
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa
File: 22cb9fda-457b-32d8-8a1b-9aff5a140100.roa (raw, json)
Hash identifier: Xo/LhLJoh0FzkPTLwhbrjbySKjOOEFYM2ofg8T+XS/o=
Subject key identifier: 58:6E:6D:57:A4:72:E6:FB:8E:1B:44:66:D9:B4:2A:D2:DC:EC:F7:4F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D8AC54D2DB0F76928C8448480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 16625
IP address blocks: 104.86.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:4d:2d:b0:f7:69:28:c8:44:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=20cd8c4d-b134-4847-a745-ec3c72930c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:d8:3e:35:26:e2:53:51:ba:ec:8d:3f:31:
99:de:4b:d4:87:69:ec:0e:bd:7c:35:7a:bc:73:04:
f4:4e:17:14:43:c9:d4:78:87:b3:02:59:6e:8b:11:
36:c3:5b:b1:e9:7f:6d:17:7b:ef:f0:c7:3a:3e:78:
5d:34:af:42:6f:71:f6:c0:07:0d:83:1e:79:39:b0:
99:01:55:6d:91:6b:e5:1e:86:c5:6a:01:ac:95:51:
01:ba:ff:47:20:a3:f5:15:20:97:d4:97:b6:7c:91:
90:f1:4b:00:e8:c9:10:1e:f1:a7:a0:e4:f1:62:53:
35:c6:8e:81:b2:e1:08:48:87:d1:84:f1:e0:14:85:
32:ce:2d:de:e5:6f:a0:18:9c:2a:9f:ac:ba:31:44:
11:47:34:d7:5f:94:ab:de:0a:6c:e4:dd:44:9b:35:
98:11:1d:09:82:c9:7a:6b:cf:98:76:14:28:c2:45:
af:d2:fb:ff:bf:75:29:23:b6:15:c1:f2:55:fd:c3:
5d:e8:1b:45:dd:df:f8:b5:6d:88:19:fe:46:d9:00:
40:2c:b9:21:21:bf:9a:8b:32:54:90:1d:76:9a:f6:
c3:11:51:5e:2c:bf:c8:3c:1e:34:2e:4f:29:37:b7:
d2:a0:aa:7c:e7:2b:bb:d3:85:32:3d:4a:59:19:f7:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:6D:57:A4:72:E6:FB:8E:1B:44:66:D9:B4:2A:D2:DC:EC:F7:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.86.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:5c:7d:6c:90:cf:92:59:a1:8a:38:35:6c:56:36:62:b9:93:
52:9b:51:4b:f9:08:41:6b:d3:e1:9b:4c:34:59:f0:65:c4:0f:
ec:73:60:69:b1:59:70:45:ac:5e:ca:98:06:8f:27:97:fa:c5:
7b:f6:59:c4:91:cc:8d:a0:8e:ba:6f:5b:5a:24:a3:8d:9d:d5:
6e:e3:bb:77:a5:5f:30:19:54:c6:b0:db:6f:a5:39:5f:13:ca:
46:6b:54:33:40:57:ba:3a:5d:52:09:75:81:33:ed:fc:31:ee:
8a:ea:72:1d:3d:a0:86:22:50:53:30:8a:35:04:ed:d4:70:66:
5f:3d:fc:b5:09:0a:38:b6:12:1a:4d:c7:b1:06:51:43:d0:49:
f9:6a:e8:0a:df:1a:cf:cd:71:b3:ae:a7:9a:1a:04:c8:ad:0e:
6e:b2:21:b7:e4:bc:d7:5e:b8:9b:6c:32:80:23:de:c2:0d:6a:
63:c0:97:6e:3d:5e:d8:42:9a:1a:80:be:9a:a2:43:ca:16:63:
a1:f7:a9:18:b5:59:0e:92:3f:95:d4:ac:63:45:5f:ba:6a:08:
44:a3:c5:f2:01:59:1a:38:80:9f:1c:c8:99:10:35:ad:2a:c7:
f8:65:8e:46:81:8c:81:62:33:14:3e:24:ef:65:c2:a0:f2:8c:
82:33:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:24 2026 by rpki-client