
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd1ceda6-a9da-349a-aead-4c5cc5f512a0.roa
File: dd1ceda6-a9da-349a-aead-4c5cc5f512a0.roa (raw, json)
Hash identifier: nIqflJFPQMMPE4OR6S5eJSP1cLt3xNEUQi3jF9HzmrM=
Subject key identifier: A5:20:B0:BC:1C:AB:DD:21:1A:DA:7A:60:C2:94:E2:AE:4D:2F:D3:01
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F43DD5BC6599F8B996CF81C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd1ceda6-a9da-349a-aead-4c5cc5f512a0.roa
Signing time: Wed 23 Sep 2026 01:00:12 +0000
ROA not before: Wed 23 Sep 2026 01:00:12 +0000
ROA not after: Tue 22 Dec 2026 02:00:12 +0000
asID: 35994
IP address blocks: 23.49.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:dd:5b:c6:59:9f:8b:99:6c:f8:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 23 01:00:12 2026 GMT
Not After : Dec 22 02:00:12 2026 GMT
Subject: CN=e64bf471-7fea-4024-9a0d-20cf73d23c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:4c:ca:b1:a1:97:14:89:e0:8f:18:31:f3:
c5:e1:6f:09:cf:61:d1:ea:6e:93:57:ea:4f:a7:e0:
1a:86:4a:4b:08:2b:20:13:72:91:c2:35:d3:a6:80:
21:2a:01:76:9c:7e:b5:f0:8d:eb:5b:97:11:ad:9b:
17:8f:32:44:0a:63:f7:a6:ad:82:ee:0b:94:fd:ee:
ca:55:8b:74:2c:51:b6:16:92:75:5f:1c:a4:93:9b:
0a:36:a6:af:16:70:b9:b3:f7:37:f8:97:fe:81:7d:
fd:dc:9e:76:d8:2f:e1:02:e9:f3:e9:c3:35:23:18:
f7:09:59:37:41:02:ae:48:6d:bf:ee:b0:7b:84:14:
8f:a9:cb:bb:4e:c6:e1:24:0f:50:d2:ff:0d:96:0c:
3b:eb:58:7d:94:51:2e:3f:21:ca:61:bd:70:3e:9d:
2f:fe:b3:5d:d5:66:30:09:b4:6e:eb:65:e5:bf:0c:
9d:5a:3b:8d:20:26:b9:1e:c8:e0:ae:67:a7:ef:82:
bb:c9:33:8f:b7:eb:d5:94:23:2c:cb:32:84:45:55:
a5:99:67:92:2a:8b:75:21:d6:b5:83:d3:66:01:1a:
a3:67:af:8c:b1:6a:93:39:f7:0f:f9:b1:bd:57:1a:
ef:e4:b1:c5:64:70:80:b9:89:09:d5:d9:db:fe:df:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:B0:BC:1C:AB:DD:21:1A:DA:7A:60:C2:94:E2:AE:4D:2F:D3:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd1ceda6-a9da-349a-aead-4c5cc5f512a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:9f:6b:28:f3:cb:f9:33:e0:58:ef:0c:4a:b5:41:63:bb:43:
60:8b:30:eb:34:0f:e0:99:61:af:90:fc:26:ea:c5:82:de:ff:
fb:77:a9:be:4a:50:53:ef:02:60:f7:20:c1:dc:7d:75:fb:e9:
b7:28:dc:df:e6:d5:2b:cd:a3:01:d1:16:3b:aa:a2:29:93:9a:
66:c8:d2:2d:56:e2:ca:e3:93:1e:d1:de:59:51:d8:21:6f:88:
d9:32:6c:63:6b:64:56:ba:71:92:49:b5:62:e8:77:9a:f9:e4:
e1:fe:d3:2b:c3:24:67:f5:e4:16:e0:47:e7:f6:39:66:fb:c4:
a4:b6:cf:89:31:de:13:bd:36:1b:c4:09:29:ee:5e:1a:17:c4:
e3:b7:64:fa:e0:c2:43:a6:78:0e:f7:18:e1:9b:46:65:9b:98:
9e:69:fe:d4:a4:35:92:39:03:af:96:4c:ee:04:b1:54:74:b4:
8c:61:35:7d:39:07:61:81:43:dd:4c:d0:c2:98:d8:55:78:70:
2a:ec:8e:20:24:bb:f0:96:ea:40:86:45:57:8e:64:2e:4c:a6:
be:07:21:a2:47:d3:f9:b4:8e:62:14:a6:63:52:b2:53:23:a4:
d8:4d:10:3f:c1:68:4b:42:f1:3c:fa:5d:64:f4:38:21:a3:da:
5c:66:81:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VvGWZ+LmWz4HIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTY0YmY0NzEtN2ZlYS00MDI0LTlhMGQtMjBjZjczZDIzYzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmZMyrGhlxSJ4I8YMfPF4W8Jz2HR6m6TV+pP
p+AahkpLCCsgE3KRwjXTpoAhKgF2nH618I3rW5cRrZsXjzJECmP3pq2C7guU/e7K
VYt0LFG2FpJ1Xxykk5sKNqavFnC5s/c3+Jf+gX393J522C/hAunz6cM1Ixj3CVk3
QQKuSG2/7rB7hBSPqcu7TsbhJA9Q0v8Nlgw761h9lFEuPyHKYb1wPp0v/rNd1WYw
CbRu62XlvwydWjuNICa5Hsjgrmen74K7yTOPt+vVlCMsyzKERVWlmWeSKot1Ida1
g9NmARqjZ6+MsWqTOfcP+bG9Vxrv5LHFZHCAuYkJ1dnb/t/lxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUgsLwcq90hGtp6YMKU4q5NL9MBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQxY2VkYTYtYTlkYS0z
NDlhLWFlYWQtNGM1Y2M1ZjUxMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+fayjzy/kz4FjvDEq1QWO7Q2CLMOs0D+CZYa+Q/CbqxYLe//t3qb5K
UFPvAmD3IMHcfXX76bco3N/m1SvNowHRFjuqoimTmmbI0i1W4srjkx7R3llR2CFv
iNkybGNrZFa6cZJJtWLod5r55OH+0yvDJGf15BbgR+f2OWb7xKS2z4kx3hO9NhvE
CSnuXhoXxOO3ZPrgwkOmeA73GOGbRmWbmJ5p/tSkNZI5A6+WTO4EsVR0tIxhNX05
B2GBQ91M0MKY2FV4cCrsjiAku/CW6kCGRVeOZC5Mpr4HIaJH0/m0jmIUpmNSslMj
pNhNED/BaEtC8Tz6XWT0OCGj2lxmgZg=
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:26:44 2026 by rpki-client