
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa
File: dbb850d2-8598-332e-be3b-c1f9632cdccd.roa (raw, json)
Hash identifier: qdYohSuGKjbNi+99IRY/XZSneUyjUiW1zduxTVJf5UI=
Subject key identifier: B2:DF:49:D9:40:8D:AE:9B:B1:3A:A5:87:50:6A:C8:DD:D3:5A:90:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E0A70065619C033149D9CCE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa
Signing time: Tue 02 Jun 2026 18:32:03 +0000
ROA not before: Tue 02 Jun 2026 18:32:03 +0000
ROA not after: Mon 31 Aug 2026 18:32:03 +0000
asID: 20940
IP address blocks: 23.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:0a:70:06:56:19:c0:33:14:9d:9c:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 2 18:32:03 2026 GMT
Not After : Aug 31 18:32:03 2026 GMT
Subject: CN=66f1315d-f390-4d20-a221-16da5a2a54f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:e9:73:69:64:d2:3a:51:17:4e:52:72:50:
dc:34:8e:af:3b:bd:79:0d:55:e7:ed:af:bc:77:a7:
65:e0:6f:83:de:73:ad:71:1f:c5:19:11:d4:be:2d:
0e:c7:cd:09:b3:ac:a2:ad:e3:38:ed:27:29:da:94:
a8:89:b5:7c:d1:af:97:91:91:0a:60:03:c3:62:79:
20:a9:0a:fc:31:2c:ea:ea:a1:89:d9:42:03:49:5a:
1b:56:00:08:9f:02:a5:d6:2e:6b:36:cb:8d:57:8d:
74:cd:88:93:2e:eb:5d:60:ec:59:21:3d:29:f8:d6:
a2:c9:4d:4c:46:78:b9:62:03:8f:b6:0f:3e:c0:55:
cb:ab:e9:2a:88:70:4b:d2:c9:0a:93:15:15:c8:af:
82:9a:54:85:3f:29:47:42:33:81:7f:88:44:64:97:
db:24:be:fb:30:e3:0c:35:f3:4d:f4:e8:32:32:f7:
73:66:fa:67:3b:0d:dd:60:39:9d:05:68:cf:64:be:
7e:17:84:b0:1e:dd:fd:86:7c:5a:41:71:b0:e0:f3:
87:86:9a:64:a4:be:8d:7c:85:79:7a:9b:af:d3:d8:
95:a0:d3:7a:35:a3:48:0b:74:5d:26:d0:1b:64:88:
60:31:87:9e:f8:e6:f5:e0:47:15:a3:a7:9d:f2:c1:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:49:D9:40:8D:AE:9B:B1:3A:A5:87:50:6A:C8:DD:D3:5A:90:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e2:14:6f:89:42:68:9d:13:d6:67:48:b2:4a:8c:95:09:f6:
84:ce:18:cc:9b:ef:f5:94:d2:5d:ed:99:fd:c9:d6:cd:78:7c:
19:47:ba:b3:df:16:e6:0b:e2:5f:1f:c1:ec:bd:51:37:8b:d9:
63:0e:19:e8:73:97:a8:8f:d1:49:9b:ed:ca:5d:d4:a6:8b:fe:
0f:7b:1b:17:82:84:9b:d8:30:a9:7b:1c:e4:22:87:b5:0f:d2:
bf:66:57:7b:19:da:0c:9f:17:79:08:27:48:46:12:65:0b:f4:
5e:a8:8f:0f:d2:59:f3:47:28:57:39:95:61:a9:1c:e1:b9:cb:
31:31:df:31:da:f8:27:09:48:53:10:1d:47:f4:4f:91:cf:03:
37:f0:3e:24:45:51:92:4d:c5:df:21:49:5e:0f:80:69:8f:f1:
b2:0c:9a:57:0b:74:9a:cb:e6:24:71:8e:5b:b6:ba:54:c2:7d:
5e:54:4d:96:22:c8:af:26:88:58:0c:12:75:3f:a7:69:f3:4d:
af:58:04:ef:23:71:f3:42:08:ca:28:4b:f1:3f:90:04:1e:62:
32:6b:6c:38:f9:f5:45:9a:d4:e4:b3:e1:11:d6:cd:94:e9:51:
23:14:e4:6f:4b:43:39:fa:be:c6:99:74:01:7d:cc:60:00:f2:
ab:05:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:58 2026 by rpki-client