
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b573151-903c-375c-89c0-88b565837785.roa
File: 5b573151-903c-375c-89c0-88b565837785.roa (raw, json)
Hash identifier: 8GC4PE9B8sO9gkaEKeLXvqUU/5/oygKVwYw7aPLfby4=
Subject key identifier: 41:95:3F:4E:7A:A1:AE:C5:AE:44:B6:A0:10:E6:0A:7A:A1:89:E9:AA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1B1A5A2CDB90F889AAB81280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b573151-903c-375c-89c0-88b565837785.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 20940
IP address blocks: 23.211.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:5a:2c:db:90:f8:89:aa:b8:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=c3dcd261-9a1f-4274-90d6-8b9eae20107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:c8:d5:27:9c:99:a8:52:ef:89:f9:85:17:
9d:b1:64:5f:b9:9b:76:b3:68:e9:32:ce:e3:13:d3:
85:73:61:ea:14:65:e3:00:96:2d:54:1e:93:fd:52:
2c:78:9c:51:47:38:d8:d5:11:b3:4e:4c:27:2b:e8:
e8:c7:cc:df:17:f5:74:c5:a9:67:a7:d6:1d:c8:73:
1b:9f:b6:d3:ca:b3:86:96:7d:7b:9a:b5:14:5c:ce:
9e:f4:72:38:7d:5c:7e:64:85:77:8c:ca:d9:9e:88:
d9:f6:7f:f3:9c:a0:e5:51:d5:37:06:bf:54:87:04:
fd:3d:91:63:9c:e7:21:69:9a:e3:a0:8d:7e:f8:87:
fb:13:89:7e:47:62:0a:43:46:5c:c4:ef:66:c5:a5:
54:68:d9:bf:d0:8e:33:38:5a:66:65:d6:1e:a2:3a:
8e:03:03:2d:4a:de:24:9f:16:97:86:b1:94:ed:c9:
0c:11:d0:1c:16:cf:c3:2a:ea:79:60:dd:8b:21:98:
86:06:17:f1:11:da:da:63:a4:37:5e:35:6b:af:a0:
5b:33:d5:42:a0:2f:6d:f7:73:ea:0f:4c:82:0f:b2:
53:a1:fb:d3:58:96:e8:bd:af:93:ef:3e:10:9a:cc:
75:98:50:9d:82:37:90:66:27:1b:40:43:33:94:d7:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:3F:4E:7A:A1:AE:C5:AE:44:B6:A0:10:E6:0A:7A:A1:89:E9:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b573151-903c-375c-89c0-88b565837785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:24:6d:58:51:7c:d4:7b:cc:f2:e4:4e:fa:bc:5f:8e:6c:ee:
f0:55:19:16:3b:7b:79:91:fa:35:97:3d:70:d5:1f:79:67:38:
a5:f7:10:3c:35:49:0c:b0:24:1c:64:a3:bb:23:9f:a8:74:97:
97:95:f4:f7:fd:16:6a:71:dd:53:75:6c:e3:db:f7:de:47:29:
5b:1c:84:8b:f3:de:fd:78:aa:23:24:13:d5:62:05:b4:33:e1:
34:22:dd:40:1c:3b:f9:8e:9c:15:6f:b7:1b:92:ab:2a:e7:d6:
a1:99:fc:ed:bd:f8:d9:cf:6a:d9:5a:5f:07:5b:eb:51:5b:73:
9c:5f:13:a9:a3:4f:bd:b7:57:13:c2:01:4b:3b:d3:2c:bf:49:
d5:79:df:ff:4f:0e:5e:73:20:51:61:5e:f1:f2:65:64:3b:ff:
d9:6f:be:b9:da:07:d3:54:37:28:a9:54:0d:72:31:90:a7:e1:
d2:9d:1c:d5:27:aa:06:50:11:dd:e1:86:ea:ea:a2:82:60:f7:
c8:b7:a0:94:37:a0:19:01:b3:fb:72:a5:b8:ce:31:7e:3e:81:
b9:f1:22:07:b3:7a:bc:01:2c:ec:63:8b:38:d4:7c:5e:47:42:
72:7f:52:52:32:9b:51:a1:9d:1e:6b:8d:06:44:ba:7e:69:76:
c4:02:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:49 2026 by rpki-client