
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0ddc71e-064c-3482-9c26-2a0036298cc6.roa
File: a0ddc71e-064c-3482-9c26-2a0036298cc6.roa (raw, json)
Hash identifier: 7pdXCqFkN0tHiPHM7k8b8KRIXeDLrGS1HDMqkblEft8=
Subject key identifier: 63:E8:8B:78:CD:F6:F1:43:3E:C6:6A:30:05:2D:8B:4B:41:A9:10:C4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DADCBADDEA192BCC47694E7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0ddc71e-064c-3482-9c26-2a0036298cc6.roa
Signing time: Thu 30 Apr 2026 14:06:48 +0000
ROA not before: Thu 30 Apr 2026 14:06:48 +0000
ROA not after: Wed 29 Jul 2026 14:06:48 +0000
asID: 20940
IP address blocks: 23.35.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:cb:ad:de:a1:92:bc:c4:76:94:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 30 14:06:48 2026 GMT
Not After : Jul 29 14:06:48 2026 GMT
Subject: CN=b6cae31f-d676-4dea-9585-0ca1bf4fea84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:22:a1:4d:a2:33:1c:bf:97:06:7d:0e:23:
16:53:d9:8b:59:f3:94:52:8a:df:05:61:2e:2c:fd:
ba:cc:c4:f5:f4:25:d8:95:ba:e7:3b:19:78:78:59:
11:13:a8:19:e3:5c:f2:80:4e:36:64:61:5f:a4:03:
bf:24:8e:b1:ab:60:c0:84:d1:25:53:95:fa:94:a3:
7f:19:a7:f5:e5:e9:ed:e9:24:f2:ef:1a:86:49:7e:
07:40:fc:9a:50:96:27:04:3e:ae:3d:8b:43:52:7e:
37:8d:e3:98:40:3d:4d:53:0d:75:4f:18:6d:5b:56:
1e:02:63:6c:c8:60:01:cb:36:93:98:4f:52:01:59:
90:7f:e6:28:d6:6e:8f:da:29:ee:e3:1f:52:cb:ef:
d5:d1:7a:4c:8e:e8:c9:78:c9:0f:3d:05:16:ee:28:
8b:54:8b:d5:e2:4d:b5:5c:39:89:99:73:40:f3:bd:
52:63:b1:84:0b:12:9a:a0:53:b7:6c:82:2c:54:ea:
3e:98:ed:80:52:68:17:17:cc:90:ba:e7:df:e7:b2:
4f:65:76:85:98:ed:12:83:1e:73:cc:77:f0:6c:63:
aa:52:ce:f7:ef:95:db:e9:79:94:c4:e2:45:71:a6:
bb:b7:63:6b:8d:ee:c2:59:f9:4b:42:1e:ea:fe:d6:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:8B:78:CD:F6:F1:43:3E:C6:6A:30:05:2D:8B:4B:41:A9:10:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0ddc71e-064c-3482-9c26-2a0036298cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c4:a9:ee:60:c4:e6:ff:b0:71:16:a2:d5:29:9f:ed:fd:33:
d4:c8:2a:93:d7:ba:31:c3:ca:fc:93:36:eb:30:f7:d3:58:c5:
04:ba:fd:57:2d:06:5f:3a:34:b2:1f:6c:38:c7:71:ca:fd:d0:
c7:cd:32:e4:18:3e:67:ad:03:84:d4:84:f8:9e:ff:5d:38:07:
e2:f8:dc:07:53:44:d4:4d:54:d1:41:ce:27:66:99:14:15:7c:
87:dd:25:e4:10:47:a0:01:56:5d:3d:e3:e2:4d:78:33:5a:23:
bb:d6:4d:7a:d1:40:dd:e0:b5:b8:09:85:4f:3d:51:97:2e:f9:
08:84:a5:0e:1e:55:16:74:39:cd:f6:eb:12:b8:a3:d3:bc:c2:
26:ab:3d:4b:dd:8b:1d:b9:8c:31:b5:ba:ae:7b:4b:af:29:f8:
93:5f:a0:f4:b2:c9:14:d7:4b:b9:a8:b7:14:29:39:2a:49:a7:
db:17:2c:f0:09:c3:8c:6d:db:0b:c0:10:b0:95:9e:42:51:cc:
d7:60:de:0f:35:f0:4b:6d:28:24:b0:69:9a:9b:3b:79:f8:a1:
a1:f1:f1:03:3a:90:0a:54:d4:c7:66:ec:34:ff:3b:aa:6c:64:
6b:a3:87:2b:6f:a0:12:42:72:54:8b:6d:ed:6d:62:6f:6c:6a:
0f:01:b3:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ty63eoZK8xHaU58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQzMDE0MDY0OFoXDTI2MDcyOTE0MDY0OFowLzEtMCsGA1UEAxMk
YjZjYWUzMWYtZDY3Ni00ZGVhLTk1ODUtMGNhMWJmNGZlYTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgEioU2iMxy/lwZ9DiMWU9mLWfOUUorfBWEu
LP26zMT19CXYlbrnOxl4eFkRE6gZ41zygE42ZGFfpAO/JI6xq2DAhNElU5X6lKN/
Gaf15ent6STy7xqGSX4HQPyaUJYnBD6uPYtDUn43jeOYQD1NUw11TxhtW1YeAmNs
yGAByzaTmE9SAVmQf+Yo1m6P2inu4x9Sy+/V0XpMjujJeMkPPQUW7iiLVIvV4k21
XDmJmXNA871SY7GECxKaoFO3bIIsVOo+mO2AUmgXF8yQuuff57JPZXaFmO0Sgx5z
zHfwbGOqUs7375Xb6XmUxOJFcaa7t2Nrje7CWflLQh7q/taTDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPoi3jN9vFDPsZqMAUti0tBqRDEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBkZGM3MWUtMDY0Yy0z
NDgyLTljMjYtMmEwMDM2Mjk4Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyPZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjEqe5gxOb/sHEWotUpn+39M9TIKpPXujHDyvyTNusw99NYxQS6/Vct
Bl86NLIfbDjHccr90MfNMuQYPmetA4TUhPie/104B+L43AdTRNRNVNFBzidmmRQV
fIfdJeQQR6ABVl094+JNeDNaI7vWTXrRQN3gtbgJhU89UZcu+QiEpQ4eVRZ0Oc32
6xK4o9O8wiarPUvdix25jDG1uq57S68p+JNfoPSyyRTXS7motxQpOSpJp9sXLPAJ
w4xt2wvAELCVnkJRzNdg3g818EttKCSwaZqbO3n4oaHx8QM6kApU1Mdm7DT/O6ps
ZGujhytvoBJCclSLbe1tYm9sag8Bsyk=
-----END CERTIFICATE-----
Generated at Wed May 13 09:14:43 2026 by rpki-client