
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2a2da3-382e-3fc8-83cd-386955609f95.roa
File: ab2a2da3-382e-3fc8-83cd-386955609f95.roa (raw, json)
Hash identifier: jwo0P61/FmdlPdAhuBkEwvd3oGCJkMeTBj6OvtiiDzc=
Subject key identifier: 65:A3:CD:CD:B4:78:F8:BF:27:43:B3:D9:12:FE:0F:5B:A5:74:14:0D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E66DA244D560A9F204E67F460
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2a2da3-382e-3fc8-83cd-386955609f95.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 16625
IP address blocks: 23.4.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:24:4d:56:0a:9f:20:4e:67:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=2ca4ee47-42ab-4eb3-b0eb-d7f778a4c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:8b:3b:ca:87:2e:83:9a:b6:8c:77:1f:c2:
30:ea:dd:76:80:1c:c2:8f:09:ad:25:6a:e8:1a:b7:
8e:3a:09:96:72:ff:6e:59:55:0f:f4:95:a0:e4:aa:
9b:3e:e8:86:5a:8e:9a:7f:75:c2:4f:80:1f:ee:20:
9c:1f:9e:26:2a:12:fe:7b:58:3b:80:cb:c0:57:5c:
ed:d4:50:54:21:ed:04:18:0f:1c:95:54:15:a6:51:
23:9d:71:4a:3b:9d:01:6a:18:c4:00:93:4f:a2:6d:
9d:bb:c1:1c:2a:a1:fc:20:b1:b5:f1:5c:c8:c8:5b:
31:5f:da:ef:be:8d:0d:17:c9:3d:e9:23:ad:22:29:
14:22:4b:3b:87:52:14:f0:d1:c9:c0:c5:c7:5e:05:
fd:0e:c5:38:40:c3:8c:b7:a8:0e:b4:db:b4:54:34:
40:8f:d6:c8:3a:63:f2:6f:af:7b:2d:72:df:ac:7c:
67:31:8b:7c:8f:b7:f3:4e:66:0e:b3:b0:f8:39:ec:
c9:6c:03:50:c3:6a:23:93:ba:6a:eb:a7:7b:49:e9:
7b:75:cf:1a:3f:0d:a7:4f:45:e0:b0:5d:76:98:77:
e1:18:09:56:9a:c8:fb:c1:43:76:b8:17:09:d0:83:
1e:b5:8c:b4:e2:de:be:bb:3a:56:02:9a:97:2f:1a:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:CD:CD:B4:78:F8:BF:27:43:B3:D9:12:FE:0F:5B:A5:74:14:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2a2da3-382e-3fc8-83cd-386955609f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.4.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:55:e4:12:66:1d:38:c1:01:76:cf:ee:8b:0e:75:b1:b0:87:
39:22:a7:09:81:4a:4e:5d:11:23:63:de:1f:1a:31:a5:ef:76:
43:6c:45:eb:8f:ef:39:29:00:5e:03:b2:49:38:d8:9b:f9:6f:
eb:7c:99:9c:4c:c3:a5:ec:9b:10:5f:6d:ca:05:c6:4a:c1:cd:
8c:1f:1a:10:af:3b:d9:3f:2a:cf:17:d1:61:4a:a3:a4:b0:24:
35:ad:df:80:0f:8e:d8:71:a7:38:77:d4:f7:0d:84:3a:67:9d:
3b:25:b6:d2:ec:b8:6c:d0:eb:6e:f1:0b:ac:dd:54:29:aa:00:
83:df:c9:03:e2:90:c7:84:89:18:05:2d:3c:76:6f:c6:d6:1e:
12:6f:0f:3f:b2:84:6d:4c:fc:a1:2e:47:e0:00:73:ab:54:b5:
50:d8:40:90:99:07:f1:3b:a0:1e:60:ce:be:27:ba:e4:f7:73:
37:89:33:cb:8f:db:c1:cb:54:5f:80:c2:7e:ce:fd:3c:59:c7:
bd:41:cc:7c:91:63:1b:a8:77:20:da:3d:4e:0f:16:2b:62:dc:
27:58:c8:d4:9b:e5:bd:24:2e:f6:97:bc:4f:42:cf:ff:a1:3c:
78:c2:fd:56:b1:81:f2:02:0a:74:e7:b9:a8:30:62:61:32:ec:
48:b7:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:35 2026 by rpki-client