
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa
File: 25bc7282-e47d-3707-a8b1-f87149bca794.roa (raw, json)
Hash identifier: /jiJfCrH+0LcZXTX+ikrVbqAjDs2vhADp2MyH07d1C0=
Subject key identifier: FF:A8:3C:FA:FC:B5:3D:C2:E3:68:26:CF:08:B3:28:18:EC:4C:5C:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D95F0132351C76341AF563980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 20940
IP address blocks: 104.97.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:13:23:51:c7:63:41:af:56:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=202a6231-e13e-46bd-8c79-76451cd6767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:d8:4f:d1:96:79:49:c6:af:68:70:c5:f4:
59:73:7d:ab:8f:73:ef:03:85:e8:ab:21:f8:d0:47:
86:4f:73:2c:ae:71:bc:d7:3a:71:c5:2a:ac:92:dc:
fd:98:c8:48:91:e8:5d:30:be:6f:b5:45:0a:79:a4:
27:f9:d8:63:b0:0c:e3:51:67:59:49:03:96:1c:08:
05:ca:28:a7:07:23:b5:57:59:2b:a4:35:59:4c:59:
9b:80:ea:b6:25:d8:ca:ed:27:24:61:ec:cb:b5:97:
bb:3b:76:c4:da:94:cc:df:8e:30:50:5f:73:10:87:
91:48:87:2a:09:39:cd:9a:8a:32:e4:ae:bd:e5:ad:
70:07:87:85:2d:74:95:3f:27:6d:e1:b9:b8:e1:b4:
1a:65:57:33:e5:d5:fd:66:60:35:a8:73:83:4c:13:
07:98:76:f2:ff:dc:fc:32:c2:8f:da:aa:63:e7:5e:
23:12:66:a1:b2:a8:2f:1c:41:17:2f:b4:b6:f2:1d:
64:d5:a9:bb:0c:e4:48:26:b1:e0:75:1c:b7:5d:94:
15:16:8f:41:fe:1b:d9:20:0d:82:d7:70:7f:ab:d3:
09:4a:c4:7b:23:1d:81:55:12:7d:1a:5d:59:a4:c9:
d8:2a:bd:ea:61:29:ab:98:3a:b4:60:de:b6:4c:00:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A8:3C:FA:FC:B5:3D:C2:E3:68:26:CF:08:B3:28:18:EC:4C:5C:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bc7282-e47d-3707-a8b1-f87149bca794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.97.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:20:ef:f3:ca:94:d6:41:de:aa:20:71:20:cd:ae:71:15:19:
72:4a:be:96:37:85:a9:d5:28:be:d0:54:71:00:8c:50:27:c5:
c4:8f:82:49:a3:89:65:a8:1e:63:c6:54:d8:3f:65:7d:27:3e:
9d:54:42:5f:a5:f7:37:1f:86:10:91:46:a8:c5:68:a3:c6:31:
ac:2d:c2:d6:c2:ee:03:19:c0:ab:e3:0c:f3:91:82:58:49:35:
db:97:d9:c8:ab:ce:56:50:77:3a:76:b7:e0:7a:e4:e3:e7:c0:
79:b1:13:94:93:5a:cf:03:c9:48:3d:fd:24:42:04:ae:5f:87:
cf:0c:bb:c9:f8:69:e7:b9:b3:db:a5:3c:c6:07:6d:85:f7:28:
e5:fa:68:bf:00:f4:a9:94:50:e2:fc:1f:a5:43:51:df:c2:0d:
d0:ae:7f:f5:34:9b:c3:c1:bb:0b:12:d0:ee:62:57:15:39:0f:
50:1f:62:0a:23:2b:fe:4f:9e:d7:cb:22:2c:12:f3:50:0a:1b:
f0:aa:0b:c8:7f:12:af:46:88:ea:d2:0e:a6:38:da:02:68:c3:
c8:61:a2:30:05:c4:fb:23:c1:e4:0c:43:3a:6a:03:61:d7:5a:
43:2d:a8:1c:88:1c:93:59:6d:15:ad:6d:a0:ab:13:8d:af:56:
b7:9c:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:48 2026 by rpki-client