
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e23822-eb06-3e7a-be9c-2188f17c3ef3.roa
File: 18e23822-eb06-3e7a-be9c-2188f17c3ef3.roa (raw, json)
Hash identifier: d/D29Un5qRKYfyT4TXrl7EGev53u3F1pE1D5tM+RFxM=
Subject key identifier: A3:79:D7:DB:73:0F:01:18:68:C0:E0:CA:AE:96:2B:C2:8B:05:90:A9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1F4A2FA4D07C7DDF3B6EC0C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e23822-eb06-3e7a-be9c-2188f17c3ef3.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 16625
IP address blocks: 23.215.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:2f:a4:d0:7c:7d:df:3b:6e:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=4b50efa2-9881-4c06-9c05-a1c71d9f5abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:f2:87:6e:54:0e:2a:c4:61:1b:df:57:72:
91:b7:56:00:4f:ad:28:8d:fd:75:b2:ec:ea:43:f2:
dc:20:50:f4:9f:dc:d9:30:38:26:00:ef:91:93:eb:
fd:a8:8a:19:29:ba:9b:ea:68:6a:d3:ca:eb:5c:42:
3f:0e:a4:0b:41:45:c6:8f:6d:8d:eb:a7:d5:50:a2:
2f:91:a5:a3:dd:d3:10:d4:f5:88:13:36:fb:15:7d:
d5:4e:d3:45:b4:e6:37:9e:ab:0f:37:f8:cb:6c:d1:
c1:c4:a4:54:b9:90:00:e3:b0:3a:4c:c0:86:f0:51:
01:20:f3:4f:56:6f:1f:5f:53:cc:11:e4:f8:26:1e:
61:26:33:c3:c7:9d:7e:4b:a1:ec:73:b9:9e:cf:87:
75:e1:ae:53:80:4c:1d:0d:78:09:60:e8:2c:c8:61:
5d:4c:86:3b:a7:05:70:bb:56:93:fa:f9:d2:57:d6:
b3:33:26:55:ea:e1:84:c3:49:6c:8e:0a:53:f8:35:
93:71:fa:8c:bf:7d:31:1b:53:bd:6c:76:96:c3:5a:
f3:b4:bd:2d:cb:57:e9:be:49:17:cf:e1:4a:cd:7b:
3e:da:34:07:65:97:71:a7:60:d7:0a:64:ef:f1:ff:
75:06:53:f9:9d:7e:48:bf:eb:68:b7:3d:59:e8:ba:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:D7:DB:73:0F:01:18:68:C0:E0:CA:AE:96:2B:C2:8B:05:90:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e23822-eb06-3e7a-be9c-2188f17c3ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:5b:83:5b:85:8f:8d:fd:1a:a5:50:a8:15:c9:77:60:2a:b9:
a8:54:c0:2f:9b:e6:55:8c:fc:8a:fc:2e:9c:82:16:c0:75:29:
a1:2d:c8:d6:97:de:a1:e5:7a:c2:4c:53:52:18:1d:e6:52:cf:
14:44:91:b8:2d:4b:18:a9:fc:05:d0:98:6b:8e:e5:7e:c3:83:
ff:f9:da:49:ec:1a:10:f6:f0:48:f1:71:71:14:29:14:db:4e:
4d:cc:80:6f:3d:6e:cb:b3:ec:71:fc:de:09:a3:4c:c4:b2:4a:
4f:2a:5d:1e:5d:a3:85:f4:f9:e4:f9:04:54:67:89:73:23:83:
3c:32:55:ce:f6:dc:34:6f:fd:cd:bf:9c:6a:3a:70:dd:d1:74:
f6:c1:df:33:45:a1:87:f3:ce:03:fc:83:43:89:40:06:89:e1:
48:ce:f7:58:15:4a:4d:8b:d8:0b:49:98:3d:f2:64:93:cf:db:
c5:94:09:83:9c:44:ab:a6:c7:30:c7:51:cd:9e:4f:bb:c2:5a:
35:d9:fa:6e:95:20:06:d1:b5:b6:a6:73:b8:5f:2a:45:fb:67:
d6:9c:b8:a9:0d:07:80:7a:9d:08:6f:0b:4d:f4:9e:3e:b7:10:
29:d5:07:39:2f:e7:75:9c:05:4a:c7:9a:3c:d8:e8:12:86:39:
20:72:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:01 2026 by rpki-client