
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/640ac25a-3232-3c8c-90a5-f1297f626020.roa
File: 640ac25a-3232-3c8c-90a5-f1297f626020.roa (raw, json)
Hash identifier: zsVTmr8de11IXqWSL4ebNYF0bbyk5Sq4y8lKbiRXLV0=
Subject key identifier: CF:A2:00:33:E2:0B:8B:15:09:AB:0C:D9:C7:47:D0:33:76:6A:BC:58
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1F4A2D5B5D83AC9A6A06BD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/640ac25a-3232-3c8c-90a5-f1297f626020.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 20940
IP address blocks: 23.214.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:2d:5b:5d:83:ac:9a:6a:06:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=1405c681-f169-4b6e-9221-38b2a4fe5e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:14:8f:1a:ee:5e:b9:89:15:4f:25:d0:37:
a0:32:e6:bc:7f:46:02:f1:e0:57:3f:14:e5:d5:e1:
95:9a:0b:ed:94:46:04:15:97:4a:83:24:b6:d2:33:
a9:cb:2e:27:85:e6:e9:a9:99:21:f0:96:2b:a0:c3:
03:ed:8d:cf:c1:13:f0:c8:f2:6d:be:9a:78:4d:ec:
67:98:b4:3e:34:cd:8e:47:8c:98:34:79:bb:3d:a7:
82:c4:99:4c:7f:2e:8e:8d:5c:6e:71:f2:07:a1:0a:
f3:13:22:3d:df:13:a8:45:05:70:3e:ab:7b:52:9d:
ec:86:fc:f7:cb:ee:54:e2:b4:7e:75:61:21:88:70:
e7:13:46:07:35:62:5c:44:9b:40:5f:09:90:2f:a0:
ca:f1:cf:19:c8:78:b4:32:1a:2f:fd:6e:d1:a4:0e:
23:57:b2:fa:55:06:14:c7:e8:be:da:7e:57:d2:84:
d5:28:e6:ce:e0:ae:67:5f:23:32:b2:22:16:32:30:
9a:6c:b8:37:d6:73:dd:80:fb:38:25:bf:13:a4:e5:
13:9f:9b:37:6a:e9:81:ec:61:38:eb:33:f7:07:90:
47:e2:d8:9c:e7:d2:74:59:75:8b:87:36:d5:f5:14:
c0:76:31:f7:88:5e:e1:63:9d:1a:28:63:47:5d:3a:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:00:33:E2:0B:8B:15:09:AB:0C:D9:C7:47:D0:33:76:6A:BC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/640ac25a-3232-3c8c-90a5-f1297f626020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:0a:5c:fb:03:0a:df:3c:8e:68:10:ce:fc:1f:a9:2d:e5:0a:
2f:2e:2f:3e:96:7c:f8:d3:8b:7e:65:57:1a:8f:e8:2e:a1:86:
aa:81:77:ae:3d:cf:db:23:34:a2:30:6d:82:4e:4e:e8:6c:70:
9f:12:2a:ac:40:3f:e2:a0:cb:dc:73:75:69:77:3b:cc:a0:d4:
9b:73:92:fc:fc:85:5b:af:b0:2f:20:9d:17:75:fb:14:fb:2c:
76:79:af:28:64:64:d9:2c:bc:54:a1:f7:b7:12:19:bc:f7:c3:
89:cf:b8:df:b5:fb:40:ce:f4:0c:e7:ec:5e:ca:85:98:b3:b2:
7e:b0:1b:0f:64:e1:95:0e:da:6a:88:95:30:56:ac:bb:94:eb:
a4:25:ff:77:3d:18:0b:a1:6e:31:77:35:3f:6d:11:9a:9b:8f:
32:cd:f4:6d:49:b4:85:08:fd:dd:1d:56:b7:19:04:66:43:d0:
74:6e:19:fa:c0:39:ce:9c:0e:fb:7d:39:18:be:83:67:a0:a7:
75:72:e2:a3:82:02:27:d0:cc:98:e5:63:68:c4:04:a9:11:ef:
3c:8e:07:da:c2:1e:06:74:12:7b:c2:b8:77:fa:f2:d1:3f:77:
a3:ad:a2:50:29:0c:28:5e:c3:bf:6b:56:a2:e5:8b:fc:37:67:
34:0a:24:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSi1bXYOsmmoGvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
MTQwNWM2ODEtZjE2OS00YjZlLTkyMjEtMzhiMmE0ZmU1ZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnwUjxruXrmJFU8l0DegMua8f0YC8eBXPxTl
1eGVmgvtlEYEFZdKgyS20jOpyy4nhebpqZkh8JYroMMD7Y3PwRPwyPJtvpp4Texn
mLQ+NM2OR4yYNHm7PaeCxJlMfy6OjVxucfIHoQrzEyI93xOoRQVwPqt7Up3shvz3
y+5U4rR+dWEhiHDnE0YHNWJcRJtAXwmQL6DK8c8ZyHi0Mhov/W7RpA4jV7L6VQYU
x+i+2n5X0oTVKObO4K5nXyMysiIWMjCabLg31nPdgPs4Jb8TpOUTn5s3aumB7GE4
6zP3B5BH4tic59J0WXWLhzbV9RTAdjH3iF7hY50aKGNHXTrgUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+iADPiC4sVCasM2cdH0DN2arxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQwYWMyNWEtMzIzMi0z
YzhjLTkwYTUtZjEyOTdmNjI2MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUKXPsDCt88jmgQzvwfqS3lCi8uLz6WfPjTi35lVxqP6C6hhqqBd649
z9sjNKIwbYJOTuhscJ8SKqxAP+Kgy9xzdWl3O8yg1Jtzkvz8hVuvsC8gnRd1+xT7
LHZ5ryhkZNksvFSh97cSGbz3w4nPuN+1+0DO9Azn7F7KhZizsn6wGw9k4ZUO2mqI
lTBWrLuU66Ql/3c9GAuhbjF3NT9tEZqbjzLN9G1JtIUI/d0dVrcZBGZD0HRuGfrA
Oc6cDvt9ORi+g2egp3Vy4qOCAifQzJjlY2jEBKkR7zyOB9rCHgZ0EnvCuHf68tE/
d6OtolApDChew79rVqLli/w3ZzQKJMM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:14:02 2026 by rpki-client