d:3b:
47:5f:37:36:b1:a7:e1:e8:ee:df:94:ee:db:ea:ce:
81:b2:34:ef:f4:6a:af:56:79:c2:ca:8f:61:fa:41:
19:dc:ed:49:f3:ef:3b:7a:b0:df:ba:88:86:98:d7:
ea:30:10:6f:d7:06:88:06:4d:5d:38:28:0f:e5:2b:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:53:61:34:9A:4C:F2:5C:73:FB:6B:3D:8F:BE:77:D2:D8:A5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4165ca3f-83b4-34a3-8f24-e13d876b5294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.56.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:da:54:6e:6d:8d:70:49:40:0a:47:d3:9a:fc:62:09:22:85:
48:fa:18:6c:6f:d1:80:c8:c4:f7:da:33:ca:04:28:ff:90:1c:
dc:ab:37:62:c2:9e:31:8d:eb:3f:a6:39:35:62:57:10:d3:94:
d0:e8:68:30:82:6b:0c:27:59:8c:09:58:11:4c:5a:a2:0b:bf:
18:b6:80:a9:47:d6:b0:e7:ff:b6:2d:83:15:49:25:04:2d:15:
65:0b:58:08:12:c1:54:aa:25:5e:f6:69:89:33:01:1b:1d:67:
f1:c7:e4:79:79:69:50:f3:4e:0c:b2:7c:84:63:00:c0:c1:f0:
03:a9:e8:5d:ed:bd:a2:51:c5:d1:8b:59:95:16:7a:10:cc:7f:
00:57:77:2f:3c:74:25:4c:56:9a:32:e6:c4:08:e1:46:55:d6:
2e:06:93:b2:b6:35:78:89:98:05:86:c0:94:13:91:b9:39:89:
4b:9f:e8:33:73:b6:30:91:c6:19:42:62:bd:6d:32:8c:28:76:
05:74:58:b5:75:3b:f4:22:45:d8:ec:a4:fa:08:eb:f6:58:77:
71:1c:f2:44:f3:90:d3:07:dd:ac:10:77:3e:a7:de:15:a6:0a:
29:8d:e6:7a:48:4b:d2:7f:98:43:44:a3:0b:71:d7:6d:62:66:
f4:8d:08:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zjwS4IqiJw9f4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MGU4ZjI4YzctN2U0YS00MzY4LTlhZmYtMWRhNTE4OWVjZjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKmwjNIhcwIFIxTcg0uzKUOtx+Xjyy6zv/Hq
HelsLZKPo+h6BLjFNCm6P6MNTcZd66nSpgQxM+IF/Lnl3pZFzwKuhy0Vw61zGX/Y
hI5+ftNcM4d+MxXz9SVegtAOOVlGlUgHDDyeg8webh3UVj/mPtZJGifWZrir41i2
rBg6NMSLbbqsLyhnivKKKxt/QizpveMwZm2X0qha7lEWGYBkj88duLyEc2qjwbuZ
gkqXn1XrjxUlLarxitdFAUifz9RmPTtHXzc2safh6O7flO7b6s6BsjTv9GqvVnnC
yo9h+kEZ3O1J8+87erDfuoiGmNfqMBBv1waIBk1dOCgP5SveOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqCU2E0mkzyXHP7az2PvnfS2KXdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE2NWNhM2YtODNiNC0z
NGEzLThmMjQtZTEzZDg3NmI1Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzjRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXaVG5tjXBJQApH05r8YgkihUj6GGxv0YDIxPfaM8oEKP+QHNyrN2LC
njGN6z+mOTViVxDTlNDoaDCCawwnWYwJWBFMWqILvxi2gKlH1rDn/7YtgxVJJQQt
FWULWAgSwVSqJV72aYkzARsdZ/HH5Hl5aVDzTgyyfIRjAMDB8AOp6F3tvaJRxdGL
WZUWehDMfwBXdy88dCVMVpoy5sQI4UZV1i4Gk7K2NXiJmAWGwJQTkbk5iUuf6DNz
tjCRxhlCYr1tMowodgV0WLV1O/QiRdjspPoI6/ZYd3Ec8kTzkNMH3awQdz6n3hWm
CimN5npIS9J/mENEowtx121iZvSNCKc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:21 2026 by rpki-client