
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca03c238-4c4d-3406-99a0-61f94759dd36.roa
File: ca03c238-4c4d-3406-99a0-61f94759dd36.roa (raw, json)
Hash identifier: jWlARqKfu7DkRSHka5GF50yuissxzs9QmsGeB6ZO4so=
Subject key identifier: 5A:C8:34:C6:AC:E5:A0:65:3D:60:34:79:3F:AA:29:F8:FF:7E:9B:71
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584EA790C2E733D4F78239503BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca03c238-4c4d-3406-99a0-61f94759dd36.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16625
IP address blocks: 23.198.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:c2:e7:33:d4:f7:82:39:50:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=1555870c-d8e3-470b-a10e-1de559b07da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:32:33:e8:01:d5:49:65:7a:a7:20:60:06:
4c:c3:a0:2a:61:d6:d1:f4:b2:1c:73:ad:75:62:ec:
a4:ff:c2:2e:c1:bb:c4:bf:e7:ba:d1:6e:c0:db:05:
e9:39:0a:32:f4:4c:87:7e:b8:ad:5c:87:25:63:f9:
a4:fb:81:ae:89:9d:69:d6:a4:15:9e:4c:8b:26:b6:
a5:e6:92:e6:67:8d:66:50:a9:d7:af:ba:d1:89:b6:
74:4e:1e:8b:a3:0e:23:f3:8f:b8:36:aa:8d:9e:a1:
a5:0e:4f:37:00:86:37:ce:74:e8:14:9a:fc:14:db:
03:e9:35:1f:c2:a2:56:0f:12:e5:61:a5:bd:d0:6b:
ee:6a:03:d6:50:d8:d0:77:f0:0a:3e:b3:dd:b7:59:
26:51:f6:61:67:b1:3a:0e:61:c0:1f:1f:35:b5:65:
5a:18:57:b6:68:8d:69:d4:44:21:1f:8d:94:a8:45:
5e:53:c3:da:64:1c:f8:00:76:b8:18:20:a1:8a:bc:
1c:f6:26:67:bf:6a:42:0c:0b:f5:95:81:f6:5d:77:
2a:07:8c:3b:f7:43:00:2a:03:d3:d6:64:56:f6:51:
ac:57:fc:9a:18:08:2e:b3:99:85:c5:e0:1c:04:34:
38:b9:56:26:39:ca:9b:e9:19:47:46:72:29:3d:4c:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:34:C6:AC:E5:A0:65:3D:60:34:79:3F:AA:29:F8:FF:7E:9B:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca03c238-4c4d-3406-99a0-61f94759dd36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:92:39:92:ca:c0:a6:1d:71:1e:50:7e:4c:23:db:bf:de:de:
8f:12:de:ab:bf:79:7e:6d:ff:d1:37:56:0c:cf:1a:8a:31:3f:
bb:a8:15:20:7c:22:57:79:5d:1e:94:20:07:61:30:74:db:e9:
9b:1e:48:af:7b:9f:f7:b2:23:0e:c2:a6:30:0d:a7:11:3c:6c:
88:55:9f:69:af:30:7f:e8:be:34:f1:33:63:ed:6b:b3:65:5c:
9d:3f:cb:78:62:8f:cf:d6:2d:91:8b:a2:35:c0:c4:34:97:d9:
94:29:2e:25:50:6c:e7:1c:32:9d:1e:89:60:47:d0:85:ad:ed:
23:eb:e3:0d:0b:b0:05:23:e7:fb:c1:6b:ae:22:04:54:fa:1d:
c0:46:9e:fc:84:c1:35:1c:39:7d:fb:79:1b:46:4c:44:c7:8c:
79:ef:81:76:db:ad:50:ba:fd:97:1a:09:da:14:60:3b:91:05:
8a:d0:a9:4b:79:c0:b1:d3:e1:06:bd:fc:34:e0:9d:30:e7:5b:
c5:4f:22:2a:92:84:43:c3:31:00:99:e1:d3:1d:f0:c6:f1:74:
b9:fa:de:c6:47:9d:6c:34:cd:3e:21:a8:7a:07:b1:41:d6:1c:
9b:8b:12:3a:7b:39:3a:e9:80:40:77:54:c5:ec:57:6c:5c:1b:
04:f1:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:47:50 2026 by rpki-client