
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
File: c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa (raw, json)
Hash identifier: 5zD3yA2uHxfV+DlkuxLp30LCHU5tASUoXpfiU/w+iG4=
Subject key identifier: 4A:9F:A4:8C:16:FB:8E:98:6C:1B:A6:62:DE:F6:3E:71:B3:4F:82:2D
Certificate issuer: /CN=22030947-2334-4dfa-a1e3-0e4e83260593
Certificate serial: 010D0C9F4328584D47C4DBD3FA5A4BBF8FD2BFC0
Authority key identifier: 90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
Signing time: Wed 25 Mar 2026 01:00:32 +0000
ROA not before: Wed 25 Mar 2026 01:00:32 +0000
ROA not after: Tue 23 Jun 2026 01:00:32 +0000
asID: 19285
IP address blocks: 23.153.92.0/24 maxlen: 24
2602:f6b2:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:47:c4:db:d3:fa:5a:4b:bf:8f:d2:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22030947-2334-4dfa-a1e3-0e4e83260593
Validity
Not Before: Mar 25 01:00:32 2026 GMT
Not After : Jun 23 01:00:32 2026 GMT
Subject: CN=5b89db8a-469b-4c1f-8fd1-d1bdb04384c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:f4:ab:57:2f:69:38:81:c6:e2:ee:92:d1:
01:36:31:57:c5:8f:b4:cb:a8:cd:c2:35:7d:0f:2b:
7f:ab:0a:4e:7c:b9:7f:16:f8:34:6c:26:53:3c:7d:
f8:57:71:0f:d3:2d:4f:f1:ec:cd:df:41:9f:24:00:
fe:e5:13:f1:27:47:63:70:bd:33:c8:9b:92:cc:32:
5f:8c:7f:df:43:e2:c4:37:ae:0b:d2:29:33:9f:8f:
0c:6c:c2:a2:a0:06:0f:b9:fc:da:00:d0:9d:7c:95:
a4:ec:20:0c:0a:5e:dd:56:fa:e9:b8:06:fe:62:6f:
0f:83:95:22:d0:72:cc:b2:23:dc:e1:b3:17:81:5b:
b0:67:83:18:cd:63:f3:cd:a5:fd:5c:3e:40:c0:15:
d7:50:96:af:33:e3:d3:44:3d:60:22:5d:33:94:67:
13:f0:6f:90:ee:52:fc:f1:af:f7:8c:13:2b:25:3b:
f0:29:be:00:a9:1a:57:f9:0c:aa:e9:41:76:41:a6:
16:12:df:8e:82:dd:3d:1c:c0:50:04:93:3c:36:01:
29:f7:20:dd:9c:ad:4d:26:2a:18:91:3f:77:ed:4a:
3d:c7:03:fa:4c:f4:4e:cc:6b:f3:70:13:12:1b:93:
34:37:18:d4:fc:c6:58:c7:9d:f4:e4:a9:69:a0:b9:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:A4:8C:16:FB:8E:98:6C:1B:A6:62:DE:F6:3E:71:B3:4F:82:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
X509v3 Authority Key Identifier:
keyid:90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.92.0/24
IPv6:
2602:f6b2:ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f9:3b:05:f4:6c:93:a5:b6:73:bf:f2:4b:e5:72:0b:e2:cb:
1e:a0:fe:ef:98:1c:56:6f:2c:53:1b:3e:80:41:54:28:58:73:
98:18:00:35:de:55:fd:0e:a5:ad:ba:2a:e6:25:f8:78:21:38:
c6:0b:f3:e9:14:3a:83:2c:f2:cb:b5:3b:38:8d:bb:3c:f2:46:
50:2c:db:37:64:dd:58:20:ee:33:62:18:51:e1:b4:28:0f:ca:
7b:2f:03:10:f1:c3:21:bf:36:1e:2d:f3:d1:ad:46:b3:9e:a6:
62:1c:46:fc:24:44:dc:f9:07:08:da:28:bb:00:68:f0:82:06:
d8:a8:e1:60:d4:ba:42:4f:0f:f2:c7:9b:d3:3a:b3:2c:70:b5:
7a:8b:84:7d:89:c4:5f:96:eb:32:ed:eb:e4:ab:9c:bb:fc:65:
8d:c5:56:c5:d4:e4:d8:0a:02:74:e9:67:65:35:5a:bf:75:a3:
fb:9b:ea:fb:e8:e3:73:32:a9:59:25:93:74:4c:95:f0:a7:09:
da:30:30:5f:a6:7f:21:e3:69:84:65:e2:40:7f:44:1c:22:0e:
5f:43:25:3d:62:4a:85:ec:c6:0b:bd:37:9e:97:78:a7:7c:0a:
db:a0:ed:49:d0:2b:cb:9b:02:b2:6b:52:c6:8d:37:3d:cb:b7:
85:73:05:3f
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1HxNvT+lpLv4/Sv8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIwMzA5NDctMjMzNC00ZGZhLWExZTMtMGU0ZTgzMjYw
NTkzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
NWI4OWRiOGEtNDY5Yi00YzFmLThmZDEtZDFiZGIwNDM4NGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZH0q1cvaTiBxuLuktEBNjFXxY+0y6jNwjV9
Dyt/qwpOfLl/Fvg0bCZTPH34V3EP0y1P8ezN30GfJAD+5RPxJ0djcL0zyJuSzDJf
jH/fQ+LEN64L0ikzn48MbMKioAYPufzaANCdfJWk7CAMCl7dVvrpuAb+Ym8Pg5Ui
0HLMsiPc4bMXgVuwZ4MYzWPzzaX9XD5AwBXXUJavM+PTRD1gIl0zlGcT8G+Q7lL8
8a/3jBMrJTvwKb4AqRpX+Qyq6UF2QaYWEt+Ogt09HMBQBJM8NgEp9yDdnK1NJioY
kT937Uo9xwP6TPROzGvzcBMSG5M0NxjU/MZYx5305KlpoLnbFwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEqfpIwW+46YbBumYt72PnGzT4ItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMjAz
MDk0Ny0yMzM0LTRkZmEtYTFlMy0wZTRlODMyNjA1OTMvYzFkMDBhYjEtNjhjNi0z
MWYyLThkNDYtOGRiNWViYmM5NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjIwMzA5NDctMjMzNC00ZGZhLWEx
ZTMtMGU0ZTgzMjYwNTkzLzIyMDMwOTQ3LTIzMzQtNGRmYS1hMWUzLTBlNGU4MzI2
MDU5My5jcmwwHwYDVR0jBBgwFoAUkCJ1YHtSsmlOaho8nW4Jz1jFm1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMjAzMDk0Ny0yMzM0LTRkZmEtYTFlMy0wZTRl
ODMyNjA1OTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5lcMA8E
AgACMAkDBwAmAvayAP8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAafk7BfRsk6W2c7/yS+VyC+LLHqD+75gc
Vm8sUxs+gEFUKFhzmBgANd5V/Q6lrboq5iX4eCE4xgvz6RQ6gyzyy7U7OI27PPJG
UCzbN2TdWCDuM2IYUeG0KA/Key8DEPHDIb82Hi3z0a1Gs56mYhxG/CRE3PkHCNoo
uwBo8IIG2KjhYNS6Qk8P8seb0zqzLHC1eouEfYnEX5brMu3r5Kucu/xljcVWxdTk
2AoCdOlnZTVav3Wj+5vq++jjczKpWSWTdEyV8KcJ2jAwX6Z/IeNphGXiQH9EHCIO
X0MlPWJKhezGC703npd4p3wK26DtSdAry5sCsmtSxo03Pcu3hXMFPw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:14 2026 by rpki-client