
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa
File: bbfbf758-32cc-3df7-9006-a5e1cc323083.roa (raw, json)
Hash identifier: /NJSyXbZFNiGHlO1PPyny+Ndrw0OGqxgdv8Weo10538=
Subject key identifier: 73:54:61:33:A5:C8:8B:A4:0E:E7:9C:81:6F:AA:CE:2C:A8:2B:36:F6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D316F720F265F8F510F4C6BE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.39.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:72:0f:26:5f:8f:51:0f:4c:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=805af8f4-075f-4944-ad0c-75aa11a4f457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:19:0e:35:e3:1a:fc:c3:52:a4:a6:b3:fe:
fc:0c:42:a0:29:92:5b:0e:78:7a:35:4e:31:a5:5a:
3d:ad:d4:0a:dd:31:36:cc:b7:18:dc:62:ee:d7:1a:
af:2d:ca:63:20:b7:25:1d:02:1d:10:7d:88:30:89:
07:e9:9c:17:a1:07:b5:df:00:54:1a:f3:4e:9f:c7:
0e:06:bf:76:4a:70:5c:b1:e7:6e:b3:59:1b:ae:65:
4c:00:58:15:a7:8c:a9:9b:ab:e8:78:ea:40:3a:93:
b9:80:22:ef:db:6c:e9:71:c8:4b:32:92:cc:a2:53:
3e:c3:3a:ef:03:13:ab:70:bd:15:94:e5:42:7a:99:
19:a5:3c:29:43:68:b8:07:db:bb:7e:36:d3:52:cb:
9d:c7:2a:1b:30:b2:d0:9c:ba:2a:96:65:21:d6:0d:
87:2b:10:ee:ad:d5:02:5e:6c:49:b4:d4:69:43:07:
79:c1:e3:ed:65:10:24:60:14:6c:a6:06:d4:6e:17:
66:96:2f:51:92:9f:1f:af:a1:96:c0:f2:d6:e7:15:
7b:8d:7b:c1:6e:b8:2d:f5:08:e2:3b:a1:de:8e:aa:
90:aa:b1:94:b3:4f:da:c8:03:c9:9b:cc:46:7d:1a:
56:8c:87:0c:00:cb:06:92:8e:1b:0c:d7:80:01:62:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:61:33:A5:C8:8B:A4:0E:E7:9C:81:6F:AA:CE:2C:A8:2B:36:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:98:e7:f8:1d:e6:65:d7:ec:d0:93:8c:2d:51:04:44:3d:5e:
92:4a:0a:81:91:d2:cf:d1:99:5f:7e:7e:b4:15:46:04:c1:38:
16:e6:d1:d8:c0:d5:9d:b4:58:12:21:9a:89:86:d7:83:83:28:
b0:c2:33:d1:1b:75:d1:d4:cf:66:4b:1c:3f:a7:53:92:27:fe:
73:99:87:4c:b8:86:5b:b8:16:fe:67:22:59:eb:ca:dd:0c:a5:
75:72:5b:04:02:b0:5a:a1:fa:97:ca:0e:51:bf:b6:5e:c4:9f:
e1:27:ec:a1:80:88:ae:a7:c3:d6:56:d8:44:14:42:ed:f2:a2:
81:e9:dc:92:0c:ca:71:f9:a4:f1:a2:fb:e0:7b:fd:15:dd:23:
7c:30:ea:70:7a:42:c1:88:16:6b:ab:4d:39:06:a2:0b:a0:3e:
36:03:17:49:28:d9:be:b5:cc:6d:a5:25:61:b6:77:2b:11:d0:
b0:42:0f:13:f1:01:3c:17:d1:cc:54:16:6f:10:4c:05:72:0e:
44:ed:6a:24:4d:85:99:09:a5:29:55:d2:f4:c2:e7:90:b3:6f:
9c:65:db:a7:b9:1d:ca:f2:8b:18:f4:63:10:8b:3f:f1:d4:b8:
f6:b8:b5:24:17:1b:3c:82:a0:4a:d9:cc:39:69:4e:b5:ad:28:
75:f9:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:59 2026 by rpki-client