
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c28984-f1fa-3484-8c42-4b44ade075fb.roa
File: 99c28984-f1fa-3484-8c42-4b44ade075fb.roa (raw, json)
Hash identifier: blivGYofdgIAsT47TXowVpYa51buzlLNFnzBNbHEFCc=
Subject key identifier: AD:67:D8:8E:C0:BB:FC:13:10:06:95:BF:B9:BC:3B:89:EF:BF:84:D3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D9E50208A72FBD103598C1E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c28984-f1fa-3484-8c42-4b44ade075fb.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 23693
IP address blocks: 23.43.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:20:8a:72:fb:d1:03:59:8c:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=b6fb72f0-1e3c-4f1f-aec9-e07d5521ca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:d4:38:16:7d:93:dd:0d:43:d7:89:8b:97:
55:89:3a:4f:06:57:fc:10:68:4e:19:58:b1:d3:fb:
29:c1:6e:f2:d6:2b:a1:a1:e8:4d:9f:52:ea:47:bc:
ca:1f:06:da:8a:34:a9:99:97:92:90:28:43:62:f2:
00:9b:c2:3a:48:79:b8:cf:d2:95:e8:43:b6:ef:35:
5e:d3:e8:06:4a:f3:ae:4a:0b:7b:d1:b9:9b:0b:48:
53:04:c5:8a:2b:6f:9b:a8:cd:b6:51:69:1a:a0:2e:
43:74:af:4a:15:10:eb:13:95:c4:de:0f:8c:aa:1c:
b6:30:a3:9a:6b:35:61:d5:f9:07:ce:10:e0:08:5f:
d9:39:eb:c9:4d:54:18:83:58:32:db:a7:23:3f:1d:
3e:2b:80:3b:13:00:09:b3:34:11:74:a1:e3:d3:43:
34:9c:34:a9:54:88:73:4f:39:35:51:4b:a5:19:f4:
05:aa:9b:d3:51:ff:1e:d0:d1:86:9c:d0:ca:34:9b:
00:d3:c7:3f:5b:a1:d6:f9:f5:49:f3:ac:4d:89:67:
5b:3c:8f:07:79:eb:19:15:a4:d6:d2:10:16:63:62:
73:0c:ff:fb:d5:17:24:71:20:a4:f7:8a:ed:1c:39:
03:98:84:ba:ab:63:4d:83:b5:36:e2:d4:7a:b5:bb:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:D8:8E:C0:BB:FC:13:10:06:95:BF:B9:BC:3B:89:EF:BF:84:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c28984-f1fa-3484-8c42-4b44ade075fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ba:9c:ba:fb:84:6b:bf:5c:4e:87:12:e2:00:db:0b:b3:3a:
0b:c5:7a:d5:bf:1b:f7:d8:81:a3:27:01:19:6d:6d:bd:f1:df:
4b:05:1d:8a:4f:9e:41:2b:14:e0:f6:40:aa:0a:be:75:56:70:
21:a1:15:22:92:a1:c5:52:5c:1e:d4:bc:bc:07:2b:a6:ae:6e:
8c:53:58:dc:aa:d0:82:67:4a:6c:41:54:cd:d7:56:4e:41:0a:
e1:3a:0e:62:8b:cf:31:f1:6a:aa:5c:ad:6d:0b:91:62:fb:56:
55:fe:fc:e4:26:bd:16:58:c5:46:2b:c6:ad:6c:4b:e2:8c:29:
b7:cf:b1:87:8f:a9:c0:cb:f1:13:2d:40:00:5f:25:0c:80:3e:
49:47:bd:5e:22:9a:2c:03:65:8f:37:6f:48:45:9c:db:8e:58:
05:7d:b4:2f:c1:62:26:2d:95:d7:a2:e9:a6:8a:a2:00:ca:c8:
15:90:b7:6b:89:07:27:17:ee:ad:18:b7:90:0c:a8:40:56:80:
85:56:aa:3b:b3:7b:85:0e:ce:01:4e:df:98:32:3d:b1:f2:90:
ba:50:ec:18:8c:65:fe:cd:1d:5f:1a:89:b8:7f:c9:f6:a6:30:
d7:33:9a:fa:1a:d3:a6:f6:2e:6f:9e:66:97:29:07:50:62:ce:
af:5a:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:20 2026 by rpki-client