
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa
File: 8407dad9-44ac-32d5-8941-11814f4815f1.roa (raw, json)
Hash identifier: fQ/oR9OZuRAicsdwdfC5fJeKK/RDJDpr281EO/vFghE=
Subject key identifier: 24:99:60:E7:0A:BE:DE:CF:7F:EE:E1:A3:5B:38:D5:52:E2:F7:AD:14
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E000603467A92C7B11A9275A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 20940
IP address blocks: 23.217.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:06:03:46:7a:92:c7:b1:1a:92:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=d770a44d-e5dd-4b23-bd88-3b7198bca9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:d0:21:ff:04:a9:65:43:41:15:f6:b0:6b:
0a:1b:a5:e1:ab:21:a7:bc:58:f1:3f:d8:96:17:5d:
6c:15:ed:14:35:8b:0e:a4:54:cf:8a:75:e9:1e:f3:
3f:f5:02:8c:ec:ac:a9:2a:f2:48:b2:35:e3:1d:fb:
f0:b7:48:bc:91:e4:5a:d7:72:0f:a2:f9:09:ff:34:
e8:28:c8:7c:8d:bd:1c:48:b2:3a:29:07:bb:78:f3:
28:00:2a:a7:24:5d:82:b2:3e:72:fa:e0:de:a4:49:
78:c4:4c:ee:e9:1d:81:2c:9e:1e:58:75:04:27:3d:
ed:88:d3:5e:d9:6a:4a:6d:bc:c5:7e:30:e2:e0:65:
14:7d:76:74:28:17:6c:6e:74:2a:45:69:7b:2b:5d:
a4:c8:de:77:6b:76:89:76:a3:56:84:e6:7a:53:d1:
b9:87:95:c0:99:84:7a:be:7f:17:cb:57:c4:1a:ba:
26:40:5d:c0:67:6e:a9:7c:60:d8:49:e7:d1:e8:d8:
64:93:22:41:37:e7:33:46:60:a5:1b:81:36:e3:fb:
23:53:d3:4b:75:08:41:ac:82:ad:8b:f5:40:9a:3c:
3e:09:0c:16:08:55:44:be:8f:0b:9d:cb:3a:72:bc:
41:35:58:13:43:6c:85:8a:50:85:6c:1f:0c:79:60:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:60:E7:0A:BE:DE:CF:7F:EE:E1:A3:5B:38:D5:52:E2:F7:AD:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8407dad9-44ac-32d5-8941-11814f4815f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:30:c4:10:0a:d1:e6:6f:40:76:5c:18:6d:be:82:39:d3:9d:
0f:2c:0d:c4:3e:81:56:4d:c4:61:5a:0c:97:aa:7a:cb:a2:7f:
3d:e9:30:ca:7e:fa:d6:36:53:2d:9f:35:2b:2a:b5:6d:ac:98:
9f:3b:0f:b2:62:f5:04:6d:b5:2a:2b:ea:69:3b:31:e6:d6:c0:
64:59:16:fc:a1:01:3a:d8:e4:9b:b6:82:9d:75:04:ab:78:4a:
76:a3:19:55:bd:e9:c1:52:25:48:26:a6:15:cd:54:fa:a3:83:
70:99:f4:9b:06:fd:8a:06:21:df:ac:43:1e:ed:a6:11:ab:b7:
d5:2a:42:be:29:e4:87:3e:f1:6c:67:96:2b:ef:f2:39:11:cd:
57:11:7f:1c:f4:44:40:d1:2d:21:fc:a9:ee:42:e7:49:b5:2f:
cd:c9:5f:f2:e0:4b:36:d0:a7:13:db:d6:84:a0:76:08:96:ea:
3c:cd:e4:7d:f0:d3:34:32:f0:e5:d5:01:22:12:4f:61:18:08:
5e:08:94:dc:af:d2:75:6e:22:5c:dd:81:19:40:5a:7d:50:74:
2c:e3:d2:a2:ce:8c:b1:a8:38:4c:55:b4:3c:6c:e1:b8:6c:93:
09:e0:ea:ba:48:37:6e:fd:b4:0c:90:3c:b2:74:c9:f2:b3:c7:
90:48:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:26 2026 by rpki-client