
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa
File: aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa (raw, json)
Hash identifier: i68NWPaiiaBxk4saFtkHCk8ZSHccDBfVKvX8Z+qVtFM=
Subject key identifier: 1E:CA:1F:2C:7E:CB:20:70:E7:6E:2D:A5:31:EB:4F:6A:97:5C:D8:26
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D1F4A3235D29D43FCC4D561F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 7545
IP address blocks: 23.217.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:32:35:d2:9d:43:fc:c4:d5:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=3135e921-5f44-4153-81ec-5b21c16ef23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:da:7c:9b:23:aa:42:38:50:8f:ce:87:e9:
97:0a:15:de:e7:a1:47:d6:34:47:5b:58:a6:97:9d:
3a:7a:0e:4d:00:5b:16:5e:eb:fb:a9:bb:e2:96:86:
2a:8b:8c:cd:7b:ac:6a:49:ff:cc:d0:8d:65:13:37:
90:e8:fc:36:01:a0:c5:b6:60:a4:0f:e0:f6:48:11:
dc:93:a6:88:1e:df:be:73:d0:a6:fa:53:6f:3b:b0:
80:a1:ba:3e:a2:95:99:fe:a8:91:4a:8f:15:92:3f:
c8:3c:29:07:e0:b7:d0:db:33:5b:5b:0c:4a:e4:c8:
3c:df:d1:77:66:8c:44:2a:d6:7b:36:26:82:1a:8c:
22:97:2b:09:19:be:b8:2a:11:df:45:ff:e1:11:57:
9b:86:71:c0:7f:83:52:46:dc:d1:53:3d:af:ba:95:
e5:a7:15:d8:03:80:99:f0:ee:2e:50:7c:46:c2:43:
22:f9:9b:7a:86:bd:42:d0:00:45:be:c6:ea:d8:8c:
88:94:73:63:9e:52:04:f9:6e:5a:8d:6f:4c:98:16:
9f:8d:90:a8:94:22:ea:f2:d8:dd:47:75:a7:d0:d7:
d2:06:b9:52:7e:97:fa:e6:5f:f4:f8:4c:8e:d2:e0:
5c:19:18:d7:67:b4:1f:d7:f0:e7:7c:4d:54:22:b5:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:1F:2C:7E:CB:20:70:E7:6E:2D:A5:31:EB:4F:6A:97:5C:D8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:4d:c6:d2:c7:25:99:3c:9d:ce:54:fc:21:40:7b:07:17:66:
22:43:7c:7b:77:ec:2e:0e:13:91:0a:64:5e:6e:1e:7d:90:65:
ce:a7:f4:04:22:fc:0a:74:27:67:a7:1e:64:c0:0c:01:20:bc:
f5:d2:c6:9b:00:67:9b:b6:4b:fc:b2:ff:de:67:6f:0a:d8:5a:
27:f8:20:b6:12:9c:11:7e:35:07:19:2b:bf:2c:2d:46:41:6d:
69:45:3e:7d:dc:e1:0a:cd:c5:83:6d:df:38:0f:f4:64:92:c1:
eb:51:0b:81:3e:83:8b:f1:dc:de:43:f6:bd:a8:c7:6d:a2:13:
05:e7:2c:52:d0:ac:2d:74:17:9a:55:f6:d7:c5:ce:22:d8:02:
f5:97:50:96:34:f3:f0:14:f0:de:d3:3d:f2:64:e2:0c:44:08:
ed:c4:9e:1e:e4:05:8b:28:64:4a:f5:17:83:19:4e:32:6d:95:
c8:96:c5:a7:c2:d4:e6:69:d7:b0:81:4f:06:14:80:b9:a3:7b:
ac:dc:1a:82:83:e8:45:17:c6:04:25:d5:56:dd:cc:03:4b:9a:
26:5f:ab:e4:84:c1:b0:f6:fa:a6:ac:46:51:0d:88:98:44:1e:
25:af:b4:31:9d:43:dd:5c:b3:67:69:dd:d2:70:01:23:c8:99:
1e:fe:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:50 2026 by rpki-client