
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80474641-f2fe-3e34-b9a0-224b93d46bc9.roa
File: 80474641-f2fe-3e34-b9a0-224b93d46bc9.roa (raw, json)
Hash identifier: pL1oBKzfVfsGTNtIGpLAaiZOQDtmeksuOwVhm9vekTs=
Subject key identifier: 19:53:CE:9A:29:BB:10:2B:13:1E:83:F6:FC:18:C6:58:CB:CA:8D:C1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D9E5024085ED4EC40E0CA9280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80474641-f2fe-3e34-b9a0-224b93d46bc9.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 16625
IP address blocks: 23.36.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:24:08:5e:d4:ec:40:e0:ca:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=e4ff6fb8-39c2-4f13-81c1-8ea4666ab5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:f9:0e:a2:14:1f:a2:b8:c0:9f:85:ec:36:
5a:f7:3a:54:17:3d:e2:64:b1:65:9a:c1:a6:53:e4:
ec:01:3e:0c:89:af:ee:d5:4f:4e:48:44:ab:d8:de:
6e:3d:88:17:1f:1f:20:b0:c8:5c:5c:bc:18:db:be:
f5:09:43:f9:af:3b:db:49:a1:dd:88:4b:c7:89:a4:
87:63:17:35:0b:a4:23:c2:cc:d5:c0:bb:31:ef:3a:
06:41:24:9c:33:80:61:b0:bc:5e:f4:06:c2:8c:da:
75:4e:bf:ab:b4:6e:ad:e9:4f:c5:d8:30:75:fe:1a:
cf:29:ae:73:b0:a1:d7:96:99:70:3c:d0:da:8c:fe:
31:7e:fe:de:ce:67:72:31:68:bd:df:44:3e:34:6f:
b3:0f:65:c6:43:3b:0a:c2:3c:7b:13:37:b4:d4:8e:
0f:3a:43:68:c1:dd:70:b8:4a:4d:16:82:9d:c1:8c:
cf:fa:37:79:a4:e0:b5:9d:74:a6:43:fe:94:80:c5:
a3:fd:42:8b:81:24:b8:00:6c:90:21:5e:5c:86:bb:
cf:75:8c:ca:ba:d6:55:56:b4:8b:72:6b:31:f7:57:
9d:8b:1a:51:1d:3d:b8:69:2d:42:08:a5:4d:39:41:
37:19:d8:7a:b2:a6:b3:fc:a9:20:f7:a8:f5:13:1e:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:CE:9A:29:BB:10:2B:13:1E:83:F6:FC:18:C6:58:CB:CA:8D:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80474641-f2fe-3e34-b9a0-224b93d46bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:15:b4:f6:f7:7e:43:88:c3:04:9d:c8:91:26:96:09:1d:76:
cd:b7:7e:dc:bf:08:32:a5:8f:3d:13:40:35:8b:fd:55:01:0c:
f8:9c:e5:77:e5:c8:d8:5c:39:4c:d8:e7:19:df:8f:e0:f7:6e:
63:45:b9:d6:f4:25:1e:04:9e:7a:81:62:2d:49:65:20:2c:3e:
c1:19:2e:3d:f1:e7:59:3b:10:26:54:8a:c2:8f:6d:2b:03:cf:
bf:2b:a7:aa:84:12:fd:1c:9c:86:63:ba:31:ce:54:41:90:5c:
56:95:47:e8:db:c8:6a:6a:3c:32:77:5b:56:a6:01:b7:1f:ad:
b9:0d:c8:71:88:2f:62:fa:c5:b8:10:9d:bc:5d:af:57:6f:13:
bf:43:73:54:83:b8:d8:3c:42:93:f8:ae:72:6e:4d:f8:98:7f:
68:e3:ab:86:c9:b6:eb:d3:cd:31:d0:14:aa:25:02:c7:09:51:
43:03:ef:54:eb:94:8f:e9:ac:35:8a:d2:1d:10:50:8e:fd:09:
f2:4e:83:55:fa:6b:0c:e8:10:48:e0:b8:5c:e5:c9:e5:7a:1a:
2d:11:36:4a:98:c4:32:19:48:90:40:aa:84:69:3e:e7:af:e3:
fd:d8:55:ca:20:34:e6:91:5d:34:d5:cf:5b:14:b7:21:78:76:
7b:00:4d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:35 2026 by rpki-client