
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa
File: d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa (raw, json)
Hash identifier: 3Dh1nR2Erz/RcvPdoXEyPsNtom+dIfCpd6NGKzOF/WY=
Subject key identifier: 52:6C:CF:41:EA:CF:B8:22:69:3D:D7:7B:79:5C:59:5B:DB:3F:8A:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584DBBA05F90FCBD704D2D233680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 35994
IP address blocks: 23.40.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:5f:90:fc:bd:70:4d:2d:23:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=28e8a91d-b6d1-4a28-9d3e-cdf550058be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:69:78:de:62:76:41:38:24:4d:4f:33:11:
9a:3f:a9:aa:dc:5d:94:4d:8a:15:88:39:af:98:59:
1f:ce:4e:0b:f9:42:3e:bc:ae:6b:86:05:ea:e4:2c:
44:10:9b:e6:34:03:92:d6:8d:9b:72:f8:ac:f6:f4:
7c:34:14:16:b4:73:05:0e:75:e0:90:18:33:1d:51:
a1:54:2d:02:ec:f6:da:21:f2:bb:2d:5a:2e:dd:a6:
7b:02:78:23:55:cc:54:0b:fd:c7:45:89:f9:dd:79:
2c:3c:c9:ed:a6:ed:29:70:c6:79:9a:2b:75:d0:aa:
15:36:82:6f:54:d9:98:df:87:80:aa:0c:33:3e:13:
ec:4c:fb:44:d5:df:84:5c:f7:57:96:49:2f:e1:5e:
82:ab:31:92:41:59:05:75:43:cf:78:91:0a:77:6f:
62:99:f8:23:06:cb:d2:7e:88:82:cf:37:97:61:52:
ba:ad:22:fb:2e:92:41:86:df:f2:22:2b:8c:a7:be:
01:3c:61:13:ae:dd:9c:20:a6:06:18:7d:8e:97:21:
f9:ca:e6:6d:81:ee:4d:22:62:2c:8d:61:bb:40:96:
d6:f3:42:5a:65:0c:ee:fc:07:3b:77:cc:6a:bd:4f:
63:b5:e3:fb:a4:42:8f:15:81:d8:4d:11:1d:60:76:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:CF:41:EA:CF:B8:22:69:3D:D7:7B:79:5C:59:5B:DB:3F:8A:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6f951ed-21e7-346a-80a6-3c921ac8eb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6e:db:3f:9c:c9:93:9d:72:51:fe:4c:f8:a7:49:3a:62:4a:
0d:20:76:79:f3:14:97:51:4f:17:97:c1:2e:a0:d1:23:4c:6e:
01:86:59:20:b6:a9:ff:8f:7a:5f:c6:2e:74:f3:23:af:5b:64:
45:1b:3a:69:a2:d9:7e:01:1c:a0:da:3f:92:ef:ce:17:b1:8c:
56:8b:1f:a8:88:49:87:54:f8:ce:b9:57:aa:c0:c4:b5:58:49:
39:f1:18:7e:da:79:c5:27:6f:8c:17:02:91:36:ce:95:28:18:
46:a1:a0:6f:02:9b:4b:ea:c6:90:96:59:0e:58:34:70:88:68:
a1:40:a5:73:89:2c:9d:81:60:fa:25:24:72:c3:ac:5e:d9:84:
23:98:1a:18:3a:fb:dc:55:7a:f8:8d:a2:6b:14:27:77:5a:c2:
44:53:41:47:85:ee:16:72:0d:dc:fb:a2:47:7d:62:a5:ae:45:
fb:f3:52:0f:06:4f:c0:a4:72:9c:4c:5e:62:da:0e:b4:99:87:
e2:c0:45:bd:03:ec:eb:0a:42:46:ec:57:bc:0e:9e:51:3e:84:
82:30:45:09:b1:38:ee:a1:9d:de:da:f5:64:49:1e:11:58:0a:
12:5f:95:96:76:1f:7f:b5:d6:86:78:dc:90:76:be:73:e6:6f:
3b:05:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:01 2026 by rpki-client