
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90e2456e-2bd2-3bd4-975d-70e2587c06ab.roa
File: 90e2456e-2bd2-3bd4-975d-70e2587c06ab.roa (raw, json)
Hash identifier: Nn2QCFdU89GIZosIO+olCL92R/a+mJ+UMihLV4rZ3ck=
Subject key identifier: 95:D4:47:AF:30:7B:4C:A4:7B:8E:7C:08:BD:25:1E:38:6C:78:9B:22
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DFBD5F508CE3292C44A693100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90e2456e-2bd2-3bd4-975d-70e2587c06ab.roa
Signing time: Thu 28 May 2026 13:00:12 +0000
ROA not before: Thu 28 May 2026 13:00:12 +0000
ROA not after: Wed 26 Aug 2026 13:00:12 +0000
asID: 20940
IP address blocks: 23.212.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:d5:f5:08:ce:32:92:c4:4a:69:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 28 13:00:12 2026 GMT
Not After : Aug 26 13:00:12 2026 GMT
Subject: CN=4f87a7a7-3d0b-4c6a-95b7-10bed1cc5492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:37:b1:e2:bf:59:f5:d3:86:05:80:05:ed:
e5:ba:06:fd:11:ac:2b:d7:ec:25:d5:cc:f9:a2:5e:
0d:d6:05:b4:3e:04:b4:52:72:39:65:92:7b:06:70:
61:60:55:f3:35:4e:c5:a0:f2:0e:76:25:be:00:0a:
c5:f1:da:1d:2f:bc:a6:38:0f:41:81:2b:bb:30:eb:
eb:4d:d3:a5:eb:85:76:48:03:1f:2a:5f:ae:ed:fb:
5c:99:8e:50:2a:97:73:08:13:1c:34:c1:f7:70:fb:
4a:04:6f:68:d2:62:60:7a:f7:14:05:7d:bc:e3:dc:
77:c8:3d:a5:f8:61:8d:6a:b3:71:3c:61:27:f1:10:
1b:c3:1a:86:82:44:12:d1:3c:5e:d1:45:3b:5b:ea:
04:26:a8:c5:a3:42:58:59:a7:75:ce:67:ee:66:aa:
b7:ff:94:30:98:4a:a9:b6:4b:2a:9f:4e:54:6f:df:
38:10:ab:0e:92:2d:0f:ea:a7:43:f3:50:c6:66:c3:
3e:89:12:79:cb:8e:c1:cf:b8:a3:39:73:a6:fe:00:
31:dc:e5:11:72:7e:ef:74:67:dc:8c:2b:7f:ba:43:
44:71:fd:ba:41:5d:cb:19:92:03:49:10:66:e6:db:
2b:82:2c:30:5e:d6:c9:76:64:85:8c:f4:c4:6e:88:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:47:AF:30:7B:4C:A4:7B:8E:7C:08:BD:25:1E:38:6C:78:9B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90e2456e-2bd2-3bd4-975d-70e2587c06ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:a8:f7:35:1c:37:87:db:00:39:ec:74:e5:f7:9a:9e:8b:77:
91:11:45:45:23:be:29:80:1f:01:cf:84:11:41:ac:9d:06:39:
8a:bc:13:64:b2:fa:d4:53:07:d2:42:2f:39:a8:63:9a:af:78:
0b:50:7a:86:d7:51:12:9f:f4:b9:d1:a0:df:10:36:74:8f:9d:
96:4b:a9:70:2c:cf:70:02:73:0d:76:9f:8c:72:06:6a:22:6b:
ac:04:39:d9:63:01:91:f3:7d:7f:57:87:b8:2b:64:a0:23:87:
e8:f0:af:24:8e:af:01:7a:77:cd:ec:67:21:00:cb:f1:ae:a0:
92:02:e8:57:2b:ed:6d:4a:c3:77:3d:05:76:be:da:c5:55:5d:
31:58:35:b7:f7:70:50:95:08:db:0f:11:d4:06:e6:de:87:7c:
f7:85:b3:c1:86:6a:78:61:8f:39:86:c6:37:9e:5b:e6:98:1d:
8d:cd:ec:7c:3c:ec:13:f3:a3:11:cb:bb:9c:c8:b2:2b:84:a1:
d6:54:8b:6b:f3:74:14:76:4e:e8:3b:77:b8:15:23:b6:b5:26:
69:55:de:73:c1:5b:50:4c:72:70:d2:1d:d5:63:90:59:90:d1:
bb:5b:4b:21:da:5b:2a:85:35:e7:60:68:07:b7:2f:9c:55:b1:
be:da:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:22 2026 by rpki-client