
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/575e0120-63d6-3ffe-8fb4-68a33f563c2f.roa
File: 575e0120-63d6-3ffe-8fb4-68a33f563c2f.roa (raw, json)
Hash identifier: 1ikGhhQy4rMDNvwXnA5WStB6RluNeOcbd/oXYcCa2T8=
Subject key identifier: A8:16:9C:F9:2D:5D:2A:80:11:6E:B2:5B:4E:3E:0D:C1:64:39:A0:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DBBA05E35751307563E545B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/575e0120-63d6-3ffe-8fb4-68a33f563c2f.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 20940
IP address blocks: 23.39.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:5e:35:75:13:07:56:3e:54:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=0e870cf8-58cd-40e3-9253-da543c9b0dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:df:f4:b8:ea:7e:1c:de:99:fb:a3:af:2c:
97:6c:7c:a3:f3:89:ce:cb:99:3f:d0:ab:c2:a5:1e:
1a:79:68:21:f3:32:f1:81:ab:fa:de:3a:2a:35:36:
4e:8c:0f:ed:07:1a:c7:03:82:0d:aa:23:bf:1a:0c:
f4:cb:b2:b3:a5:6f:4e:27:af:0b:e5:6b:97:55:ae:
b0:a5:a0:7b:99:62:ee:ee:d6:e1:08:ed:0b:b7:8e:
81:98:4e:4d:bd:40:2f:f2:15:2c:fd:f5:ab:0f:d6:
6f:ea:55:77:f8:88:20:85:cc:96:e4:0d:69:78:03:
ea:9d:9d:fa:e8:22:bb:ce:30:0a:1c:e6:90:65:c2:
19:b5:92:81:e3:81:d9:e9:91:48:c6:ab:cb:75:a2:
99:b1:b6:e5:be:20:9b:4c:f5:15:f0:76:ef:e5:77:
8d:ea:37:7f:55:1e:05:9e:54:fb:d3:e3:57:05:76:
b8:f9:cc:b5:c5:49:9d:25:7e:af:7d:8b:29:08:ec:
e5:02:d8:d5:ee:b5:f4:fd:70:f2:e6:ec:b0:24:c2:
5c:42:cb:18:81:0f:b5:2e:80:a6:24:bb:aa:68:40:
54:de:bd:40:1f:e7:5f:f7:5f:b7:63:98:8d:c5:9b:
d8:f9:9b:2e:0f:5d:af:a3:da:e2:79:04:36:ff:f5:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:9C:F9:2D:5D:2A:80:11:6E:B2:5B:4E:3E:0D:C1:64:39:A0:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/575e0120-63d6-3ffe-8fb4-68a33f563c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1a:30:68:4b:06:0d:53:31:e4:c2:cf:cb:b0:07:60:19:09:
00:ec:30:ea:33:61:11:e6:3b:cc:c9:48:62:73:f8:9e:69:27:
eb:0c:a5:40:51:26:92:f2:e8:38:ad:e7:a3:2e:b2:54:8f:04:
9f:9a:0f:1e:c0:ed:5e:e5:40:8f:70:95:cb:f1:17:5b:81:fe:
6a:2c:52:80:b7:20:ac:eb:7b:b4:80:08:81:83:05:26:50:75:
9b:a5:05:2d:f6:6d:01:d2:b1:9f:4d:ba:1b:06:a9:69:d9:1d:
03:ce:36:9c:fa:d6:51:7d:df:c8:08:48:55:aa:64:c2:02:75:
dc:c5:4d:0a:aa:b8:8e:b3:a0:51:92:2e:95:7c:bb:0b:84:28:
69:cc:51:b5:a3:11:40:79:48:e0:00:37:59:df:49:33:34:a3:
5d:73:c6:bc:08:5b:ec:60:75:e3:cc:47:a1:38:d4:2d:9d:c3:
3e:93:76:03:28:eb:7a:ce:f3:09:58:9d:ca:fb:0a:69:e9:78:
af:74:e3:83:fb:8c:5e:e2:7e:08:dd:9d:78:32:35:43:2a:f6:
8c:2c:33:d8:13:6b:78:a1:af:32:d9:6b:6f:71:87:06:f2:2e:
fa:f7:49:26:c9:1d:8b:d1:e3:58:eb:d3:b2:f8:b3:78:7b:ac:
fb:b3:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:09 2026 by rpki-client