
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa
File: 4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa (raw, json)
Hash identifier: QDvtfgWcf9oi+aP3KNIepCEOb59bNUxnMAdHaI6Y1F8=
Subject key identifier: 19:4A:F7:E6:4D:EF:E8:51:A4:19:29:87:D5:FE:AB:2D:46:4E:DC:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F305286BCCC18C3BD44380C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 20940
IP address blocks: 23.32.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:86:bc:cc:18:c3:bd:44:38:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=e1ed82b4-f029-45e5-878b-d6b26e8dc354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:1c:80:1c:9a:f2:ef:28:f6:4e:f2:b0:38:
d6:1f:8b:ff:0f:2e:32:0a:5e:80:bd:ed:ec:cb:91:
9c:d6:a9:be:16:83:e5:40:10:91:5e:26:8b:08:2e:
b2:c9:74:3f:d9:6e:25:7e:23:15:6d:94:a2:55:5a:
84:d0:6c:d6:a2:64:2d:fc:06:c1:6f:39:c3:ca:21:
a3:24:c3:4e:dc:36:57:76:26:77:40:71:93:5e:0c:
44:bc:93:6b:9a:06:f5:ed:96:ad:30:7b:34:1a:d5:
97:8d:1c:61:21:32:3f:41:8f:ba:8e:53:c8:f8:50:
79:2d:fd:db:50:54:ae:4f:1d:61:28:09:3f:e7:b3:
44:d8:92:0b:f0:a2:36:fe:6d:a7:eb:4b:4f:f2:1f:
7d:7a:cd:3e:0f:43:ca:5c:ab:7f:50:5b:0b:2b:8e:
ee:9a:cc:ff:92:bb:b9:f2:2e:1e:29:8d:50:99:5b:
94:dd:86:d7:c9:9f:6c:d7:f7:3e:f9:81:7a:68:5c:
a0:d4:2b:f3:45:cd:a1:21:33:6a:2c:33:83:f0:bc:
d3:8c:2a:3f:bb:1b:11:8a:21:ad:59:05:9c:ce:3e:
a7:a2:21:62:05:92:82:20:1a:02:49:cb:d2:08:11:
60:9d:fd:13:a2:ae:9d:2b:81:d9:9e:3f:a2:ab:19:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:F7:E6:4D:EF:E8:51:A4:19:29:87:D5:FE:AB:2D:46:4E:DC:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a8c35cb-f7c4-3793-9e6c-7a6b8b7c355d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f7:cc:79:de:cd:73:75:e1:a3:89:66:4e:b5:fa:97:d3:26:
df:fd:cb:b9:c7:c4:0e:df:5e:04:12:ba:5a:d6:0c:a1:c0:12:
3b:7c:fa:3a:1f:bf:e7:6a:81:60:b9:b5:34:31:f3:d4:ce:80:
7e:e1:5b:03:3e:b6:5d:74:01:e6:52:ba:bd:fd:33:38:f5:43:
a1:1b:61:53:69:9d:c6:94:da:15:b7:1a:1b:fa:85:ca:77:0a:
8b:07:57:52:05:ec:42:41:b9:ef:6d:d2:44:a0:8b:95:e3:6a:
4e:50:f5:67:d5:9f:5f:7d:ae:0e:75:c6:c7:5f:3f:e2:ff:95:
75:b8:52:19:c5:38:6c:73:a2:d4:d6:1c:fb:73:36:ae:e0:9f:
5b:b6:cb:b8:1b:d6:0a:71:6c:55:c5:f6:57:9d:9f:c3:37:7a:
d1:84:60:fb:ba:53:db:94:94:a9:a5:64:ef:d7:8a:f1:70:f5:
f3:28:9d:a0:fe:18:2d:2e:bd:d6:c1:de:41:26:b1:33:09:17:
a6:21:0f:13:0b:a4:17:c0:46:15:76:66:7a:65:4a:60:50:25:
30:88:f1:0d:f0:34:db:d6:77:09:95:7d:43:a2:ce:e8:d6:d0:
42:fa:ba:74:8d:4d:a3:80:fb:52:0e:7e:0b:5f:ca:b9:cc:22:
03:40:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:23:22 2026 by rpki-client