
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20209434-ff92-3272-8aa9-06fc7272de67.roa
File: 20209434-ff92-3272-8aa9-06fc7272de67.roa (raw, json)
Hash identifier: 71BTqc6kXvuJjezS3jEatc6DuXMj/rpmqi44+yXV9V4=
Subject key identifier: 00:7F:4C:60:FE:2E:EC:CA:03:79:C7:B3:43:03:FD:B3:2B:AE:B1:53
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D19B4CD60F28C8832ACE2B000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20209434-ff92-3272-8aa9-06fc7272de67.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 20940
IP address blocks: 23.206.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:cd:60:f2:8c:88:32:ac:e2:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=af2f233b-9fe0-4861-a769-0ab346219eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:7b:30:b4:81:58:d9:b6:65:45:a5:03:54:
ff:b9:32:0c:0c:72:a3:c5:06:db:a2:49:80:ae:69:
cb:ad:63:c3:ca:65:e2:d9:19:ea:69:70:a5:0a:e1:
d1:cb:8a:db:9e:88:e9:57:13:d1:0f:cd:63:e1:f5:
54:ef:8b:d0:cc:ae:5d:37:5f:01:08:7d:3a:27:93:
03:c0:10:7c:4e:00:02:51:4a:ce:7d:69:8c:7c:61:
25:fa:cf:49:0b:63:c5:74:d5:26:bf:5e:fd:3d:66:
1e:f8:f9:51:05:e7:f9:dc:58:40:c6:f8:d5:52:8f:
b7:cf:90:4f:d7:2e:a4:a7:86:7d:11:0a:22:91:c3:
69:9f:e7:c5:3b:66:41:b7:d8:b3:e5:bb:3d:d0:8e:
06:0a:7a:76:e9:66:23:f3:10:3a:fc:7f:af:c3:36:
9f:35:29:b1:bb:42:75:d1:d0:d9:8f:1e:e4:73:ca:
1f:90:de:fb:b1:c7:42:c5:4e:80:1e:15:29:44:28:
e3:6d:a4:7a:f5:4e:a8:c8:0f:6e:52:d6:b9:cf:8d:
fc:8d:ca:13:09:e9:bf:24:b0:2c:c1:c3:c4:5b:2a:
11:e9:dd:df:34:35:c2:e1:56:13:b9:8e:7f:25:7f:
ce:0c:41:da:3e:4e:3a:73:13:1a:a7:6c:ec:53:e2:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:4C:60:FE:2E:EC:CA:03:79:C7:B3:43:03:FD:B3:2B:AE:B1:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20209434-ff92-3272-8aa9-06fc7272de67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d9:89:ad:5b:d1:56:aa:63:dd:42:8e:74:5b:42:c4:44:7c:
88:5d:21:8b:57:d9:7f:3b:4f:32:59:02:72:ff:df:e5:12:c1:
46:6b:a5:cc:60:3a:f0:37:6d:2b:c2:e6:01:27:2e:fd:4a:c0:
96:6e:be:e2:a9:d7:9d:16:5d:ea:12:95:45:12:de:c4:0b:4e:
96:c6:a8:01:38:bd:bf:3f:eb:a7:61:e7:e5:68:62:1e:bb:11:
cd:60:2c:6f:7e:81:2b:26:71:40:55:50:70:b4:ff:c4:a7:0a:
a6:93:a4:81:47:b3:51:88:53:90:1a:50:15:a8:57:13:b0:d4:
8c:71:41:5f:ca:0d:53:d8:77:11:d0:a5:b5:59:97:a0:3a:28:
63:c3:cd:59:a2:6a:4a:18:fc:ef:1a:2c:4e:70:c1:99:59:6d:
65:7c:95:34:9f:f3:d0:56:1f:49:84:18:fa:15:ea:ee:5a:e3:
0b:47:1a:fa:ed:67:ca:84:55:43:66:15:05:0b:fa:82:08:4c:
80:4e:fb:95:dc:b6:fa:aa:bd:ce:c5:0e:31:29:2f:35:d6:65:
93:03:f3:d7:39:74:fb:70:57:6e:12:06:27:58:33:26:dc:c5:
68:32:08:7d:02:be:61:ac:62:4f:ce:21:a0:24:2d:e9:d1:b4:
d4:3a:d1:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtM1g8oyIMqzisAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
YWYyZjIzM2ItOWZlMC00ODYxLWE3NjktMGFiMzQ2MjE5ZWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXF7MLSBWNm2ZUWlA1T/uTIMDHKjxQbbokmA
rmnLrWPDymXi2RnqaXClCuHRy4rbnojpVxPRD81j4fVU74vQzK5dN18BCH06J5MD
wBB8TgACUUrOfWmMfGEl+s9JC2PFdNUmv179PWYe+PlRBef53FhAxvjVUo+3z5BP
1y6kp4Z9EQoikcNpn+fFO2ZBt9iz5bs90I4GCnp26WYj8xA6/H+vwzafNSmxu0J1
0dDZjx7kc8ofkN77scdCxU6AHhUpRCjjbaR69U6oyA9uUta5z438jcoTCem/JLAs
wcPEWyoR6d3fNDXC4VYTuY5/JX/ODEHaPk46cxMap2zsU+LkyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB/TGD+LuzKA3nHs0MD/bMrrrFTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjAyMDk0MzQtZmY5Mi0z
MjcyLThhYTktMDZmYzcyNzJkZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbZia1b0VaqY91CjnRbQsREfIhdIYtX2X87TzJZAnL/3+USwUZrpcxg
OvA3bSvC5gEnLv1KwJZuvuKp150WXeoSlUUS3sQLTpbGqAE4vb8/66dh5+VoYh67
Ec1gLG9+gSsmcUBVUHC0/8SnCqaTpIFHs1GIU5AaUBWoVxOw1IxxQV/KDVPYdxHQ
pbVZl6A6KGPDzVmiakoY/O8aLE5wwZlZbWV8lTSf89BWH0mEGPoV6u5a4wtHGvrt
Z8qEVUNmFQUL+oIITIBO+5Xctvqqvc7FDjEpLzXWZZMD89c5dPtwV24SBidYMybc
xWgyCH0CvmGsYk/OIaAkLenRtNQ60TI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:09 2026 by rpki-client