
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa
File: 506492aa-1377-3f6b-8220-7c46f8b12445.roa (raw, json)
Hash identifier: EIvLLrbRhWQHYToFlc3tuvXt+s8Qv3Smy9/KWvAdhFM=
Subject key identifier: 69:B7:0B:08:EC:EC:17:77:F2:A6:52:16:2A:EE:A6:30:8C:6B:03:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D19B4CBC46FC1C5975E54E280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 20940
IP address blocks: 23.205.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:cb:c4:6f:c1:c5:97:5e:54:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=2f5913e6-4ac4-4380-901f-e9c369806ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:3c:31:ff:ab:3d:ca:c8:9f:86:13:09:8e:
92:c6:dd:15:a9:33:a4:2a:36:58:fe:0d:e8:4a:d8:
17:94:a8:0c:54:05:32:c8:a9:a0:8c:1c:e4:da:da:
a2:c4:24:6a:f9:3e:de:99:de:50:76:28:10:ab:a7:
53:bf:26:8e:42:c9:2b:94:08:aa:34:4a:d7:bd:fc:
b6:30:30:0a:1e:87:29:ff:c2:7c:43:6e:57:39:8d:
85:96:c0:09:dc:b7:3c:4e:5d:df:37:a2:43:8b:32:
06:ac:1e:99:9e:8d:d3:f4:12:11:52:15:1c:53:dc:
8f:9f:db:b7:75:4b:d6:e6:11:0a:d0:0d:4f:5f:ad:
c2:bf:04:0f:c7:02:df:79:f4:3b:5e:89:84:5c:14:
86:b1:33:01:0a:25:e0:ed:8f:15:94:81:b4:1c:b0:
e2:37:c7:38:dc:e0:40:2f:8d:53:e8:04:72:44:92:
a9:13:22:6c:8b:08:0c:c8:3c:72:17:24:09:6a:c7:
4e:d2:88:66:c9:a1:82:57:14:a1:fb:ea:d5:fe:31:
d9:ff:4a:da:23:8c:52:e4:fd:63:30:b8:8a:c2:72:
02:f7:f0:97:ad:64:d6:af:ef:4d:54:a8:9d:92:77:
44:36:8e:56:58:c5:bd:28:47:60:8d:f5:2d:fb:2d:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:0B:08:EC:EC:17:77:F2:A6:52:16:2A:EE:A6:30:8C:6B:03:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/506492aa-1377-3f6b-8220-7c46f8b12445.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:38:c8:e6:a3:78:4f:9f:6d:f6:a8:88:90:d2:22:14:27:8e:
3c:d9:14:5d:ea:9f:db:72:82:52:77:66:e1:8c:cf:75:c9:50:
5a:8f:37:dc:33:dc:7b:17:51:b1:61:af:24:85:30:72:b6:ce:
a0:31:84:98:ab:e1:89:a8:f0:6d:05:f1:71:2e:6a:61:16:ba:
44:1f:93:42:2f:df:93:5a:0e:99:a1:01:4c:32:fc:86:30:2c:
af:81:a3:34:cc:da:12:e2:a5:bb:16:e7:6f:3a:8c:6e:66:c9:
20:5b:c5:f3:eb:96:f9:f1:99:11:6d:b1:5d:d3:d5:f7:e6:2c:
1c:0a:96:cf:1d:17:d7:d3:45:ed:d3:83:b4:dc:37:6d:b6:ab:
99:0a:a9:49:9a:85:d2:10:bf:56:ce:e5:a0:bc:99:5a:05:12:
af:b4:cb:ca:d4:35:47:79:cd:c7:df:6e:8f:a3:f0:28:af:02:
3a:f2:d9:b0:c4:6b:7b:b0:ec:c6:59:66:ea:9f:79:de:c3:28:
d9:65:6b:48:1c:e1:13:5c:5f:f5:f8:4b:bb:be:e4:1c:11:92:
cc:94:25:d3:b6:97:e0:7a:f6:81:a6:47:33:ab:da:1f:b8:51:
77:27:b1:ce:8a:d8:06:c6:11:0c:f5:0c:48:f6:ca:1a:74:cd:
75:cd:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:38 2026 by rpki-client