
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
File: 7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa (raw, json)
Hash identifier: viiLmojgAT8IPZ4iBmTDv1Ag94mItjBue1rBQ8XtKqU=
Subject key identifier: BB:05:7E:C7:31:B6:D7:5F:7E:7F:9A:83:24:38:04:42:6B:02:4F:A0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DBBA05E41632B3016B13BB6D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 20940
IP address blocks: 23.39.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:5e:41:63:2b:30:16:b1:3b:b6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=3d83b12a-39d5-40d4-bf9b-e43ce6b09493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:b2:1b:84:c3:39:a2:3c:3f:b7:c6:03:1a:
8a:e8:ba:27:26:5e:94:37:b2:2d:34:b0:21:ca:5d:
b7:09:12:15:87:15:5a:ca:64:b6:0e:93:45:8e:7e:
80:c2:11:ae:4c:4f:87:f7:46:0c:6c:65:3f:64:be:
05:02:2f:d3:ee:ed:1e:49:37:28:1c:ec:9a:00:64:
f1:12:4c:00:1a:14:c0:f9:05:01:aa:71:be:09:b9:
00:7e:9f:39:c2:b9:ea:b0:ee:1d:92:98:ca:88:36:
2b:0c:2f:d5:38:a2:bf:f1:09:6c:32:9d:e9:46:9d:
bd:85:fe:f7:df:ff:ec:4b:92:3c:e6:c9:81:db:db:
03:4c:33:ff:ad:88:ee:18:57:3c:78:b3:e0:80:6f:
56:f1:31:37:be:00:c4:23:91:55:a5:12:15:77:7f:
72:5d:95:f1:74:f3:50:86:0c:0a:f2:e4:5e:dc:f0:
ba:69:ea:5c:4e:2f:a9:62:3e:be:6b:86:e3:53:a5:
66:3e:ab:aa:f6:2b:d5:25:43:47:3c:c3:e1:4b:02:
a9:c2:37:e3:d7:e5:7a:16:5c:94:c6:fe:a6:41:d0:
fe:97:b1:93:af:87:f4:ac:18:33:64:00:ce:89:6d:
9c:8a:38:ee:09:27:87:c7:f2:10:08:7d:1f:a7:13:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:05:7E:C7:31:B6:D7:5F:7E:7F:9A:83:24:38:04:42:6B:02:4F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1a:2d:f4:cf:d1:23:e6:f7:03:67:0c:d5:cf:32:49:a9:04:
82:7c:28:4a:27:40:79:de:d7:88:9c:5f:e6:4c:bc:69:09:5b:
6e:5f:21:2c:f2:a9:5b:96:94:3a:20:93:08:20:fb:92:2e:4f:
8c:97:7b:fe:af:3f:c1:e7:66:ad:fa:6e:6b:07:c4:f9:78:ea:
ff:48:b5:a6:b3:8d:0a:56:3d:5a:20:75:bf:4f:8f:e2:f5:58:
99:30:fa:95:3d:2b:de:67:bd:99:48:e0:42:68:b5:18:f8:29:
37:9a:5e:dd:72:f4:e2:c5:3f:45:55:9c:da:3a:80:f0:e1:2c:
d8:b5:d4:c3:15:40:2d:04:55:95:84:5a:a4:ba:7d:6e:c7:df:
13:0d:4e:f6:96:55:72:0e:6e:aa:ec:2d:47:1f:4f:97:f4:7d:
38:30:66:eb:3e:08:8c:d1:91:f3:60:1e:73:e0:12:1e:18:76:
b5:73:ab:64:fc:db:9f:8f:2d:06:d3:66:22:43:82:68:4f:54:
ab:f8:31:61:6c:c0:a3:f4:db:f2:66:87:ec:87:83:c8:2b:d1:
e2:f3:2b:24:c5:de:34:3d:c6:b1:1e:e9:f5:91:a7:60:2b:fa:
39:76:57:8f:e6:e1:98:fb:ba:9c:67:b5:05:42:93:b6:d7:e7:
1c:95:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:20 2026 by rpki-client