
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa
File: e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa (raw, json)
Hash identifier: bmjbfFOYXDCh7Q6QnXUh1PLT57jQaeCrWzI4OwdNDsY=
Subject key identifier: 86:1A:79:77:AE:78:16:B3:51:21:41:30:11:94:DE:8B:26:B4:B0:70
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F4278314F7968D94694C30080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa
Signing time: Tue 22 Sep 2026 13:00:12 +0000
ROA not before: Tue 22 Sep 2026 13:00:12 +0000
ROA not after: Mon 21 Dec 2026 14:00:12 +0000
asID: 20940
IP address blocks: 23.209.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:78:31:4f:79:68:d9:46:94:c3:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Dec 21 14:00:12 2026 GMT
Subject: CN=996d59ed-38fd-40e3-9ee4-ac7f8d193165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:d2:e5:0d:70:c8:a0:6b:1c:fd:5b:a8:ec:
1d:d3:23:e7:35:80:73:29:11:d5:4f:45:53:11:9f:
cc:0d:7a:36:f6:68:e0:80:42:5d:71:c7:08:e9:2a:
b6:e5:cc:48:66:de:73:4a:e9:f3:1b:fb:e3:1b:15:
ca:22:23:42:e2:2e:d6:74:27:92:15:f1:20:ad:4c:
fa:dc:9a:49:91:b1:74:61:41:9e:92:99:d7:d2:d8:
db:56:73:c8:18:c3:ab:f6:3c:39:a2:c4:0b:ad:7b:
b0:89:dd:e9:ce:52:c4:68:96:9e:63:34:60:42:4b:
aa:fb:08:3f:64:04:c3:6b:55:6c:53:e4:d9:ce:a9:
4d:63:f5:74:f1:55:74:37:7d:44:6f:0b:72:0d:c1:
35:8a:07:78:cb:b8:a6:a0:d4:64:e9:3f:fd:b2:69:
d6:aa:01:b9:87:e5:03:c1:1b:a1:16:7e:fa:ad:67:
ba:e9:d2:46:e0:20:cc:b4:c8:09:09:02:c2:1a:67:
12:0a:b6:9c:11:c0:48:4a:3e:79:3e:cf:fb:54:fe:
5c:c6:c9:d7:63:d9:9d:d1:e1:d9:47:59:20:bc:8a:
0b:59:8a:59:32:ce:55:c0:18:3c:53:27:58:57:02:
c1:88:23:36:83:98:32:98:9b:f3:98:50:60:f7:40:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:79:77:AE:78:16:B3:51:21:41:30:11:94:DE:8B:26:B4:B0:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e908a01d-5b97-39cb-8e3e-bcd369d72f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:71:15:e1:85:e2:e4:0a:02:cc:63:9b:c6:2c:f6:17:33:b6:
a1:fb:e0:6c:90:f6:d7:6c:69:34:41:a4:b4:b8:cb:10:e2:08:
17:a8:d5:fd:7a:3e:92:8b:ab:8d:94:64:95:17:c1:d5:2f:40:
25:e3:5d:d9:43:fc:f3:8a:23:85:b6:ab:0d:5d:05:ad:50:78:
69:84:20:88:b0:51:89:82:63:56:d1:ac:80:db:f9:80:3a:42:
c9:ad:9b:df:e9:4b:e9:6f:7b:17:a5:ff:26:c4:d8:1c:2e:0c:
4c:82:75:01:4a:5b:9f:6b:90:cc:ae:f0:d3:9a:62:70:32:1e:
96:73:e6:2d:bb:0f:f0:96:b8:ef:f1:74:9f:67:1b:fa:d4:c9:
16:e2:c6:ae:9f:6c:68:4e:25:d1:21:b0:99:93:c8:d5:61:39:
d1:e8:f4:74:6c:bc:08:12:8e:d0:54:63:16:d3:c2:7e:6e:46:
3c:d9:dc:58:64:ac:23:c0:28:a6:38:81:a3:ba:e2:60:03:26:
89:2d:a6:64:e2:5a:ba:1d:63:f5:5a:41:f4:e1:ec:bb:b9:92:
3b:90:72:ba:f7:e8:59:eb:43:be:af:f4:6c:1d:cd:bb:a2:03:
b1:9f:f9:33:24:a7:30:97:fc:71:47:ad:5b:50:30:63:26:74:
fd:dc:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:47 2026 by rpki-client