
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa
File: cf1e3177-28b4-3037-9544-789bed6a62ed.roa (raw, json)
Hash identifier: GlKecnWUUgE5quV/fsWqzhN6O+QpXhBIMpq39Yi+iIM=
Subject key identifier: E4:D1:8A:57:0C:E3:FF:1B:FF:F6:1A:E0:64:7E:E9:3D:50:91:3B:AA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F31B7C55EA67EA17737EB3B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa
Signing time: Wed 16 Sep 2026 13:00:12 +0000
ROA not before: Wed 16 Sep 2026 13:00:12 +0000
ROA not after: Tue 15 Dec 2026 14:00:12 +0000
asID: 16625
IP address blocks: 23.33.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:31:b7:c5:5e:a6:7e:a1:77:37:eb:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 16 13:00:12 2026 GMT
Not After : Dec 15 14:00:12 2026 GMT
Subject: CN=50fa3dbf-4f95-40fc-b652-44ecd8b3d319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:10:de:2a:80:ff:44:df:e6:48:9b:07:80:
12:3d:b8:1d:40:2e:ae:33:58:62:c3:62:3d:ac:d7:
0c:ac:77:17:56:35:39:43:d6:30:ac:77:e4:a6:11:
25:98:d4:f0:60:79:84:b9:fd:a3:fb:24:ec:2a:90:
7f:7a:9e:45:b2:73:47:d5:8a:71:66:c1:1d:3d:e5:
51:4f:96:90:9b:a5:65:e4:cc:0d:93:96:3f:0c:7b:
85:e2:fd:8b:61:5e:4c:81:dc:c1:dd:c1:01:15:23:
05:b1:f5:2e:94:88:7a:ad:66:ba:7c:09:d7:eb:36:
9e:da:5f:a1:52:ee:f0:9b:c3:26:c5:ba:f6:a9:62:
90:85:e7:c6:d9:21:b1:17:ca:5e:22:59:67:a3:1b:
08:23:1b:b3:29:f8:b4:61:0b:ca:df:20:6d:1f:05:
dd:69:5b:3a:8c:dd:32:b7:81:bd:0f:fc:41:cd:9a:
c0:6f:16:0e:0a:85:87:3c:fb:b7:42:71:04:62:3a:
f3:e0:77:88:a8:fb:42:e4:88:34:c2:68:9c:da:fa:
49:e5:9f:86:b8:05:c2:10:ea:20:47:b8:b1:50:f0:
24:c0:4c:a6:c1:ab:c3:8b:07:a1:86:4f:03:00:76:
01:b2:2e:47:21:c8:2a:41:a0:c5:38:82:7e:60:db:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:8A:57:0C:E3:FF:1B:FF:F6:1A:E0:64:7E:E9:3D:50:91:3B:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fa:4a:4d:32:40:7f:60:9e:7d:8e:23:52:26:b5:45:fb:a3:
3f:21:b0:eb:cc:35:bd:fb:57:e8:cc:66:6a:e4:63:2e:5d:5a:
2f:f7:39:f3:22:fa:f3:ed:e0:4b:28:d4:df:d3:e5:6c:64:4a:
22:6a:47:fe:69:47:5a:12:3f:76:9f:27:12:f6:22:64:d9:a0:
cb:04:25:ca:6b:9f:d9:2d:e6:26:30:c9:0d:6e:a9:f1:87:79:
d4:c9:9c:bf:c8:87:d5:4a:1b:ba:63:6b:18:1d:16:e6:ea:49:
a7:e8:53:bb:1b:72:61:b9:0f:11:69:c1:0c:9c:3c:f0:f7:7b:
87:dc:6d:c4:c4:20:3d:0f:c9:34:05:e4:92:b0:7b:8c:30:c1:
fa:7b:0d:32:b4:2b:5c:16:32:05:a6:2b:29:76:0c:18:30:bd:
4a:df:9e:17:a5:c8:53:1e:77:57:7b:c7:d6:80:dc:50:17:33:
cb:53:d8:ca:f1:26:82:d9:9e:a4:ec:e1:7a:22:b7:14:d3:39:
df:88:70:3c:74:76:64:ad:d2:e7:22:10:d6:48:ca:90:ce:d0:
ca:e8:77:41:a0:fa:d8:8e:46:df:6d:4a:7a:5a:c1:68:40:5e:
ac:f1:1b:69:83:71:59:cf:1f:02:47:89:ef:14:91:1f:88:ba:
b4:36:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:17:06 2026 by rpki-client