
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa
File: 16c8444e-4854-3233-954b-4c3c2fe15afc.roa (raw, json)
Hash identifier: 8yEOO6YDBXf4NzhKsVUN3J7wX3YfI9Et7Xj+C8OVg3s=
Subject key identifier: 7B:9D:2B:60:6A:7B:16:C4:45:FB:55:41:14:50:D8:29:47:7E:FA:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D2A74CF019359F7016E95C1A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 20940
IP address blocks: 23.218.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:cf:01:93:59:f7:01:6e:95:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=3d090b52-14fd-4f81-8842-883b73c0d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:83:5b:36:bc:9f:52:39:49:80:aa:c9:1c:
d7:80:f0:c6:45:1e:d3:e3:ec:18:f0:11:65:c0:72:
09:a2:47:21:e7:42:39:38:fc:3e:b4:40:2f:e6:52:
ce:35:16:ae:03:a0:be:d0:82:13:bf:c3:15:81:10:
92:d6:96:3f:f2:bd:21:83:0b:bf:7a:de:e6:e4:fd:
40:f1:b9:43:3e:6f:17:ea:f2:5a:00:22:64:dd:95:
54:28:15:5b:e9:62:7c:90:6d:52:d1:14:f5:a4:1c:
b4:7a:a7:07:98:4c:74:16:57:0f:b5:34:f1:c9:00:
17:7d:e5:61:02:eb:9e:cb:db:8f:71:e9:96:b7:69:
6e:64:85:ed:10:83:2b:cc:f7:d0:a4:ad:67:e0:9b:
02:a9:7d:d9:2f:24:20:be:89:4f:1c:22:6a:de:42:
86:60:de:16:c2:5f:dd:83:f6:a7:a0:ba:82:89:e1:
83:c5:55:05:35:69:8a:7f:29:8a:77:2e:ee:6a:ec:
b6:63:23:b8:48:f8:2b:6c:18:a7:b3:01:05:54:53:
73:8d:4f:11:d2:0d:0d:4a:94:ab:40:13:81:69:0d:
5c:9a:d0:f7:38:c6:66:9a:9a:05:dd:08:6f:46:db:
d9:c0:c4:46:75:0f:90:4b:2d:8b:d7:9f:88:da:f7:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:2B:60:6A:7B:16:C4:45:FB:55:41:14:50:D8:29:47:7E:FA:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:0f:60:40:be:c4:fa:91:7c:b3:fb:38:08:fd:92:51:36:35:
45:92:83:97:61:9b:c4:81:51:2d:f0:66:27:76:c8:74:34:68:
cc:a8:c5:8a:12:e6:a0:52:c8:14:4b:c6:ec:b2:2a:d4:00:e6:
e3:c6:73:a8:3c:ed:10:f0:cb:08:18:27:76:d2:66:b4:79:7d:
69:75:4a:5d:6c:af:a1:7a:cc:b7:d9:b1:eb:52:1f:b3:1a:c8:
33:de:da:0c:9b:3d:88:54:d7:74:67:b4:8b:67:6b:8d:88:cc:
fa:cf:2d:a5:cf:72:d6:9c:9d:aa:aa:6b:7e:67:d4:d5:cf:0a:
92:3e:7d:03:25:8f:81:91:72:c4:59:56:b4:d0:de:d8:b2:4b:
b2:02:80:ed:10:71:ed:81:d7:e2:04:51:b7:78:65:f1:a1:ed:
03:65:dd:f5:ff:2c:a8:43:ef:22:74:cc:e2:81:6b:bd:78:c2:
89:8e:8d:4a:7b:eb:a5:c2:67:a8:40:28:f5:ae:61:76:ef:bc:
2b:d3:65:f1:c2:27:62:cc:92:81:0d:7e:85:14:92:9f:b6:b1:
a2:e6:e6:44:2f:66:57:3f:3f:d2:2b:b1:43:ab:81:55:28:26:
fd:1c:18:b4:59:87:f6:6f:7c:4a:b9:87:66:f1:a3:02:cd:02:
a1:bf:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:09 2026 by rpki-client