
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa
File: 171a17c9-540c-3439-b32a-758a7c56ea1c.roa (raw, json)
Hash identifier: xDSx1Wwu3N9E24stRn2h/nTlTOmOYeP4kYBxKiD8/XU=
Subject key identifier: 7C:76:39:7C:E0:3F:3C:6F:BB:DF:F1:88:6C:CD:2B:73:48:48:A7:EA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DADAAEACAFDE72C0FAEEBD1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 16625
IP address blocks: 23.32.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:ea:ca:fd:e7:2c:0f:ae:eb:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=9f8cfa95-cf99-4d08-9b7e-ed4c3283c0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:92:53:23:0a:d1:61:85:74:2c:ad:2d:ed:
73:60:37:c9:0d:4e:10:f4:be:ab:39:cb:e8:65:6e:
fc:de:e1:72:a6:cb:53:07:b4:3a:fb:d5:ed:51:58:
25:f0:cb:ae:99:77:a3:6e:66:3f:25:8b:5d:c0:3e:
97:e0:f7:9a:cb:f4:1b:e9:2b:ed:4d:04:af:94:89:
b1:a6:c9:da:8c:8b:88:f5:37:e9:fb:e2:1e:2f:3d:
6c:ad:c4:c6:e8:ef:07:d3:42:b3:b1:59:f5:6c:a8:
a8:c7:15:62:73:44:7f:61:40:a8:15:5c:aa:14:40:
1d:b5:a3:ca:c6:dc:3c:cc:da:2d:52:77:7b:6e:00:
e4:3d:55:0a:b4:25:41:a7:df:37:36:5f:9a:33:1e:
68:83:b6:d2:59:64:34:95:5b:3b:1d:16:2e:64:50:
f6:5d:c0:58:e3:48:13:45:9a:dc:e8:a0:6b:b9:d0:
30:71:5e:45:90:50:09:e1:91:6a:70:48:e5:54:98:
ce:6b:b4:a2:fe:4c:2d:ea:93:57:5b:c2:b9:50:d9:
53:71:54:83:04:7b:54:91:c8:0c:63:6f:b1:9b:d2:
a1:9f:45:5b:98:68:27:ef:a8:a1:1f:81:d1:03:98:
20:0d:a8:50:53:c9:6b:fe:40:49:0d:d4:a1:87:06:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:39:7C:E0:3F:3C:6F:BB:DF:F1:88:6C:CD:2B:73:48:48:A7:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/171a17c9-540c-3439-b32a-758a7c56ea1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f5:32:7a:99:05:fd:55:ee:0d:69:bd:5a:0f:08:99:17:2e:
c9:4d:21:19:a7:61:b4:39:dd:15:b4:4a:94:b1:5f:6f:a9:b3:
6e:23:e9:dc:7c:83:61:17:2c:a5:45:93:d8:46:e4:e2:e3:3c:
77:6f:40:3f:44:97:ec:9a:3b:45:f4:40:57:56:85:35:67:fd:
34:54:80:14:d6:13:ae:bc:d6:e7:70:c2:ea:bb:b6:0b:97:e9:
5b:52:cc:d2:c5:99:b8:bd:28:26:1b:1c:21:6a:c6:66:b6:cf:
de:22:78:d5:9a:d6:31:cb:df:9f:e2:f4:c1:24:55:e4:21:2a:
5d:96:f0:ce:e4:ff:8b:4d:7c:a0:55:3c:78:b6:ba:94:cd:79:
c0:a3:84:89:7a:1d:cc:30:fc:cb:50:71:ad:f6:3d:00:5e:fb:
f9:82:fe:f0:69:0a:a7:71:6a:1a:7a:72:01:b5:e8:f3:b7:d6:
b8:58:57:96:d1:d0:44:93:d2:57:9a:b8:92:e8:93:9e:4f:f9:
65:11:36:6d:d1:0f:d9:82:0c:e6:93:93:e1:1e:47:5d:91:9c:
a4:92:d5:cc:57:9d:3d:c0:2c:c2:ea:89:27:b9:94:49:5d:b6:
87:80:bf:15:ff:4f:9f:bf:85:21:e2:68:db:1a:a6:5d:d8:57:
3d:2b:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:00:56 2026 by rpki-client