
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
File: a20f8236-39a1-32d8-9efa-9f8b8973d345.roa (raw, json)
Hash identifier: i68v0kNYS3uW+VPcoFREABkIvblO0HixhXgsYnBq0i8=
Subject key identifier: 88:69:14:33:0E:EA:7A:0B:BF:02:A0:4B:68:CC:DE:1A:FA:D2:97:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DE84B58A7225A0D420EB11AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
Signing time: Thu 21 May 2026 13:00:32 +0000
ROA not before: Thu 21 May 2026 13:00:32 +0000
ROA not after: Wed 19 Aug 2026 13:00:32 +0000
asID: 24319
IP address blocks: 23.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e8:4b:58:a7:22:5a:0d:42:0e:b1:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 21 13:00:32 2026 GMT
Not After : Aug 19 13:00:32 2026 GMT
Subject: CN=e4f32b4b-af5c-47c7-8c7c-670ca76bd2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:36:c1:22:fc:20:6b:2f:6c:b8:e5:36:65:
24:6b:31:a5:40:61:9c:d1:32:e5:09:02:aa:90:1d:
ef:68:74:84:d1:f0:1e:db:e3:51:4e:9a:00:36:33:
ce:7b:87:8d:50:7b:99:e9:a0:87:06:26:62:bb:42:
ab:c8:93:e1:4d:2b:72:90:0c:43:c5:1f:86:29:4a:
b7:74:cf:01:47:a7:29:0e:92:f7:62:e3:19:2c:fa:
f4:b0:89:a6:20:0e:52:1e:53:c9:3f:68:b5:a9:61:
27:d0:ba:33:f2:39:e7:c2:1a:a3:2a:67:6e:7e:95:
d5:29:30:1b:07:43:13:ca:45:52:d3:04:81:c4:12:
ba:0a:fc:55:95:b9:4b:64:fa:15:d9:8d:0b:bf:21:
9a:b5:09:18:8b:a5:5d:45:7d:46:da:a7:96:a7:b1:
cb:6d:e4:88:62:14:f4:2b:81:f3:76:5b:20:72:22:
cd:eb:de:f2:a7:76:a5:39:7d:c7:2f:4c:e8:5f:92:
3e:9a:43:6f:6a:ad:b4:af:9f:13:56:4f:38:4a:2d:
7c:96:9a:56:46:2a:8a:36:c0:2d:99:d7:97:01:c7:
27:85:ae:a1:90:7d:9e:96:a9:77:5a:b1:0b:0d:60:
ee:f1:fe:b9:b5:37:df:04:9e:4a:63:c7:e8:9a:4d:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:14:33:0E:EA:7A:0B:BF:02:A0:4B:68:CC:DE:1A:FA:D2:97:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:1d:54:3a:f8:5e:14:bc:1a:57:7c:bd:34:fa:2f:76:aa:9b:
0d:ec:6b:10:4c:82:ae:0a:de:f9:23:b3:b9:92:9e:8d:c2:67:
c1:e1:c4:6b:cc:c5:b5:91:95:25:56:42:36:47:99:1f:4e:f3:
c8:1c:d2:52:c8:dc:48:de:54:4d:7f:5b:b0:f8:30:77:e6:2b:
92:4f:33:47:1b:40:1e:44:59:6f:73:2b:a7:38:81:a0:5c:c3:
7c:e1:8c:76:4a:b3:9e:07:b9:a9:00:c2:e2:a0:a4:f2:45:f5:
89:1e:4c:31:59:fc:cd:ab:c2:b6:2b:55:a1:7e:e9:c0:45:94:
c1:51:4c:7c:66:db:52:15:2f:cf:ef:2f:00:da:b2:59:67:4d:
8f:43:b1:ff:55:eb:fb:3a:06:76:15:65:5d:16:ba:f5:81:e5:
75:67:77:30:62:db:3e:93:6c:f4:b1:b6:d3:62:bd:bc:65:d0:
7a:7d:8a:34:3c:99:9e:22:1a:85:50:a5:ff:bd:38:2c:2b:d7:
ce:3f:6a:52:ae:fc:07:d9:ea:94:b2:4c:39:e4:5d:fb:34:70:
7b:1a:84:e1:cc:2f:79:43:e6:d3:68:aa:9b:b7:3f:29:8a:00:
6d:b6:3f:e3:44:ef:2f:1e:90:6f:86:70:e7:e5:d5:0b:2b:02:
66:40:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:13 2026 by rpki-client