
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa
File: 535ca5e8-8eea-348a-8f21-12be826d9d2f.roa (raw, json)
Hash identifier: SydZzaY2uW9nW3GL02aj27Og0wCgy22FFJ8fBWzdRX0=
Subject key identifier: 21:FF:B7:52:BE:36:D7:7B:BB:CB:25:C5:23:73:76:69:1B:A1:B9:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DFBD61A68E5396173DB253280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 20940
IP address blocks: 23.209.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d6:1a:68:e5:39:61:73:db:25:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=dec57734-4216-484e-80f1-336134a348c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:24:67:e8:d6:0c:0f:eb:5e:1e:fc:71:d2:
37:f7:92:f7:20:33:8e:5e:dc:5c:2b:ac:29:36:3f:
4b:9c:c4:eb:8a:b3:3e:58:e3:9d:68:e3:a9:f5:f2:
d4:03:90:b7:18:cb:22:4e:42:ad:a2:fb:6b:94:d2:
e0:8c:da:9e:63:ef:fb:cb:03:3f:0a:52:c1:96:fd:
51:4d:73:f4:8c:0d:e8:39:51:71:fa:82:27:71:bd:
21:22:52:10:d2:75:2f:70:65:99:59:a8:cd:2e:55:
2f:d4:0c:f2:8c:13:8a:2d:f4:e5:17:ce:62:6a:15:
27:22:68:53:5c:aa:60:4d:73:4d:4f:78:20:38:b0:
4d:11:73:3b:5a:fb:46:32:bb:8b:cb:18:37:b7:b6:
cb:b0:b0:9f:35:46:fa:56:49:34:8d:f4:cf:dd:ae:
e1:84:47:5c:f1:07:d6:8e:68:0e:5c:87:19:48:e9:
7f:80:eb:36:25:08:ba:2b:2e:04:21:59:04:5f:f1:
07:69:2f:b4:d7:89:2f:34:f3:db:56:0b:d3:52:12:
86:4a:b4:07:82:c6:b2:a1:01:93:8d:60:f2:8a:b0:
11:ea:a3:c2:4b:5e:a8:6e:58:20:e4:3d:e6:b5:7f:
a8:87:f6:1b:f1:a0:a4:ae:a7:e5:3a:24:84:59:bd:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:B7:52:BE:36:D7:7B:BB:CB:25:C5:23:73:76:69:1B:A1:B9:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:c4:d0:d2:7d:c8:eb:f5:fa:c6:a1:7b:3b:40:fa:20:39:f6:
c5:ef:25:f3:f9:e8:a6:a5:36:a8:ba:78:fa:59:94:cc:b4:c0:
0a:7f:e7:e3:f8:72:41:60:af:58:f2:97:0c:99:6f:20:0b:78:
74:2f:6e:df:31:6c:b2:2a:61:c6:2c:6e:74:44:53:b1:41:61:
94:b8:54:ce:0e:3e:d3:a0:73:52:ed:8c:13:42:a9:65:89:77:
e9:f5:dc:1a:8d:af:ee:34:0b:b7:b4:9a:54:4d:d8:48:98:c6:
fa:a6:bc:73:bd:87:70:ce:84:a8:38:f6:c3:4f:c0:c0:7a:d3:
5c:78:64:96:53:2a:9d:a3:cb:a1:a2:c3:20:b5:99:e1:3a:74:
1d:b7:28:15:a9:64:a0:fa:d8:aa:93:db:72:8a:52:98:d8:99:
61:b3:5e:09:12:df:c2:51:c0:13:02:a3:59:2b:79:f7:e8:78:
34:d0:ee:41:74:14:70:4b:fc:72:df:90:55:fa:db:a5:5d:28:
a3:78:df:55:36:28:d0:d0:3d:86:5a:bd:de:62:8b:1a:ed:75:
8b:6c:cf:64:b1:86:b8:4c:56:be:10:f0:93:bc:2a:ba:58:70:
48:aa:27:17:b1:d1:04:57:a9:0b:a1:7f:46:48:9c:33:d7:9c:
35:3b:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:03 2026 by rpki-client