
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa
File: 6578e154-3b9f-300c-8018-c1abf5d3aea7.roa (raw, json)
Hash identifier: t+dSEkkME25Go1qrx+JpXX2iR6uWXAPyTRnh/Enuf4k=
Subject key identifier: 4A:53:5B:5A:48:44:F1:CA:63:92:8D:93:97:17:5E:F6:C1:A5:87:13
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F497E59299A1B155E72CF2EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16625
IP address blocks: 23.210.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7e:59:29:9a:1b:15:5e:72:cf:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bc440bf1-c6fe-413f-90e2-33eb91037f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:87:4c:fe:0a:94:e2:d1:fb:5d:21:b3:a3:
88:6e:0f:0b:88:94:a1:76:a0:14:c8:ad:a6:5b:6b:
d1:b5:df:18:f5:68:96:87:5c:ce:4c:d3:02:30:26:
f9:93:39:26:ed:0e:79:36:3b:7b:18:c7:e1:0e:fb:
77:5f:f8:7b:60:d7:2d:12:d9:ca:f9:18:ed:14:2d:
65:43:2a:13:e5:cb:3d:bc:55:a1:17:03:c6:6c:f8:
fd:ae:1e:14:cf:cb:46:96:c2:d7:90:a5:bc:58:e2:
e7:a6:00:3f:85:cb:3d:b0:2b:6a:e5:a7:ed:e8:12:
2d:19:3c:90:90:ab:3a:5d:43:10:cd:e6:5f:9e:0f:
e8:ce:fc:1f:e0:ad:bd:59:b2:4f:a3:48:66:de:e2:
47:63:b4:f0:d3:bd:81:ca:26:c6:56:c3:16:2c:f3:
5b:9d:8c:94:0d:13:2e:45:e4:1a:1d:8a:7a:02:b0:
d8:58:ae:7e:1f:08:2f:6d:8c:6a:5f:b0:c0:95:90:
93:82:eb:65:de:95:fc:de:02:fe:c3:4b:89:6b:28:
da:35:d2:ac:6f:d8:42:ff:90:ba:6c:6e:19:aa:14:
d5:96:e2:96:80:55:f8:b2:6e:88:a8:96:73:22:27:
df:c5:12:7b:d6:9b:b7:7e:2a:b9:7f:de:58:c7:66:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:5B:5A:48:44:F1:CA:63:92:8D:93:97:17:5E:F6:C1:A5:87:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6578e154-3b9f-300c-8018-c1abf5d3aea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e7:f7:4f:33:56:35:12:51:1b:29:9a:34:cb:ff:8c:4f:e2:
cd:20:94:b1:c0:7f:13:5c:b2:95:63:58:68:54:da:ad:92:06:
53:7c:0d:0a:d2:ed:5a:aa:e1:02:c3:62:18:b7:42:18:18:a0:
63:c5:f0:11:c1:af:17:ef:f1:b0:02:f6:e0:56:b6:8d:d7:19:
67:3d:d5:0a:61:ff:f9:7d:03:3f:12:93:63:58:c6:a0:78:87:
8e:4a:14:dd:e7:69:a1:ac:5f:df:32:f1:09:7c:1c:c5:a7:9d:
8e:1b:07:c7:86:28:cc:2c:20:fd:5e:a9:98:06:10:16:f6:d0:
d1:da:6b:f3:ed:a2:bb:9a:e2:e4:1d:97:9c:e9:0a:a5:c6:a1:
ac:61:37:a1:23:fe:70:58:dc:c2:5e:7c:cb:06:65:c3:e1:e5:
5c:9f:bd:37:90:23:0a:10:31:01:4e:5e:01:65:4e:c6:63:16:
1b:fd:1b:6d:f6:88:80:51:48:37:13:0f:95:4c:2a:9b:7f:8e:
ab:d6:b6:36:dd:71:98:4f:85:11:6c:f8:8c:b1:14:d1:81:15:
8a:62:df:8c:d0:ca:89:60:94:47:c7:94:5d:40:e9:06:3d:0b:
6a:39:6a:45:d0:bf:84:da:5f:39:89:b2:54:9a:41:82:54:a7:
59:65:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:31:53 2026 by rpki-client