
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa
File: 69c6bc80-2881-334b-8bec-b03e32f32ffb.roa (raw, json)
Hash identifier: GRtDciICY/Ip+qfziWwuK8diZRoz+cdaLec5MgAgu8w=
Subject key identifier: 48:27:D2:5E:42:56:D9:A2:E2:35:A0:7B:68:8B:54:41:D7:63:D7:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D24E131B23E4DADCC44102880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 16625
IP address blocks: 23.220.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:31:b2:3e:4d:ad:cc:44:10:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e0747ff2-cb78-439a-96ae-9848f893d782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:8a:33:fe:88:3f:a9:ba:5d:27:a1:05:fe:
d5:59:47:20:8b:b8:f2:86:5a:3e:b1:24:93:02:ac:
a0:e1:83:c9:41:00:10:19:ca:55:11:cb:ac:00:d1:
db:86:04:a3:58:44:a2:61:39:23:ff:c2:25:da:bd:
58:96:46:e3:43:ed:33:99:c7:09:d1:6a:7c:ac:ef:
68:fb:50:21:87:8a:df:72:e7:2c:ab:5e:65:28:8d:
f8:9f:fb:78:fe:a7:7f:89:48:d8:7a:08:eb:86:71:
16:54:27:62:22:ce:6c:bd:a8:f9:48:9e:ba:52:57:
08:95:13:f8:b0:e7:af:6b:0c:a0:cc:20:95:8b:95:
f5:42:fa:be:c3:61:12:2e:9d:c8:e5:17:ab:88:47:
15:19:26:ed:3d:b5:9d:01:31:e4:ce:c0:26:37:52:
94:06:da:e4:b4:9e:c6:26:da:ed:f5:13:27:5c:52:
84:ed:39:ae:85:af:96:74:72:94:eb:a6:9c:a6:8f:
9f:6a:d0:ca:d4:9e:c5:bc:5c:2f:ed:65:4a:41:0f:
67:4f:51:94:fa:8f:e1:c2:00:52:fc:44:49:fd:77:
aa:e6:10:6e:e1:d1:52:83:33:07:5f:62:79:f9:4b:
ee:5e:fe:05:e5:d2:a8:15:07:e2:4f:ed:ea:0f:d4:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:D2:5E:42:56:D9:A2:E2:35:A0:7B:68:8B:54:41:D7:63:D7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69c6bc80-2881-334b-8bec-b03e32f32ffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:7b:9c:f7:69:a6:38:88:dd:96:ba:13:af:5f:c4:4d:32:58:
b7:b5:16:99:14:d0:b4:09:99:1b:6c:fc:e8:7d:47:ac:b0:b3:
96:93:3a:6b:91:dd:19:ca:4f:2a:f4:a9:99:20:ca:c2:93:40:
bf:10:66:1a:a4:02:e0:f3:30:cf:02:38:b5:1e:ad:21:5c:b8:
83:f1:f8:fd:6f:44:dc:67:cd:f6:4b:9d:1f:60:a9:00:ab:5c:
6f:0a:7a:ea:a5:7c:03:25:c0:ee:b0:c2:d9:78:b0:30:cb:15:
c9:75:0b:9b:60:fe:3f:76:10:85:c5:77:58:96:5a:19:3d:cc:
70:f3:fd:05:d2:02:f3:9a:35:de:e9:71:3f:ed:10:49:7c:9f:
ba:d4:b9:5b:23:5d:2c:f4:16:4f:f1:67:aa:5b:92:6d:34:13:
73:a2:bb:a6:8c:a2:e3:3c:d7:42:f0:2a:55:78:74:00:4e:95:
6f:93:9b:71:75:40:e4:74:bf:09:e6:92:45:ab:01:00:13:99:
a7:89:73:f0:56:2f:8e:68:11:78:4e:62:7c:b9:90:28:2b:f5:
31:68:25:00:1e:39:2c:a2:dc:ff:49:0a:09:e2:76:5d:08:c2:
3e:54:c6:34:f2:a0:1b:8e:a0:42:71:19:dd:12:82:cc:43:e9:
7a:71:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:48 2026 by rpki-client