
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa
File: 65688926-85e9-3b98-8a36-0ddca3b41341.roa (raw, json)
Hash identifier: y9qU9OYP7VEM+hV24gN+BplQb3d0Q/efrDbW3uQZuW8=
Subject key identifier: 37:A7:DB:B2:E9:30:B3:14:A2:99:51:B5:D0:DF:EA:30:EC:C0:27:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E8F54F924E0DF0F2A2E8B7A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa
Signing time: Mon 20 Jul 2026 09:00:11 +0000
ROA not before: Mon 20 Jul 2026 09:00:11 +0000
ROA not after: Sun 18 Oct 2026 09:00:11 +0000
asID: 16625
IP address blocks: 23.33.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8f:54:f9:24:e0:df:0f:2a:2e:8b:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 20 09:00:11 2026 GMT
Not After : Oct 18 09:00:11 2026 GMT
Subject: CN=f93c6c86-d6e4-486d-9535-092afa48c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:89:e7:6c:30:2a:b2:8b:73:22:db:c8:56:
5b:84:71:fb:9a:68:5e:4f:47:2b:85:21:f7:3e:a1:
cc:e7:f9:85:d3:f6:06:8f:b1:86:63:20:da:07:6d:
08:e8:30:71:88:c2:5d:07:2a:8a:15:44:b4:30:6c:
a5:ab:f1:db:e9:0c:fd:80:40:44:4b:d4:95:87:74:
e7:1e:32:74:84:f2:c6:77:4f:71:a2:e5:82:9c:9f:
b1:cf:7c:04:90:36:27:dc:b5:bd:b3:4e:a1:6b:e3:
3a:0c:0f:0c:d4:2d:8e:08:c3:db:a0:28:f4:cd:b1:
cb:76:b8:e1:4f:6a:7e:00:82:34:0e:22:53:e5:c1:
4c:80:99:9a:f0:c0:b2:26:28:7a:dc:2c:0e:3a:64:
36:69:1f:7c:dc:54:1f:b0:de:fa:7c:af:b0:47:fa:
1c:78:8a:00:d0:56:75:7a:e7:26:b0:a9:a9:e0:32:
54:07:b1:4e:cd:04:fd:8b:ad:0c:8f:2c:e3:06:4f:
11:0e:8d:0a:10:f4:66:83:11:b1:fb:ed:de:79:dc:
c7:e8:08:c9:d9:3c:60:59:e7:9f:08:f8:48:a0:5b:
9c:6b:7b:a1:5e:51:71:69:13:f6:fa:d2:bf:d9:3b:
6e:0c:b8:43:92:b1:d2:16:96:24:9f:cc:02:86:16:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:DB:B2:E9:30:B3:14:A2:99:51:B5:D0:DF:EA:30:EC:C0:27:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:cb:4b:bb:94:8f:3e:33:f5:21:07:83:ac:ec:16:5f:f3:dc:
d2:01:e9:29:92:41:c3:03:5f:bb:e1:a6:c4:89:27:59:7a:eb:
a7:3c:82:ab:44:00:2f:21:41:66:70:3d:90:c7:37:6e:c6:8c:
01:0f:f9:e9:42:69:a9:4c:8b:83:ca:d8:93:7b:f0:77:79:fb:
9b:43:6d:65:b2:3a:26:be:18:75:02:49:50:e1:45:99:e6:c0:
e7:13:68:b5:ab:41:3d:61:63:6a:1c:8b:d4:81:0b:3a:af:d8:
51:6f:d4:a6:b8:ea:51:fc:7e:67:ef:27:f4:52:fb:f3:f2:ed:
a7:a7:be:51:e1:4c:a6:ee:7b:ff:82:bd:c8:8c:ed:54:10:6d:
d2:67:6b:7c:d6:0f:18:76:22:ae:2e:ac:4a:9f:be:93:1d:99:
cc:0b:29:ae:7b:3f:cb:a5:8d:bf:55:5c:2b:23:6a:25:7e:f8:
7b:50:45:34:fc:03:a6:8f:41:c4:d5:db:90:91:d3:de:6a:4a:
7e:4a:52:1f:32:b5:d2:e3:4c:92:f3:5e:2e:bd:ed:5f:37:79:
46:25:b5:85:43:82:3d:d0:19:21:49:30:aa:79:23:b3:de:c0:
93:45:59:28:a8:e8:85:f6:34:72:3d:b2:d1:d7:0a:88:a6:aa:
cf:3d:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:59:11 2026 by rpki-client