
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a47c048c-88c0-319c-be37-946d567b3ba8.roa
File: a47c048c-88c0-319c-be37-946d567b3ba8.roa (raw, json)
Hash identifier: 8QjYIgsvwQWUhOc6T0QbVCAis1mziCsYm0fNxt3gCV4=
Subject key identifier: 3F:AF:2E:68:2F:C2:5A:0A:30:32:6F:BE:13:13:0B:49:23:83:9A:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DADAAE959470762C951CE2DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a47c048c-88c0-319c-be37-946d567b3ba8.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 16625
IP address blocks: 23.32.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:e9:59:47:07:62:c9:51:ce:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=55c61775-c5b0-4b7b-9585-6c30d50c55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b4:49:e0:d1:11:42:89:0a:55:42:67:a8:e3:
fb:76:21:df:7e:31:97:af:3b:eb:31:fb:7e:89:ab:
56:85:87:a2:86:30:36:f5:13:34:49:95:45:5e:c4:
77:33:07:61:8c:16:64:6e:d0:05:ca:c6:52:3e:13:
35:c4:62:a2:a6:77:70:01:81:73:32:23:86:3e:90:
82:e7:e2:29:d8:55:b9:92:1d:05:d1:39:f0:de:ee:
64:8d:7a:7a:18:de:0d:bc:ee:2e:c2:62:48:c4:0c:
c5:20:1a:f2:c7:f7:ed:99:1b:19:f7:58:88:01:56:
9b:7e:fa:0f:aa:67:1d:4f:3e:70:a8:a7:0f:34:41:
66:6c:04:7c:64:94:3b:f1:d3:85:c0:8e:81:5b:9e:
73:3f:25:16:e5:1c:b9:ee:31:ef:8d:8d:fb:3e:98:
f3:24:bb:f4:11:c5:b6:dd:7d:52:e1:98:94:94:57:
af:10:fa:6f:ef:a2:b9:26:ec:71:76:9f:27:d4:ba:
c5:b1:17:6d:83:b9:8f:5a:f4:cc:0d:d0:b3:2e:e9:
5e:07:87:72:fa:b2:9b:40:5f:15:ba:f6:f3:25:6f:
9d:7a:ee:c5:29:94:9e:ac:2c:1b:6f:c4:ba:7a:3e:
33:cb:25:82:3e:03:a6:40:1b:87:45:14:05:d5:b5:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:2E:68:2F:C2:5A:0A:30:32:6F:BE:13:13:0B:49:23:83:9A:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a47c048c-88c0-319c-be37-946d567b3ba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:9f:17:17:68:73:9f:fc:c7:a0:7d:f4:76:18:33:17:1b:4c:
c7:91:11:93:e0:31:85:56:1c:ca:b0:98:4a:a3:02:d1:1d:49:
a0:67:97:90:ce:3d:39:fc:a0:6a:8f:94:e9:a7:5a:b3:9d:74:
58:59:e6:70:d0:f0:aa:a2:cb:8d:f9:a9:fd:eb:56:9b:ca:d0:
b4:d5:e8:97:55:40:59:f9:56:88:8e:76:e8:10:3d:38:ba:81:
ac:51:90:d2:7d:26:a9:f5:6c:c3:ee:aa:ec:95:17:25:da:10:
04:3b:21:e0:e6:58:d2:6b:b4:d8:87:19:af:29:46:bd:ab:8e:
77:7c:6b:cb:81:81:8d:49:31:82:21:f8:77:b6:0d:92:7a:22:
83:9b:9d:e1:92:65:0b:f2:60:a7:e3:a2:49:28:a7:3d:50:c6:
b3:62:c9:a4:68:7f:d9:1d:61:0c:1b:d8:83:b7:f2:d6:a3:d7:
dd:1e:38:f9:5f:59:0c:24:c5:71:69:83:d1:bf:32:ea:46:52:
f4:5f:8c:f3:0d:41:fb:c9:bf:c7:8c:7f:87:8e:ca:2d:40:45:
81:89:ee:1c:cd:a8:8c:5b:4f:0c:41:25:6d:7f:16:7f:9f:df:
84:51:bc:50:31:24:af:3e:89:82:da:37:40:46:ec:1a:c0:64:
cd:61:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:44 2026 by rpki-client