
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa
File: 5212fcb2-576b-3228-b2dd-442e930e3b3f.roa (raw, json)
Hash identifier: Q5SMWQzCn4Y1I1AKU/I+XrdUwDP7Z1541zOmSojAGRI=
Subject key identifier: 8E:8C:F3:5F:12:DA:6D:02:BE:5B:68:6C:B2:37:2B:0B:BF:40:82:01
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D8AC54C3ACC1050D7F7FFCA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 20940
IP address blocks: 104.71.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:4c:3a:cc:10:50:d7:f7:ff:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=713cc90a-0f3b-4f1e-8c1a-7684af040b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:a8:94:aa:41:9c:1d:54:e3:6c:b2:a5:c1:
14:8a:d9:43:4e:10:e4:da:4e:f7:c1:28:04:7b:8b:
ce:7a:3f:5a:c8:e0:83:f4:34:f9:9a:79:36:1f:7e:
46:67:eb:22:a1:8d:3f:f0:73:e0:dd:02:3f:2f:2e:
64:d3:b8:ab:33:36:6f:dc:d1:73:93:ba:de:44:21:
37:16:27:65:0a:f8:98:89:2c:e1:d8:76:b9:02:b9:
91:cd:5b:24:de:25:ff:26:ac:a6:e1:16:ac:ea:1f:
d9:90:99:da:a7:6a:96:c4:b5:42:da:37:ed:eb:e1:
7f:ea:06:de:f7:be:cc:ee:2d:fe:19:ea:2b:4b:e1:
62:4b:ca:12:98:f8:f2:e5:03:b2:58:12:42:0b:dd:
c3:0e:6c:f1:78:9c:e4:66:73:97:ae:f9:50:b4:ab:
47:28:ea:49:1a:5e:c7:00:b7:46:6a:ca:43:93:85:
21:97:9c:df:be:18:f2:1f:65:39:ad:45:0c:d8:4d:
1c:73:b6:cd:f4:d1:42:0a:cc:ba:27:01:05:f9:c0:
9a:51:b8:6f:a9:f2:08:c1:69:8d:7a:b6:ce:77:84:
c1:c1:f0:0f:7a:af:8c:68:2e:24:93:a1:41:36:68:
f8:8a:44:97:f3:c3:87:1e:63:bd:ca:6a:55:26:da:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:F3:5F:12:DA:6D:02:BE:5B:68:6C:B2:37:2B:0B:BF:40:82:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5212fcb2-576b-3228-b2dd-442e930e3b3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:7c:fe:03:58:dd:0c:b0:aa:80:c0:a3:1c:56:69:b6:22:5e:
b2:14:08:55:ba:89:d0:30:67:fd:0a:53:d7:80:9d:df:5d:52:
83:22:30:9e:8a:32:4d:fe:b6:17:08:76:7d:46:50:e5:c8:62:
85:fd:c7:39:90:0e:a3:72:b3:c3:63:f5:95:80:0a:4c:7b:31:
0d:8d:1c:6a:6f:59:1b:6b:45:b5:6b:80:fd:83:a3:72:a1:50:
68:1a:8f:77:30:2e:c7:8a:69:20:a5:dc:12:76:5d:92:2a:72:
b3:9f:70:5d:73:8c:7b:02:dd:94:f2:d3:a0:51:60:12:24:8d:
37:ed:04:6f:ff:6c:56:1c:83:b6:75:bc:3f:a4:92:23:3c:aa:
ab:50:91:f2:3a:4c:93:59:b5:ae:bb:13:4b:06:0f:0f:2b:8f:
c0:56:cb:50:99:3a:9d:4c:b7:2e:e3:2a:64:cd:36:42:be:1b:
96:64:2c:2e:7c:f6:e5:82:a2:96:fa:5d:b8:3d:43:19:6b:12:
95:53:e2:ca:0e:7a:cf:40:a5:e0:47:aa:9b:21:92:a1:54:d7:
62:80:32:0d:5d:c9:72:fb:bf:bc:43:22:2e:b4:23:14:3d:4b:
42:dd:78:81:a8:81:9c:be:4a:4c:03:25:66:7d:d5:2c:d5:38:
f0:24:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:36:42 2026 by rpki-client