
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a642b41-eb85-3aa5-a682-b150e52cf93a.roa
File: 4a642b41-eb85-3aa5-a682-b150e52cf93a.roa (raw, json)
Hash identifier: aFiDQhODHf8V7OcoMH6Zc+dJdWe9xnI/H2Kh/OT36HQ=
Subject key identifier: B1:8A:6B:12:D1:43:E2:50:6C:07:1A:2C:F6:AE:44:A6:0D:4F:8F:7F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D0912A758CEC7868288801A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a642b41-eb85-3aa5-a682-b150e52cf93a.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 16625
IP address blocks: 23.203.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:a7:58:ce:c7:86:82:88:80:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=d2616bd5-0893-4230-85fa-83287f240180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:b3:12:2d:c6:cd:d1:de:48:c6:c8:76:24:
28:4a:a2:6c:28:81:21:b2:ed:7f:c5:26:74:c1:c2:
82:40:da:d2:1a:e1:69:6f:af:48:d2:17:46:6b:c9:
d1:ae:07:76:b6:83:0a:78:2c:e0:ae:5f:9a:32:94:
e3:ab:7c:5e:d2:69:56:20:1c:85:cb:1b:a4:69:5b:
ee:ad:2e:3b:12:a5:ba:68:f5:d7:2d:ff:bf:fd:b4:
06:2e:a4:31:04:65:07:07:1f:61:df:49:d0:8c:f5:
93:72:32:97:7a:0b:c3:dd:07:f5:13:8e:7f:ed:11:
23:d6:87:dc:4e:0d:6c:a2:a2:97:35:d2:15:a7:c3:
2c:ee:9b:6d:34:a0:95:36:20:6d:14:b2:a4:51:ec:
d1:05:17:c5:71:42:5c:64:8a:9a:25:c1:bd:c0:bf:
5a:19:79:0c:bb:eb:34:d4:f8:0c:71:c2:a9:29:53:
a3:31:9f:8f:51:ce:de:04:e3:81:45:dc:79:70:b6:
50:05:ae:bc:83:3b:6a:dc:91:17:7d:d4:d9:e3:e5:
f1:37:ce:71:eb:88:33:6e:27:6c:3b:dc:22:d8:59:
62:ed:9c:e2:39:17:0c:61:13:d6:1c:d5:98:d6:4e:
25:b1:c3:cc:e9:5f:d8:e9:59:4d:22:0b:ba:32:c6:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:6B:12:D1:43:E2:50:6C:07:1A:2C:F6:AE:44:A6:0D:4F:8F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a642b41-eb85-3aa5-a682-b150e52cf93a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:3b:f6:80:77:fb:e3:90:b7:71:2a:f7:bd:93:96:0a:53:8d:
bc:7c:b8:d5:c4:9e:da:df:ce:ed:67:45:c2:86:74:18:2a:04:
60:1d:12:92:f8:54:4b:b6:c9:db:c9:a7:24:e0:30:37:0b:1c:
db:7f:33:b5:0f:d9:62:6f:fb:ec:ff:46:27:9a:25:91:a8:f6:
85:82:1c:33:4d:55:ab:a1:06:62:37:83:70:30:41:6b:c5:ea:
9f:6a:c7:aa:61:b8:97:bf:e3:1c:27:ad:29:1b:cc:25:ee:01:
79:d3:e3:a3:ef:75:0d:0b:db:a3:ab:11:db:41:8d:54:c1:7c:
cf:57:2a:22:d3:0f:a5:2e:6e:48:59:f4:31:34:95:b5:35:a6:
ce:e0:7b:2d:c3:fe:bc:e8:5a:f8:75:29:a9:cc:6c:9a:ba:cb:
d3:87:62:21:3c:17:66:af:21:a3:4b:7d:74:c2:d9:ae:78:39:
7d:21:cc:11:b3:a6:08:ce:f8:d5:d7:a4:c2:38:6e:71:d4:d9:
33:b2:e2:04:f1:77:9a:74:78:f1:b6:af:d1:df:66:ef:16:71:
69:b7:31:1d:b3:a3:fe:28:f6:48:10:7e:f6:b6:ee:9c:b1:30:
c3:db:b8:8c:00:84:7f:21:3c:0b:cb:e3:f7:bd:28:7f:26:7f:
b9:49:4d:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEqdYzseGgoiAGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDI2MTZiZDUtMDg5My00MjMwLTg1ZmEtODMyODdmMjQwMTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonezEi3GzdHeSMbIdiQoSqJsKIEhsu1/xSZ0
wcKCQNrSGuFpb69I0hdGa8nRrgd2toMKeCzgrl+aMpTjq3xe0mlWIByFyxukaVvu
rS47EqW6aPXXLf+//bQGLqQxBGUHBx9h30nQjPWTcjKXegvD3Qf1E45/7REj1ofc
Tg1soqKXNdIVp8Ms7pttNKCVNiBtFLKkUezRBRfFcUJcZIqaJcG9wL9aGXkMu+s0
1PgMccKpKVOjMZ+PUc7eBOOBRdx5cLZQBa68gztq3JEXfdTZ4+XxN85x64gzbids
O9wi2Fli7ZziORcMYRPWHNWY1k4lscPM6V/Y6VlNIgu6MsY1UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGKaxLRQ+JQbAcaLPauRKYNT49/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE2NDJiNDEtZWI4NS0z
YWE1LWE2ODItYjE1MGU1MmNmOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8s6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo79oB3++OQt3Eq972TlgpTjbx8uNXEntrfzu1nRcKGdBgqBGAdEpL4
VEu2ydvJpyTgMDcLHNt/M7UP2WJv++z/RieaJZGo9oWCHDNNVauhBmI3g3AwQWvF
6p9qx6phuJe/4xwnrSkbzCXuAXnT46PvdQ0L26OrEdtBjVTBfM9XKiLTD6UubkhZ
9DE0lbU1ps7gey3D/rzoWvh1KanMbJq6y9OHYiE8F2avIaNLfXTC2a54OX0hzBGz
pgjO+NXXpMI4bnHU2TOy4gTxd5p0ePG2r9HfZu8WcWm3MR2zo/4o9kgQfva27pyx
MMPbuIwAhH8hPAvL4/e9KH8mf7lJTeU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:31 2026 by rpki-client