
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
File: 60b15d2e-704c-3568-abdb-f630f5163896.roa (raw, json)
Hash identifier: BtKQzpqDaH77aL+gOPbLjZgV72G6ESVGVT2XLu+72Js=
Subject key identifier: 13:2F:0D:0C:31:25:FE:5A:25:CE:65:00:84:13:3C:5B:93:E9:36:FB
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584E9A7FBD728F73E00E93348370
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 22898
IP address blocks: 8.28.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:bd:72:8f:73:e0:0e:93:34:83:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=65a68280-b7ce-45b8-b315-cac864d44663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:a6:64:d6:7d:ab:1c:73:9a:74:49:62:ed:
e3:29:5c:73:33:4e:1b:e5:a8:44:9f:bf:b2:ae:f2:
51:aa:c4:db:f9:78:b5:5c:26:9d:bb:1f:1b:ff:e6:
88:6b:45:34:b4:33:eb:3d:01:1b:f2:10:cd:ff:74:
79:71:83:ae:0f:01:4a:a7:fb:aa:50:a7:2e:18:cd:
f2:4d:5b:c3:49:e8:b7:28:7f:22:7c:9a:d5:e8:d0:
7e:8e:0b:06:a5:c5:f9:c5:99:52:91:52:07:bf:8e:
1f:0a:69:18:6e:2c:d3:76:8c:09:86:77:0c:7c:b2:
6a:a1:21:ea:09:8a:c2:3d:fd:ac:f7:a4:2d:dc:be:
70:f1:58:3a:0c:67:65:d6:70:89:2f:93:9d:96:95:
6a:1d:23:bb:1a:37:80:bc:45:e5:b5:69:df:43:72:
85:8a:35:d7:23:4d:10:89:fd:fc:16:78:01:27:44:
29:d1:40:06:76:52:dd:e8:02:09:26:10:b8:70:c1:
45:a7:16:d1:25:36:62:d5:a2:26:8c:dc:3e:d8:6f:
00:62:43:64:93:0d:3c:b2:ae:e1:88:69:3c:7f:7a:
97:71:4b:24:f9:01:c1:be:ef:5c:b5:bd:e0:01:06:
eb:7f:f8:33:59:ab:2a:c5:37:3a:0c:60:fd:01:c6:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:0D:0C:31:25:FE:5A:25:CE:65:00:84:13:3C:5B:93:E9:36:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/60b15d2e-704c-3568-abdb-f630f5163896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.28.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f5:04:4b:61:d0:ec:d2:13:1c:75:26:2d:07:22:94:c9:9a:
62:bd:d4:0b:70:b9:98:7e:0b:b1:2c:2d:eb:26:12:41:6d:83:
b6:bd:7b:1e:76:a9:83:c3:de:52:79:55:1d:97:ba:9d:6f:31:
42:f6:84:ce:16:65:67:ec:e8:6b:5d:9a:5f:ae:c5:f3:30:c1:
ee:f7:f4:5a:e6:82:b0:ce:6a:63:0a:d9:73:63:da:5d:ed:85:
18:2a:a6:6c:2a:f8:dc:cc:71:da:ab:57:43:a2:5c:9b:f9:c9:
74:be:1b:49:ed:90:f9:a6:ab:5d:1d:91:3f:8a:7c:ac:85:b1:
f8:40:d5:53:be:94:34:90:39:14:61:b8:dd:52:15:c9:25:e5:
04:53:06:93:b1:dc:e1:3c:b8:26:e7:1c:57:32:b9:16:a9:bf:
3c:ac:e9:b1:dc:77:b1:8b:fd:38:ac:15:07:52:ce:84:0e:9c:
5c:26:b1:77:53:56:b3:d5:43:41:90:67:0f:5d:74:56:54:62:
db:1b:5c:13:86:f9:eb:35:3c:36:73:0a:a3:5e:7f:e6:2d:be:
f3:eb:5f:be:a2:77:df:33:8b:ba:b7:d5:7c:82:c4:bd:cf:91:
a8:a9:7c:6b:3c:4c:13:d3:03:dd:49:47:af:ee:19:0f:26:29:
71:be:d7:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af71yj3PgDpM0g3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
NjVhNjgyODAtYjdjZS00NWI4LWIzMTUtY2FjODY0ZDQ0NjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWimZNZ9qxxzmnRJYu3jKVxzM04b5ahEn7+y
rvJRqsTb+Xi1XCadux8b/+aIa0U0tDPrPQEb8hDN/3R5cYOuDwFKp/uqUKcuGM3y
TVvDSei3KH8ifJrV6NB+jgsGpcX5xZlSkVIHv44fCmkYbizTdowJhncMfLJqoSHq
CYrCPf2s96Qt3L5w8Vg6DGdl1nCJL5OdlpVqHSO7GjeAvEXltWnfQ3KFijXXI00Q
if38FngBJ0Qp0UAGdlLd6AIJJhC4cMFFpxbRJTZi1aImjNw+2G8AYkNkkw08sq7h
iGk8f3qXcUsk+QHBvu9ctb3gAQbrf/gzWasqxTc6DGD9AcalqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMvDQwxJf5aJc5lAIQTPFuT6Tb7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjBiMTVkMmUtNzA0Yy0z
NTY4LWFiZGItZjYzMGY1MTYzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECBzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFL1BEth0OzSExx1Ji0HIpTJmmK91AtwuZh+C7EsLesmEkFtg7a9ex52
qYPD3lJ5VR2Xup1vMUL2hM4WZWfs6Gtdml+uxfMwwe739FrmgrDOamMK2XNj2l3t
hRgqpmwq+NzMcdqrV0OiXJv5yXS+G0ntkPmmq10dkT+KfKyFsfhA1VO+lDSQORRh
uN1SFckl5QRTBpOx3OE8uCbnHFcyuRapvzys6bHcd7GL/TisFQdSzoQOnFwmsXdT
VrPVQ0GQZw9ddFZUYtsbXBOG+es1PDZzCqNef+YtvvPrX76id98zi7q31XyCxL3P
kaipfGs8TBPTA91JR6/uGQ8mKXG+1+8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:23:08 2026 by rpki-client