
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa
File: 3659b5e7-04b1-36bb-a14c-8f71b879a094.roa (raw, json)
Hash identifier: V+niVbPI3qRgxYpM+q+VMA1FJfnSkFjkfg6wqw2qy4c=
Subject key identifier: 9D:3A:A3:30:83:95:4F:16:13:91:FA:51:CE:91:74:C8:1E:9F:54:3B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DADAAE9711EC65F9BFEF2A180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 16625
IP address blocks: 23.32.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:e9:71:1e:c6:5f:9b:fe:f2:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=735d78b5-9f52-4278-a0ef-ed1ce0e736f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:ec:09:36:6f:8b:6b:5e:78:43:38:13:3b:
ea:17:3b:2a:c1:3f:22:10:5e:6b:b4:5e:cb:3f:93:
de:79:10:55:a0:2e:95:58:7a:6d:44:50:bb:7f:24:
76:a6:fa:16:33:d9:d5:e2:65:33:e0:3f:31:b0:2b:
e6:02:16:28:d9:6c:5c:93:bd:4f:7e:4b:90:4f:bb:
ed:3f:a0:aa:04:a6:dc:56:11:48:2d:31:f0:cf:c3:
b7:38:c1:ef:ab:27:fc:96:b0:d0:70:a3:b5:da:64:
1d:4c:c6:c6:06:56:1f:20:92:54:a2:7d:62:23:04:
0e:62:c6:ba:cc:30:42:f8:79:13:ab:7f:ba:13:40:
5b:c1:9c:cb:af:b9:fc:44:3f:43:9d:a6:d7:69:40:
0c:54:1a:ef:1b:a2:4b:d8:67:8e:de:f2:ed:af:a5:
b0:9c:c5:1a:81:20:ee:39:25:73:3a:97:67:00:ac:
12:d1:41:00:e6:6e:7c:88:11:e3:1b:41:5e:4e:fd:
2e:1b:08:9a:65:2b:0c:05:9d:40:3a:b1:dd:55:90:
5a:b6:14:55:d3:90:b1:eb:30:49:d7:24:be:46:6b:
67:6d:a0:87:4a:e3:ed:cf:77:e8:7f:ac:9f:79:03:
ec:c0:2d:8c:f7:0b:d3:a7:54:b1:84:ec:70:b9:14:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:A3:30:83:95:4F:16:13:91:FA:51:CE:91:74:C8:1E:9F:54:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cd:d0:68:e5:70:cf:13:8c:63:82:cb:6a:93:80:1c:96:a7:
ee:c5:65:3a:59:1f:1b:4c:fe:2c:2a:7d:af:e1:29:7d:cd:05:
c9:49:1a:9f:5c:06:69:19:18:68:44:a0:8d:3c:5b:89:d9:fc:
e1:7f:5f:81:82:9a:a8:44:9f:99:81:f2:b8:1e:c2:b4:3a:ba:
91:08:3e:8a:78:1d:19:4b:fb:f0:84:2d:b2:d5:f1:51:60:b6:
71:1e:d7:b9:29:01:0e:11:21:a8:9c:5c:a0:f5:03:2d:83:82:
15:67:11:68:35:72:1e:d6:b6:a0:59:8c:6b:67:3c:1d:33:4c:
66:c8:4d:d9:c6:59:48:6a:6a:55:4e:12:81:b4:2d:da:97:dc:
c0:91:c0:4d:2a:95:93:3d:43:b6:63:d0:1b:24:23:fb:59:98:
49:a3:e9:97:77:a3:40:68:49:e0:20:2b:f1:91:3e:29:ca:3b:
f3:cb:98:af:36:7f:f8:4d:c3:0b:d3:cf:fa:ae:5b:85:d2:5f:
41:86:c4:0f:b4:96:b7:20:bd:79:e7:49:e8:30:88:b3:ec:d5:
4d:e3:c7:42:12:fa:9b:ca:96:08:4e:b8:71:e3:3e:05:9a:0e:
32:55:4a:08:05:be:6b:d1:26:a8:f9:c2:6d:81:1b:b9:bb:30:
dd:e1:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:07 2026 by rpki-client