
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85fd3fdb-f93c-37e0-beca-7867fd0bd2d5.roa
File: 85fd3fdb-f93c-37e0-beca-7867fd0bd2d5.roa (raw, json)
Hash identifier: QnHKb+MEwdC4bkB8IocMqsGBBIsFWwdY7OC14pNN9bA=
Subject key identifier: CE:F8:FC:9B:AB:86:90:9A:A6:69:8E:A1:37:6B:2E:EB:0A:AC:FC:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1B1A203ACEECF71324C72180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85fd3fdb-f93c-37e0-beca-7867fd0bd2d5.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.211.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:20:3a:ce:ec:f7:13:24:c7:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=ff1195e8-fa62-4e76-a2ea-ffc53b63f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:ae:63:9e:df:75:d3:5c:28:d6:af:6e:29:
37:7d:46:ec:f4:39:04:95:8b:b5:06:ce:4d:4d:de:
8a:d6:4f:e3:dd:75:d6:e5:33:99:b6:fc:23:68:9f:
08:df:b6:6c:4c:97:b8:6c:e7:6c:89:fd:ed:08:7e:
e9:e7:2c:5f:87:ad:c4:f8:aa:32:99:99:3d:b2:e6:
8b:3b:59:56:29:01:9c:0b:6a:eb:05:c6:88:68:b2:
12:a6:c7:2b:af:97:5f:7b:ae:74:84:02:70:2e:08:
a3:93:b1:c3:84:c4:50:bd:cb:83:b6:f7:c6:5a:4d:
ec:f3:5a:71:61:fe:92:37:db:a1:79:75:17:f5:2c:
33:1b:57:e2:74:1d:e2:33:a5:f3:64:ab:c8:42:72:
bd:28:6d:44:79:3e:e5:18:99:f6:a9:25:74:e6:bb:
cc:a4:98:ba:c4:75:d5:0f:7b:a3:0a:89:72:46:9b:
54:7b:91:2a:04:9b:b0:69:c2:85:51:17:ba:94:32:
43:e0:70:a6:9e:21:f4:45:ca:48:6f:02:0b:67:8a:
e6:99:ba:d3:75:dc:90:6f:5e:e1:d9:ed:2d:c1:0a:
23:60:b4:54:5b:97:38:dc:cc:eb:4d:5d:c2:0e:61:
27:a6:d7:c3:e3:f0:a6:86:cf:5c:f8:c7:b8:fc:20:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:FC:9B:AB:86:90:9A:A6:69:8E:A1:37:6B:2E:EB:0A:AC:FC:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85fd3fdb-f93c-37e0-beca-7867fd0bd2d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:1f:17:1e:56:36:8e:3c:11:41:37:43:d5:58:1b:ef:73:6f:
57:1b:7c:ad:0b:fd:9d:cf:e7:a4:dc:7d:07:4f:10:c9:5e:44:
29:d3:ad:bb:c7:94:b6:44:ca:2d:4b:87:58:91:c2:c5:ff:fa:
c2:ca:9f:4d:9d:c2:fb:20:56:c5:6e:7f:d6:cf:58:90:da:f5:
60:f1:0d:9a:43:b4:e8:4f:9f:76:be:c1:58:26:33:4d:dd:08:
79:01:ab:ab:3e:77:b3:0f:e4:2f:8d:ee:a8:20:8f:88:01:9e:
55:ed:40:99:b3:b3:5d:04:2f:49:cf:42:d1:5a:cc:8c:9c:c8:
0f:f3:f7:61:88:18:dd:67:cd:a9:12:a3:c3:e4:39:ac:c3:7d:
09:2c:f0:c7:ca:65:ec:a3:21:c6:0c:cf:eb:27:69:38:eb:09:
cd:df:ca:bd:83:a6:5e:c4:a0:ac:37:a1:68:42:78:91:1b:96:
d2:a7:4a:e9:c9:f4:9b:cf:85:ee:a5:4b:b4:03:e2:1d:f8:6d:
5b:97:cf:53:dc:b6:60:9d:f4:31:77:8f:ff:c3:01:3d:bb:c5:
cf:f5:c2:de:25:07:b4:06:4e:5c:22:fc:f4:fc:b9:f8:9d:b5:
e3:24:46:eb:98:e2:5a:d7:c9:3d:71:17:bd:51:39:9c:c0:54:
18:a2:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:51 2026 by rpki-client