
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa
File: d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa (raw, json)
Hash identifier: rKl/HB3s4vBpym8wM093zSC9vM0zpbIzhnR4AaK+hh0=
Subject key identifier: A1:BA:D9:3B:60:7A:7E:AF:22:D0:27:DB:CD:E7:E8:85:B8:4C:DC:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DFA708C2C60BC47CF1C056900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 20940
IP address blocks: 23.206.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:8c:2c:60:bc:47:cf:1c:05:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=ae4d7e27-8362-4a1b-bd0f-7d86734fa687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:97:74:a2:9d:4f:25:0d:69:7d:e0:ac:0a:
24:69:a9:d9:c6:c8:63:b7:65:fc:5f:ea:89:26:03:
35:db:f6:52:5c:43:c2:13:42:db:ce:e2:fb:89:44:
cf:58:4a:60:8b:9f:0b:e6:b2:b1:bf:65:10:2e:80:
e2:11:c1:94:62:51:65:3b:8b:2c:92:1c:15:24:d0:
56:c5:52:1c:da:82:74:0f:02:53:7e:14:6a:55:19:
33:ff:88:c1:cd:ff:fe:c2:b0:bb:cd:61:c4:27:d7:
ac:05:99:2d:0b:5e:f6:83:df:0f:99:d5:e0:cd:8d:
1d:95:9e:8e:e5:93:9f:e7:4f:98:c4:e9:c6:3c:e3:
a6:f5:b4:ed:bc:0c:95:b6:af:6a:00:30:c8:9c:08:
7a:69:f3:8f:f4:ed:40:d3:0e:13:9d:ab:2b:86:41:
07:81:95:9d:56:39:4c:f3:3f:e0:4d:25:c3:ab:8f:
39:8a:c1:5d:fb:48:62:1e:86:17:c9:52:1f:6c:c8:
65:54:fc:87:4c:fe:d5:16:f1:aa:cd:4a:ae:e1:e5:
70:aa:fc:93:e3:ad:fe:ca:bc:e4:02:0f:a8:fc:cc:
a1:c9:65:12:20:75:0b:64:a2:43:08:e2:46:d7:27:
81:47:27:32:dc:3a:0d:50:fb:00:da:a4:3c:01:78:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:D9:3B:60:7A:7E:AF:22:D0:27:DB:CD:E7:E8:85:B8:4C:DC:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:c7:c6:7c:9a:39:24:6c:39:f9:4d:d5:07:1a:0b:db:0c:15:
ba:76:65:51:69:ec:46:3e:b6:d3:50:d6:7a:35:3a:db:ff:84:
aa:25:ad:51:b7:8c:4d:f5:39:8c:c7:88:95:a8:25:cd:43:15:
9a:97:7c:65:7d:6c:35:6b:85:d8:40:2f:7d:ea:c3:a3:8a:a5:
62:44:16:f9:e5:a1:a8:de:3d:cc:09:57:ce:73:44:bf:f0:41:
e0:17:26:7e:19:64:66:13:fc:06:ae:cc:98:b9:8b:d2:ed:27:
8a:32:b3:ec:27:33:74:18:58:56:d8:35:63:06:3c:c3:99:0d:
10:af:cb:8b:9b:9d:e2:52:18:db:71:9c:2f:72:5d:f2:d8:48:
bc:e7:32:06:75:79:e4:b2:9c:8f:cd:0d:69:2c:73:01:f8:bd:
75:ae:f9:af:ee:aa:b4:2d:04:cc:7d:cc:e0:c4:aa:b0:b7:ba:
4b:f1:b8:45:24:d3:f0:53:4f:cf:26:a4:25:52:94:75:4d:89:
2a:a6:4f:76:bd:34:54:7c:55:00:19:b1:c8:71:b2:3f:fc:80:
f9:78:70:28:3d:d7:24:78:75:cd:20:a9:40:b2:36:29:e7:92:
67:3c:99:7f:e6:2d:c6:a7:10:60:a0:6a:8a:72:72:0c:7c:ee:
7b:32:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:39 2026 by rpki-client