
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa
File: 5fbbce69-7323-3009-bfa1-7a42782344ac.roa (raw, json)
Hash identifier: HQsH2/+Ia6ceUBJ3QUpPmH2TFMhsQsczpJWu3spAgZE=
Subject key identifier: 6D:4C:38:D9:C8:BE:D8:CA:50:1F:38:04:7C:CF:8D:7C:EA:9D:9A:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E7E94FEFE5F6D9411A644BC60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 35994
IP address blocks: 23.39.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:94:fe:fe:5f:6d:94:11:a6:44:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=2d517c13-96b4-4bfa-8a69-bbb90f8601af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:f5:f8:cc:e5:87:9a:1d:f1:b9:1b:82:02:
3a:77:ca:c0:8f:17:46:f3:cc:b6:3e:bf:e1:b9:ae:
aa:01:5f:da:86:53:eb:60:4b:c4:c9:23:14:42:9e:
ee:b0:fe:d4:03:bf:9e:6a:99:8e:b5:6c:1e:c9:92:
73:75:a9:1f:c0:78:71:2c:fe:6b:26:f4:13:93:84:
12:37:c9:e3:90:01:75:64:fb:9f:71:77:41:50:cf:
99:45:56:1d:81:2c:55:8c:5f:d4:f1:88:11:96:bc:
9a:0a:a7:96:a4:e4:13:91:ab:b0:c0:c3:41:0e:81:
d0:c5:1f:c2:e4:84:dc:18:7b:71:96:da:6b:8e:0f:
98:38:bb:f2:18:79:94:ff:a6:38:ee:f8:fd:81:2a:
46:24:63:97:23:d5:02:42:94:20:a8:59:f3:3d:dc:
fc:c0:7b:09:eb:fb:54:2b:67:de:3d:fd:81:6d:25:
f0:5a:54:90:2d:f6:29:63:5f:df:ab:51:57:6d:37:
ca:35:c9:a0:61:12:10:5b:7d:37:0f:e6:d9:70:bf:
3d:52:34:be:2d:1c:8a:90:28:df:d0:38:ae:bc:3c:
d6:d1:ff:67:ba:9b:6e:a1:51:71:ce:cb:65:e8:1d:
d9:85:a6:28:9c:58:d9:0b:fd:b4:b0:ac:52:4e:d9:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:38:D9:C8:BE:D8:CA:50:1F:38:04:7C:CF:8D:7C:EA:9D:9A:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b3:75:67:4d:e4:3b:86:d2:4a:93:c3:03:0d:10:04:43:1f:
9e:49:41:01:96:b8:d0:4a:ca:7b:14:83:5e:7e:60:ce:3a:86:
21:c5:5f:84:fa:e0:99:85:3b:ad:68:ae:e2:7c:1b:d6:c2:93:
fd:d0:2d:fd:7c:3a:c8:b9:31:5c:f2:bd:d2:b9:1e:4c:f2:de:
f2:af:9f:c0:c2:43:92:47:9a:da:ff:7c:1e:ae:7e:c3:ff:36:
57:67:10:5a:a7:34:ac:91:24:ae:a4:17:3a:e1:84:3e:86:0b:
18:69:12:9c:41:52:ee:5f:0e:16:e0:55:99:37:c2:1c:6b:bd:
41:0e:71:d2:c9:ad:0e:d4:fe:f0:ea:c1:d8:b5:8b:4f:60:56:
01:91:57:a0:ea:52:0d:14:70:d3:ae:be:9d:02:53:0f:bf:45:
6a:01:6b:fb:bf:e1:07:67:32:10:a9:9a:a6:03:2e:ac:68:1b:
f5:19:3e:d5:eb:8f:2b:7a:e1:17:7f:32:45:5d:03:99:ce:bd:
fa:96:e6:46:98:10:8c:77:62:20:15:2a:e5:b0:e7:27:05:32:
27:fb:9c:14:01:e8:41:7f:bf:f7:c0:2b:ae:ea:53:36:26:18:
cc:69:d9:6a:11:96:01:5a:e7:4a:eb:18:43:96:c0:b3:16:bb:
2f:f5:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:39:48 2026 by rpki-client