
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db1bf08-d9e1-343f-b0f1-9d16879fdc68.roa
File: 2db1bf08-d9e1-343f-b0f1-9d16879fdc68.roa (raw, json)
Hash identifier: Nhp9BKh1vbahz8p1fzopbUuNZlGAMDay9D5AlQkWKXw=
Subject key identifier: A3:71:84:8A:2E:60:66:34:8D:B6:F3:45:C9:5E:14:F8:97:FB:16:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F497E4E320C92BC1B3D4A5C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db1bf08-d9e1-343f-b0f1-9d16879fdc68.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 23.206.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7e:4e:32:0c:92:bc:1b:3d:4a:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d98fcc3f-b8d3-465a-af1b-d4dfbd595071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:ca:fd:5e:64:41:ce:f9:d6:cd:be:81:0a:
fd:db:fd:ba:90:f3:ba:3f:c1:9a:dc:81:fb:ac:df:
6b:7f:ec:00:bb:af:71:93:af:93:df:34:c1:1d:5c:
38:f1:fd:64:c1:16:97:a6:10:40:a6:b2:d8:72:0a:
f9:d4:f7:5c:b0:e7:20:ae:5a:7d:26:f8:6b:9b:a5:
ba:e0:68:06:84:37:51:98:d3:51:e5:e6:40:b1:b7:
e5:f4:da:8b:0d:9d:86:cc:6c:de:93:9d:a8:29:53:
00:94:0a:4a:fb:c6:62:72:83:43:0d:ca:74:95:84:
30:a7:14:f2:48:b9:98:6d:a4:0e:56:76:2d:4d:3c:
40:9a:d6:ca:62:3a:ee:39:a3:73:48:52:7f:df:f3:
86:92:8c:17:e6:d8:9e:69:83:52:a0:32:3e:42:b0:
2c:0f:d8:ba:b7:dc:6e:33:9b:7a:bd:0b:a0:47:5d:
8e:5c:66:b2:9d:e3:68:5c:e8:a7:ff:60:1b:c1:f2:
a2:6e:a2:b2:13:f8:e2:16:24:93:7c:b5:37:45:a1:
d9:7c:00:4e:5f:47:7a:d2:27:2c:8f:27:a1:90:80:
47:7e:b3:a4:a3:cf:a3:57:03:03:f1:e2:75:a4:1e:
b1:01:b6:31:d6:69:f4:76:c2:9b:b4:f5:b6:fe:c0:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:84:8A:2E:60:66:34:8D:B6:F3:45:C9:5E:14:F8:97:FB:16:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db1bf08-d9e1-343f-b0f1-9d16879fdc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:85:00:4e:f9:30:ff:b4:fe:b5:3e:96:29:d7:b6:72:ba:f3:
dd:08:d6:14:96:87:a0:e9:49:21:78:eb:a8:a5:f8:09:dc:9f:
16:4e:f7:87:52:54:67:b6:43:cb:0f:34:e7:5a:b2:28:af:5e:
10:84:07:0d:52:c9:58:95:ba:2d:1d:d0:e5:55:4a:35:e4:23:
69:0e:0b:41:f9:9d:75:19:6d:a5:0b:c6:b7:9c:2f:38:a0:a0:
eb:6a:af:41:78:f2:27:d0:9b:e7:e8:e6:6e:71:3f:47:22:11:
a7:40:ec:64:95:46:14:61:24:a9:49:06:d6:94:77:9d:5b:99:
65:0c:b0:cf:98:ec:ea:01:f0:d2:12:4d:93:a7:4c:cd:be:59:
23:8e:fa:92:4f:a8:56:15:71:26:1c:f5:b0:8e:55:59:ec:42:
52:9d:3e:63:6c:4c:76:e2:a5:dc:5f:e5:43:51:8e:4c:f3:a7:
87:78:05:07:b2:32:7a:44:06:ff:f8:f7:95:b1:2b:ba:e0:a5:
b5:0e:60:91:f8:d4:7c:31:2a:6f:9b:01:cf:f6:4a:a4:b7:4e:
fb:53:47:3b:52:76:57:a1:6c:36:55:ff:03:16:df:38:62:e1:
1d:5f:8f:aa:2c:55:08:8c:be:f0:cd:ed:31:93:65:4d:c7:03:
4b:ab:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:50:53 2026 by rpki-client