
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a09af48b-bcd2-3e0d-b445-a2bcaa4dc359.roa
File: a09af48b-bcd2-3e0d-b445-a2bcaa4dc359.roa (raw, json)
Hash identifier: ck/qVKxJIG49BeA8EqqyfmHLC8KYavD774H2/bGHokk=
Subject key identifier: 00:8B:D5:58:23:C1:7F:22:36:C8:91:C8:85:AE:72:6D:0A:1F:8E:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E51E9E965EAAF39D494AEAE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a09af48b-bcd2-3e0d-b445-a2bcaa4dc359.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 16625
IP address blocks: 23.64.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 01 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:e9:65:ea:af:39:d4:94:ae:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=33a00939-5739-4dec-a57f-c6fd3623c5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:ef:f7:bd:5a:08:c8:60:c8:bf:07:43:77:
47:22:5e:d6:86:5f:0e:34:57:19:3c:b0:4c:cc:55:
88:94:81:8e:d8:55:89:99:06:ee:a0:20:ad:2b:e4:
07:ba:dd:f7:82:fc:13:1d:7f:a2:9a:0d:ad:db:c5:
34:d0:7d:d0:44:6a:f5:3d:13:70:7f:32:c2:5b:e0:
e9:be:38:0c:e6:82:0c:64:11:b6:a2:6f:e4:32:c8:
68:75:2e:56:c6:18:18:f2:7b:70:77:a9:bb:8d:8a:
b5:f0:f2:c0:9c:db:5b:7f:b2:98:e4:37:9e:e0:95:
ad:fe:ec:c7:99:ed:f4:ad:34:c4:21:a7:15:95:50:
83:9c:91:b9:80:e5:e1:fb:44:a7:d1:7e:3d:e0:77:
33:4f:33:75:22:33:7a:7d:13:bb:f5:cf:29:d5:aa:
6c:d8:35:00:ed:07:fe:24:a4:8d:a2:56:de:88:62:
68:20:88:93:31:b9:50:41:cd:5d:3e:0d:d5:15:fd:
a6:30:7c:d0:04:44:db:f6:11:70:ac:88:bb:3f:5d:
76:60:a0:d2:7a:7f:34:46:e9:e2:95:87:e1:88:65:
f4:ed:37:1c:b6:e1:07:05:64:35:d2:7e:7f:a9:cc:
10:fb:66:2e:12:9d:aa:69:7e:b1:d8:80:61:d3:ce:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:D5:58:23:C1:7F:22:36:C8:91:C8:85:AE:72:6D:0A:1F:8E:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a09af48b-bcd2-3e0d-b445-a2bcaa4dc359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.64.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e5:a3:fc:e0:6e:f3:37:db:1c:0b:6a:96:fd:f7:ac:d3:e4:
6b:f7:19:16:bf:9c:2d:a6:36:0c:ac:3b:90:f3:b4:10:e6:f0:
87:67:ed:da:dc:04:34:fd:7d:5d:3a:e2:6a:d2:47:4f:56:8d:
d7:37:a4:2d:44:a5:fc:73:df:ad:e7:b6:ae:41:1c:d9:1b:eb:
14:65:2e:4a:44:0b:a0:a8:3c:3f:06:6e:8d:0d:f7:eb:43:91:
e8:e7:65:93:4c:47:88:04:82:75:3b:d2:5e:60:70:93:e4:c5:
6f:ef:bd:e0:61:fb:41:24:b9:47:6f:4e:df:6c:6a:31:ff:28:
52:b2:e1:03:b7:93:ae:ca:e0:9f:31:54:c2:21:b8:ca:bf:18:
ff:b5:24:8b:31:05:15:64:bd:c3:62:ff:2f:c5:ee:31:04:28:
44:1a:3a:11:19:59:a4:ff:28:57:a9:b6:8f:be:64:dc:98:bc:
78:f2:86:31:2b:56:64:b3:77:0e:b0:6a:6c:6d:4b:a1:c4:9c:
c0:f0:b0:d9:83:a0:28:d2:76:a5:81:26:f2:05:53:60:d0:f4:
5f:5f:90:61:12:46:5c:5d:42:5f:57:e7:17:71:64:98:ba:0f:
22:56:89:d0:75:b6:fb:2b:4a:d3:4c:b1:c9:e5:b9:39:d9:3c:
5a:20:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:35 2026 by rpki-client