
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20e20ba0-f3fe-3250-a058-2d8084ba3fcd.roa
File: 20e20ba0-f3fe-3250-a058-2d8084ba3fcd.roa (raw, json)
Hash identifier: yt6o+ioHWJwqZw0WtzUnW041NxP3we72WsHFDlBG97o=
Subject key identifier: 67:7A:CE:30:F4:E5:25:02:74:EA:A1:B1:DA:50:E2:DB:EA:CD:1C:F4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1F4A27D2532FBE49C2674E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20e20ba0-f3fe-3250-a058-2d8084ba3fcd.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 20940
IP address blocks: 23.215.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:27:d2:53:2f:be:49:c2:67:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=7cde3398-7dc3-41a8-9814-345c0d199daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:8d:a2:75:f4:2d:9a:4b:34:86:3c:f5:14:
8e:ac:4f:dc:1e:94:9e:8f:53:71:41:99:96:c7:40:
fc:07:64:36:65:18:4c:89:d8:a2:04:eb:f2:1c:e6:
39:61:88:12:b9:d5:3f:6e:d1:1a:b6:f8:df:9d:f9:
d3:ae:15:4c:84:d4:bb:c0:7b:d3:5a:b4:10:b6:2c:
10:4c:d0:9b:ca:dc:b9:bb:57:f3:e3:f7:f4:27:90:
43:12:c6:0e:f5:36:b3:0e:fb:1a:14:ea:03:e2:7a:
1a:68:a2:41:c6:51:31:ef:c3:25:e7:21:72:2c:ef:
91:11:b3:cd:12:41:ce:ab:77:2c:45:3f:d4:dc:d4:
ae:35:1d:16:c4:4a:50:7a:09:91:96:3a:96:96:dd:
42:e7:c7:c0:b8:18:a1:48:d1:1c:4c:f0:b2:c2:b0:
cb:97:57:92:70:03:4e:58:37:b6:ae:8b:93:4f:16:
9b:6f:96:9c:e9:d4:48:ea:2e:59:d1:1d:fc:f8:30:
99:ed:a6:94:54:1a:dc:ac:1b:71:4e:e8:de:b3:81:
a5:65:46:35:d6:32:0e:8a:36:11:c8:00:86:ed:a2:
8d:fb:77:ba:97:f9:10:85:a5:61:22:a4:71:59:e7:
3c:cb:d5:99:e2:f3:1a:da:8c:aa:e8:61:f0:56:e6:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:CE:30:F4:E5:25:02:74:EA:A1:B1:DA:50:E2:DB:EA:CD:1C:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20e20ba0-f3fe-3250-a058-2d8084ba3fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:73:13:b6:53:7a:f4:44:48:91:12:4c:5f:aa:8c:fb:64:8f:
a6:a0:c9:56:19:45:0d:95:0e:1f:46:09:56:49:73:e4:b3:21:
fb:e1:6d:1d:3b:19:a4:b9:5a:b9:95:6c:e6:61:a7:54:36:b0:
65:f2:67:cd:93:a2:56:0f:81:9d:bc:4c:be:74:c0:48:70:a6:
bd:61:93:e1:92:f3:0a:8f:ca:e0:8e:42:76:e7:11:ad:28:77:
e9:2d:20:85:ab:f8:30:d6:28:a0:8e:21:23:06:23:ba:19:68:
0b:0c:51:6c:bb:52:81:c1:b7:aa:d6:06:98:61:38:df:65:56:
7a:39:78:c8:42:ba:59:7b:d5:72:35:20:9a:e7:ed:dc:95:49:
76:80:f7:0c:f5:69:d4:87:68:55:4e:5e:3d:e5:20:e1:07:d2:
81:86:1a:55:f8:77:32:96:9d:ec:3e:32:90:7a:ad:c0:18:b0:
54:ba:27:7e:7c:54:b8:a8:86:ae:83:1a:d8:be:f4:93:7b:b5:
c1:28:5f:b5:9c:30:eb:3d:b0:a8:6f:fc:34:ad:1b:09:9c:11:
9f:78:79:1d:19:49:61:c4:94:98:3a:37:17:74:3c:5e:f1:3a:
32:c8:23:ea:94:4b:bd:5e:0a:6f:cc:0e:84:68:c5:1e:5f:b4:
6d:0f:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:17 2026 by rpki-client