
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/65e8318a-0160-37ea-a72e-349301dfbba6.roa
File: 65e8318a-0160-37ea-a72e-349301dfbba6.roa (raw, json)
Hash identifier: 3E6nhygiXgZ+NXvhgqNQHOS4kees3QgN0ChJnCyAC8c=
Subject key identifier: F5:ED:BD:C0:C4:B7:5A:EE:C4:80:6A:AB:F2:11:A9:29:1E:0E:2C:B7
Certificate issuer: /CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
Certificate serial: 010D0C9F4328584D1B1A02E143B96B69D542D840
Authority key identifier: 17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/65e8318a-0160-37ea-a72e-349301dfbba6.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 398999
IP address blocks: 23.138.20.0/24 maxlen: 24
2604:d60::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:02:e1:43:b9:6b:69:d5:42:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=307de023-2542-4e4c-a4e8-c4be3668d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:89:f4:9e:96:7f:1f:fc:21:e1:72:35:3d:
e0:4f:e7:51:e0:4b:ff:93:38:58:2e:77:af:8c:da:
df:70:60:83:81:7a:de:f0:43:45:70:bd:87:8a:e2:
cd:33:67:32:11:77:a3:1d:09:60:dc:3e:18:63:ee:
9f:6f:9b:12:05:9c:70:d0:c3:7f:76:a6:12:d8:0e:
d4:4b:cf:ed:28:51:0e:89:11:6c:60:11:fd:09:ce:
e5:bc:98:a9:b2:ce:11:a5:6b:13:25:c4:90:f4:bc:
d7:db:3e:d0:f4:26:4e:84:6f:e3:87:55:06:cb:37:
5c:0e:9f:f9:e9:f4:39:67:ce:be:c1:d7:8c:81:74:
5d:c3:94:93:68:a4:ce:37:04:80:6b:50:d5:bf:04:
6c:d9:50:9a:f2:62:c7:a3:34:6f:5b:cf:7d:ee:9e:
22:53:2a:36:20:41:d6:aa:50:5e:c8:32:8a:94:45:
72:29:97:05:71:d4:eb:d3:72:fe:8c:9d:af:0f:60:
0d:dd:38:ae:19:07:81:ac:ec:76:1a:6b:92:9e:84:
22:30:4d:9a:96:6e:7b:3c:f9:d3:cd:33:c6:a3:84:
82:24:74:18:f6:6f:ea:ef:1a:71:ba:d3:c1:fb:d0:
dd:8c:71:a9:eb:b7:bc:4a:a6:7f:21:85:e5:28:b4:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:ED:BD:C0:C4:B7:5A:EE:C4:80:6A:AB:F2:11:A9:29:1E:0E:2C:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/65e8318a-0160-37ea-a72e-349301dfbba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl
X509v3 Authority Key Identifier:
keyid:17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.20.0/24
IPv6:
2604:d60::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:89:18:03:3b:f1:25:ae:61:fb:c4:46:a9:d3:91:40:64:b0:
87:12:93:f2:80:68:a9:11:e9:02:fe:a6:d2:63:16:02:4a:c8:
47:10:0c:fc:d3:dc:db:2a:d1:7b:ac:99:39:c6:17:49:bd:87:
dc:a3:8b:fb:97:3e:0d:e3:6a:9d:a0:9f:0e:8a:67:48:93:49:
d0:2e:c6:3e:0f:e5:59:4c:bd:d5:f4:49:64:e9:df:94:c9:fa:
94:f8:e9:cb:7e:ce:d8:d1:53:9a:c6:cf:33:53:cb:96:87:5c:
52:f4:ef:cc:f8:b4:55:69:3e:6e:e0:f4:0a:a4:d8:72:c5:a3:
89:be:fd:ea:e6:a5:af:a5:59:32:a7:84:66:66:14:1f:e1:fe:
dc:4d:9b:0c:86:9d:1b:2d:bb:80:b1:f2:29:ef:44:68:9f:33:
f2:8e:1e:90:e2:13:c2:e7:8d:00:30:92:08:fe:19:49:82:57:
fd:c4:a9:db:0c:7b:7f:e7:ea:d5:66:d8:9a:b7:fe:dc:50:59:
71:dc:0d:69:f1:21:0f:bb:4e:b3:72:5f:d7:56:f3:68:c5:42:
7d:7b:da:2e:cd:6f:71:a8:94:e7:b0:92:59:60:97:ad:ef:90:
af:49:d9:80:cc:c3:a8:85:fb:be:5b:29:ee:e4:31:8e:dc:db:
36:11:62:66
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0bGgLhQ7lradVC2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3MzczYzItMDQ2Yi00N2E1LThiYjAtYmI0Yzg2NWQ4
MThlMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MzA3ZGUwMjMtMjU0Mi00ZTRjLWE0ZTgtYzRiZTM2NjhkMmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqyJ9J6Wfx/8IeFyNT3gT+dR4Ev/kzhYLnev
jNrfcGCDgXre8ENFcL2HiuLNM2cyEXejHQlg3D4YY+6fb5sSBZxw0MN/dqYS2A7U
S8/tKFEOiRFsYBH9Cc7lvJipss4RpWsTJcSQ9LzX2z7Q9CZOhG/jh1UGyzdcDp/5
6fQ5Z86+wdeMgXRdw5STaKTONwSAa1DVvwRs2VCa8mLHozRvW8997p4iUyo2IEHW
qlBeyDKKlEVyKZcFcdTr03L+jJ2vD2AN3TiuGQeBrOx2GmuSnoQiME2alm57PPnT
zTPGo4SCJHQY9m/q7xpxutPB+9DdjHGp67e8SqZ/IYXlKLTjQQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFPXtvcDEt1ruxIBqq/IRqSkeDiy3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lZTcz
NzNjMi0wNDZiLTQ3YTUtOGJiMC1iYjRjODY1ZDgxOGUvNjVlODMxOGEtMDE2MC0z
N2VhLWE3MmUtMzQ5MzAxZGZiYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWU3MzczYzItMDQ2Yi00N2E1LThi
YjAtYmI0Yzg2NWQ4MThlL2VlNzM3M2MyLTA0NmItNDdhNS04YmIwLWJiNGM4NjVk
ODE4ZS5jcmwwHwYDVR0jBBgwFoAUFxpswUcCkl8eP+XvyBI6QpejfEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lZTczNzNjMi0wNDZiLTQ3YTUtOGJiMC1iYjRj
ODY1ZDgxOGUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4oUMA0E
AgACMAcDBQAmBA1gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHaJGAM78SWuYfvERqnTkUBksIcSk/KAaKkR
6QL+ptJjFgJKyEcQDPzT3Nsq0XusmTnGF0m9h9yji/uXPg3jap2gnw6KZ0iTSdAu
xj4P5VlMvdX0SWTp35TJ+pT46ct+ztjRU5rGzzNTy5aHXFL078z4tFVpPm7g9Aqk
2HLFo4m+/ermpa+lWTKnhGZmFB/h/txNmwyGnRstu4Cx8invRGifM/KOHpDiE8Ln
jQAwkgj+GUmCV/3EqdsMe3/n6tVm2Jq3/txQWXHcDWnxIQ+7TrNyX9dW82jFQn17
2i7Nb3GolOewkllgl63vkK9J2YDMw6iF+75bKe7kMY7c2zYRYmY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:47 2026 by rpki-client