
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
File: a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa (raw, json)
Hash identifier: 4oedAxB46o1IQ4pvXMAdxTKU6KfyI8e4w8CzNXy+K6Y=
Subject key identifier: 81:80:D6:F8:E3:1B:EF:C7:45:61:2D:2E:4F:E2:12:2E:9B:4A:98:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DBBA05A8CB60FDA4205239530
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 16625
IP address blocks: 23.36.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:5a:8c:b6:0f:da:42:05:23:95:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=098c753b-e972-424b-adb0-b4784c4529b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:4e:29:56:47:6b:99:67:5c:c4:32:fc:31:
ca:5a:db:bc:d5:f7:72:d7:11:96:04:44:d2:4b:74:
16:32:77:77:14:58:9d:15:bf:d7:67:95:57:e6:6f:
62:6f:e9:6f:8b:91:08:62:db:f8:51:39:f0:35:ca:
e6:99:5f:18:16:79:72:54:57:ba:27:b2:80:2e:4a:
10:da:21:7c:cb:a1:34:ea:35:8e:1d:13:b2:f5:1d:
61:8d:76:77:34:4d:93:5e:ea:d0:91:3b:1c:a4:06:
6c:03:df:be:98:9f:17:b4:24:96:9a:ae:98:b5:c6:
49:f8:30:e4:fb:c8:a4:71:07:ad:ec:91:1f:5a:60:
30:1b:c2:77:de:9a:ac:f5:c1:e4:c1:bd:35:08:56:
32:90:ac:f5:12:ec:45:85:ee:e1:b2:d7:33:fc:19:
13:04:20:ee:77:3b:ba:bb:68:d1:98:91:ba:f4:a7:
e7:d4:1f:b2:58:7e:01:08:56:cd:58:2d:aa:3c:68:
28:7a:ad:67:69:e3:62:61:fe:78:f5:37:96:11:cb:
cd:75:e7:6a:70:b7:3f:2a:0e:be:ab:ef:a7:dc:04:
53:34:c9:6a:a5:4f:a5:73:4c:93:7e:a3:23:75:fd:
c1:84:63:51:5f:3f:73:04:4e:21:29:53:e1:f6:cc:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:D6:F8:E3:1B:EF:C7:45:61:2D:2E:4F:E2:12:2E:9B:4A:98:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d9:9a:34:39:c7:b9:dd:ff:91:85:a7:17:ab:da:d7:5c:95:
85:9f:4c:b5:e4:50:fe:29:60:b7:36:09:28:cc:33:65:ff:ed:
8a:c7:f4:b4:74:25:99:10:3a:35:0c:c6:03:4a:b9:8f:76:c7:
da:f5:28:2d:a8:69:f8:c1:b4:c9:47:f1:87:05:10:8d:fa:b8:
13:f2:64:da:5d:dc:a0:67:fe:c8:4d:f3:14:df:83:9b:19:c8:
90:30:ea:e3:9e:e4:ed:d3:08:38:2e:e8:04:33:42:22:ca:b2:
a8:e3:db:77:63:49:d5:ed:00:64:de:29:1d:33:6e:12:fc:a2:
d8:6b:a7:6a:b5:32:15:4a:d4:fc:1b:52:49:38:e7:fc:3c:0c:
ff:52:4e:16:19:64:95:23:a9:fb:05:35:16:c2:2a:0f:69:9d:
61:aa:13:eb:93:7d:d2:84:0e:e3:d1:b3:96:16:ad:55:28:51:
ea:94:16:39:46:1c:44:cd:dc:c1:47:c1:93:d4:ad:60:13:bb:
f9:07:60:cb:24:f1:dd:c0:7b:5b:f0:30:dd:75:c7:ed:3b:aa:
1e:27:05:af:4d:e2:00:ef:9c:92:8b:a7:17:95:dd:51:43:c6:
d6:38:50:ae:32:52:f0:fe:ec:6e:bf:c0:33:d6:5a:31:bb:6c:
10:46:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:05 2026 by rpki-client