
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fcc01ab-6eaa-3d10-91b2-dc4cf0ee1f79.roa
File: 0fcc01ab-6eaa-3d10-91b2-dc4cf0ee1f79.roa (raw, json)
Hash identifier: ba0x46DdvmWT/J/9Em6hEB2oDL7M3xp8NkPFSGSKN04=
Subject key identifier: 0A:3E:10:C8:7A:C0:7B:19:13:8A:DC:49:BE:3A:E9:F0:B3:51:5A:56
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D2BDA2C35C4C5026382595D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fcc01ab-6eaa-3d10-91b2-dc4cf0ee1f79.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.223.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:2c:35:c4:c5:02:63:82:59:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=e98b4374-97b5-4c85-8e17-24fff67d2921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:ce:4c:87:85:cd:01:0e:97:d2:3d:8e:4e:
d9:ed:76:25:d6:24:4a:25:ac:1e:9e:67:b3:75:d1:
e8:23:8f:73:52:fd:64:f0:b0:6b:2f:dc:77:f3:c0:
82:a0:e8:fe:4b:b4:a4:4c:3a:70:d4:c9:cb:41:07:
79:d2:8d:bf:7a:1e:34:ee:e8:d0:c0:b9:af:7f:11:
71:90:76:ec:70:35:2a:1e:8e:94:93:58:1c:f6:ac:
fc:a4:0b:f7:52:6b:6c:e7:bd:df:28:fc:bf:1f:d7:
23:5e:7e:8f:33:62:d1:68:89:d0:05:ee:e8:cb:ac:
aa:71:59:22:50:33:34:3b:1d:0b:52:db:e7:88:30:
41:d1:3f:30:00:6f:06:d0:0d:56:c7:8e:18:26:cd:
77:ca:0a:ee:85:47:7d:ef:2b:27:f3:42:82:48:32:
ab:ee:6b:d0:8f:8f:ed:1f:22:9f:3c:c8:e0:6d:48:
d7:a3:34:ea:77:9b:98:bb:bb:c4:57:08:a6:2b:57:
1c:9a:4c:55:17:23:cc:3f:37:ec:ac:a2:7b:90:b5:
85:91:db:a6:e6:47:60:12:61:69:79:c8:fb:82:56:
5f:11:fd:a6:ae:df:24:1b:4e:ef:07:1c:ed:12:81:
11:48:bb:02:99:5a:20:e1:87:9e:91:81:ef:4b:aa:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:10:C8:7A:C0:7B:19:13:8A:DC:49:BE:3A:E9:F0:B3:51:5A:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fcc01ab-6eaa-3d10-91b2-dc4cf0ee1f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.223.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a1:99:09:9c:b9:24:00:da:52:24:af:82:85:16:ce:70:b1:
17:57:72:1e:48:02:5c:ba:db:a8:9d:58:f0:07:0d:54:31:6e:
b4:c5:e3:1c:ee:3c:f2:93:a4:88:de:0c:d9:b4:44:5b:fb:1a:
f0:2f:7b:94:6f:d8:ad:5e:7c:f9:1d:ac:c6:b2:ca:35:43:40:
73:ca:40:55:62:70:7f:75:34:c5:c4:19:83:b9:c3:11:37:99:
73:28:1a:35:00:2e:4c:ce:37:f5:a1:03:63:a3:37:dd:84:2c:
b6:ad:26:65:13:32:b7:cb:10:23:97:e6:20:5f:8a:9b:25:42:
c1:6f:bb:88:e0:9d:59:93:b4:af:80:c5:15:64:2e:f7:a8:c2:
8e:51:9e:76:a9:a9:13:bb:e0:ac:39:e0:d1:84:11:1e:b6:10:
14:8e:43:b9:62:13:52:7c:26:22:c6:df:31:34:d0:00:f5:e7:
61:6d:50:01:b6:79:2d:21:2c:e3:77:63:cc:1a:a5:a5:94:7d:
8f:52:9d:f3:09:44:1d:4b:7a:da:dd:48:16:f5:ee:3e:17:51:
83:ea:a5:03:b5:9e:ff:29:ee:d0:0c:fd:e5:c1:b3:4b:2b:6d:
cf:e6:41:cf:82:44:65:4e:b9:07:fc:a6:1a:a3:53:5b:aa:ac:
eb:98:69:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2iw1xMUCY4JZXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
ZTk4YjQzNzQtOTdiNS00Yzg1LThlMTctMjRmZmY2N2QyOTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0zOTIeFzQEOl9I9jk7Z7XYl1iRKJawenmez
ddHoI49zUv1k8LBrL9x388CCoOj+S7SkTDpw1MnLQQd50o2/eh407ujQwLmvfxFx
kHbscDUqHo6Uk1gc9qz8pAv3Umts573fKPy/H9cjXn6PM2LRaInQBe7oy6yqcVki
UDM0Ox0LUtvniDBB0T8wAG8G0A1Wx44YJs13ygruhUd97ysn80KCSDKr7mvQj4/t
HyKfPMjgbUjXozTqd5uYu7vEVwimK1ccmkxVFyPMPzfsrKJ7kLWFkdum5kdgEmFp
ecj7glZfEf2mrt8kG07vBxztEoERSLsCmVog4YeekYHvS6r4fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAo+EMh6wHsZE4rcSb466fCzUVpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZjYzAxYWItNmVhYS0z
ZDEwLTkxYjItZGM0Y2YwZWUxZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFShmQmcuSQA2lIkr4KFFs5wsRdXch5IAly626idWPAHDVQxbrTF4xzu
PPKTpIjeDNm0RFv7GvAve5Rv2K1efPkdrMayyjVDQHPKQFVicH91NMXEGYO5wxE3
mXMoGjUALkzON/WhA2OjN92ELLatJmUTMrfLECOX5iBfipslQsFvu4jgnVmTtK+A
xRVkLveowo5RnnapqRO74Kw54NGEER62EBSOQ7liE1J8JiLG3zE00AD152FtUAG2
eS0hLON3Y8wapaWUfY9SnfMJRB1LetrdSBb17j4XUYPqpQO1nv8p7tAM/eXBs0sr
bc/mQc+CRGVOuQf8phqjU1uqrOuYaYU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:41 2026 by rpki-client