
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa
File: 99e144b9-d999-3ac5-9683-5b840e1d62e4.roa (raw, json)
Hash identifier: CRRhzcuGz3AuvYw9hocA4Oar8HFFDSQNSjLpM9kODwQ=
Subject key identifier: 74:70:DD:53:89:D4:AA:70:00:16:91:F0:99:65:25:86:22:BF:10:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA78789424A1B0E75A1111780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16625
IP address blocks: 23.58.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:89:42:4a:1b:0e:75:a1:11:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9deeec0c-98a6-4c42-84c8-2d3176cc8de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:07:14:40:7e:b2:76:e3:1f:a3:d5:7f:2b:
e0:26:3c:13:20:f1:7b:90:d3:e9:2f:89:2e:73:d9:
a5:a7:85:39:f5:02:d6:4d:08:b5:ad:36:e7:7b:98:
ef:8e:4f:cb:34:43:0b:a6:ec:00:d7:aa:25:ca:48:
59:5e:28:1c:6a:7e:d7:d6:32:37:7d:a8:d6:5a:0b:
d3:d8:43:8c:9e:45:5b:18:ab:34:f3:65:84:64:d3:
ee:59:da:b0:62:8b:da:63:1b:64:a1:fc:51:9c:1c:
eb:c2:bc:15:2a:36:08:1a:a9:6a:a3:db:88:20:ed:
4e:88:d7:33:db:dd:2d:f6:76:08:8a:91:cf:1a:78:
27:cf:b0:60:83:87:1f:9b:73:d7:f9:d9:c0:b9:95:
cf:fc:7d:20:53:6f:ab:76:d6:fa:34:d2:d3:71:af:
2a:12:5a:9d:6b:7a:16:93:92:85:97:f9:cc:83:90:
58:1e:85:34:17:e7:3e:f5:cc:bf:db:13:a0:61:fd:
1c:80:08:4a:e3:1c:3f:a9:be:df:aa:f5:a3:26:7a:
87:24:05:d3:67:12:a5:06:c3:e0:24:fc:63:9a:17:
df:e6:76:b9:7b:eb:24:49:a3:e5:7b:33:71:c0:49:
9c:68:45:bf:ec:11:20:24:cd:e9:c8:fd:44:73:ae:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:DD:53:89:D4:AA:70:00:16:91:F0:99:65:25:86:22:BF:10:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99e144b9-d999-3ac5-9683-5b840e1d62e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.58.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:66:ce:51:9c:5c:36:e8:2d:41:de:02:1b:88:42:c2:11:67:
48:60:2f:69:c3:06:ca:1d:55:2d:d8:c8:06:d5:f6:1c:d3:19:
11:7a:ac:a6:fb:18:a8:86:a0:a2:fa:65:b2:cf:e3:f8:f3:9c:
82:1f:9b:d8:a1:d9:6d:91:bd:af:dc:af:0f:92:a5:d2:24:68:
b8:94:93:8c:48:c1:d9:13:4e:5d:82:6f:3c:16:05:31:b5:86:
f7:aa:d5:80:49:64:40:43:39:7c:c0:c4:90:59:aa:26:c9:5d:
8a:47:98:07:19:90:1c:45:39:c7:aa:10:dd:55:db:12:fe:b4:
56:01:a4:59:e2:65:04:65:55:08:33:cd:1e:8e:d7:8d:7d:df:
28:f3:4f:45:b3:0f:0a:c4:74:11:5a:2e:20:30:0f:6e:85:43:
d5:73:1d:51:74:4a:82:3e:4b:2c:bb:70:d6:ae:83:b0:ed:28:
32:22:09:02:36:c3:e3:39:a4:34:cc:52:5f:a5:34:d3:c6:02:
14:f6:d4:78:fc:2b:c2:d5:31:de:d5:0c:10:73:cb:66:7c:35:
f2:a0:c4:d8:86:dd:49:c1:28:bc:c4:08:53:66:a2:17:e6:dc:
a1:ac:90:82:ab:31:b9:ec:69:cc:74:00:5b:4b:4d:26:62:d5:
48:3c:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:48:27 2026 by rpki-client