
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa
File: 89c520a2-27d2-314a-a944-9323e5ff3824.roa (raw, json)
Hash identifier: 8Lte6IDQphyWAgKw+4XXBzuporl0ZNvJeJW0w9Ojj8g=
Subject key identifier: A9:E0:0A:6A:6F:78:12:7D:CA:91:4D:FB:CF:56:3C:92:D9:80:FD:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D4D5A3ECB4632EDD91DB23B20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.49.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 31 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:3e:cb:46:32:ed:d9:1d:b2:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=4154e272-aebb-4e7e-a079-5cdfb192a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:c2:c7:cb:31:dc:aa:4e:88:9e:d5:d5:be:
cb:31:e2:00:46:18:9f:04:5e:ab:ad:4b:e1:22:4c:
17:49:50:0c:0a:06:e1:96:5e:ae:75:d3:cc:3b:d9:
82:c7:4e:8f:ba:01:75:46:e6:30:36:77:70:d1:ad:
92:34:0f:95:2a:45:38:f4:b9:04:8b:11:9d:bb:0c:
1c:77:28:e3:57:2e:f4:7f:c5:2a:57:15:b7:2d:be:
d9:8b:19:52:f1:54:78:d9:36:35:23:13:31:28:1d:
07:f5:04:dd:4a:60:0e:b2:aa:95:43:7b:66:36:49:
90:c4:09:75:f6:d5:c7:f4:06:8b:71:9b:a2:7d:9d:
cb:0f:3c:03:7a:73:6f:3e:40:2a:8a:3f:9d:f2:0b:
4c:e6:87:a3:44:19:a9:3d:f2:fa:52:c8:b2:46:51:
df:7f:43:d6:1e:d8:e7:bf:74:dc:16:7e:b3:48:1d:
f5:c7:50:75:c4:3a:ec:8e:2c:cb:21:2e:62:5a:23:
86:b7:9d:22:b8:cd:d8:d1:5c:87:4f:36:a5:06:9c:
77:e3:58:9c:ed:7b:1b:25:04:71:18:36:65:a8:75:
c0:62:13:b0:f1:ce:71:50:df:f8:e3:e8:91:89:02:
5c:44:8b:3d:66:85:0e:28:fd:7e:c2:c5:af:7f:d6:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:0A:6A:6F:78:12:7D:CA:91:4D:FB:CF:56:3C:92:D9:80:FD:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89c520a2-27d2-314a-a944-9323e5ff3824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:78:8b:fd:f7:f9:01:0f:21:38:b5:bb:f5:7e:8f:b3:77:ba:
e4:4d:e4:37:da:bb:fe:b7:b2:23:aa:79:71:0c:cd:0a:4e:ae:
a8:f2:5f:de:3d:2f:d3:15:23:c6:fb:48:ef:09:f4:7a:0a:8e:
12:02:de:91:99:28:59:c0:9f:3c:16:0b:c0:b5:d4:2c:10:1f:
27:c2:58:82:f7:bc:d5:06:ae:bb:00:f6:14:e2:ee:39:a4:4c:
9f:d3:1e:81:51:f8:2a:59:ec:8b:42:39:11:08:a1:e1:f0:42:
db:5a:ac:a2:bb:3a:a2:7e:bf:c0:e0:34:36:dc:29:58:92:94:
4c:ab:d0:12:ae:57:26:b5:39:49:bf:de:fd:7f:57:64:fb:7b:
6e:dc:ca:00:aa:82:38:1d:0b:94:51:28:e6:71:2c:2f:a5:a3:
e4:47:a5:88:03:e4:98:f2:40:a4:64:45:31:89:e7:16:85:5d:
d1:f5:78:3d:99:d7:32:7f:df:8d:f3:54:be:dd:b4:b7:70:99:
e7:eb:9f:91:a1:68:31:f3:cb:42:83:2f:e7:06:dd:42:9b:04:
45:9f:2d:cc:e6:64:f8:91:af:68:18:ec:80:70:76:59:18:14:
e0:aa:89:d9:b2:d2:b8:78:50:d0:7c:85:f1:ca:62:cc:bd:29:
bd:00:72:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWj7LRjLt2R2yOyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
NDE1NGUyNzItYWViYi00ZTdlLWEwNzktNWNkZmIxOTJhNGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoXCx8sx3KpOiJ7V1b7LMeIARhifBF6rrUvh
IkwXSVAMCgbhll6uddPMO9mCx06PugF1RuYwNndw0a2SNA+VKkU49LkEixGduwwc
dyjjVy70f8UqVxW3Lb7ZixlS8VR42TY1IxMxKB0H9QTdSmAOsqqVQ3tmNkmQxAl1
9tXH9AaLcZuifZ3LDzwDenNvPkAqij+d8gtM5oejRBmpPfL6UsiyRlHff0PWHtjn
v3TcFn6zSB31x1B1xDrsjizLIS5iWiOGt50iuM3Y0VyHTzalBpx341ic7XsbJQRx
GDZlqHXAYhOw8c5xUN/44+iRiQJcRIs9ZoUOKP1+wsWvf9aKmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKngCmpveBJ9ypFN+89WPJLZgP0CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODljNTIwYTItMjdkMi0z
MTRhLWE5NDQtOTMyM2U1ZmYzODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzHEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEB4i/33+QEPITi1u/V+j7N3uuRN5Dfau/63siOqeXEMzQpOrqjyX949
L9MVI8b7SO8J9HoKjhIC3pGZKFnAnzwWC8C11CwQHyfCWIL3vNUGrrsA9hTi7jmk
TJ/THoFR+CpZ7ItCOREIoeHwQttarKK7OqJ+v8DgNDbcKViSlEyr0BKuVya1OUm/
3v1/V2T7e27cygCqgjgdC5RRKOZxLC+lo+RHpYgD5JjyQKRkRTGJ5xaFXdH1eD2Z
1zJ/343zVL7dtLdwmefrn5GhaDHzy0KDL+cG3UKbBEWfLczmZPiRr2gY7IBwdlkY
FOCqidmy0rh4UNB8hfHKYsy9Kb0Acvs=
-----END CERTIFICATE-----
Generated at Sun Mar 29 23:59:36 2026 by rpki-client