
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa
File: f8d1f784-2db3-30a3-a0be-8fe061020362.roa (raw, json)
Hash identifier: u5FWSZGpiMSxNg7mw9eJrIVl0wR0zfPxkjqdjYVeZOg=
Subject key identifier: 64:59:64:80:FF:53:42:02:76:B3:73:FC:B3:5A:EC:DD:AA:B2:EA:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D95F015A5B612F01D8FA21780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 16625
IP address blocks: 104.104.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:15:a5:b6:12:f0:1d:8f:a2:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=5ae1e192-f339-4765-837b-1590ab813008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:2e:87:47:de:51:f9:82:65:8d:62:5a:cc:
f1:c9:93:d2:33:40:a4:eb:59:6b:c8:e9:c7:05:54:
4c:8b:19:54:ab:68:38:a0:39:ad:ff:f7:f8:38:5d:
88:d4:3e:85:7d:cc:6c:1f:8c:ed:09:c6:07:77:5b:
e8:95:aa:4b:92:6d:dc:23:dc:c7:cc:a5:af:03:a6:
09:37:5e:45:6c:e5:2b:76:a0:26:ab:3c:87:65:df:
3b:a8:d4:6c:69:06:94:e9:04:08:24:69:44:a0:02:
87:e1:eb:27:11:18:14:02:bb:e1:24:f6:b2:8b:5c:
5f:75:ef:2f:58:eb:4a:16:9d:7c:30:5f:b8:bc:5b:
7f:77:80:f4:a7:ea:03:fe:07:7b:18:0b:16:e9:dc:
e6:06:84:dd:bc:f7:99:0e:72:48:e6:f2:c1:67:2e:
a8:fb:2c:ac:67:c2:e7:30:ba:7a:8e:06:9b:40:ac:
da:5d:20:9c:9a:c2:20:53:3e:2e:43:97:8d:c0:cb:
9f:00:46:90:9d:d8:5e:2a:ab:8a:3b:7d:f7:94:ac:
9c:e7:12:b7:80:9c:63:88:a0:e8:e2:ce:b9:88:04:
94:44:c7:27:75:c5:5d:19:4e:7e:a7:d0:27:86:57:
c6:2e:a7:89:50:cd:a8:e8:54:ad:55:67:45:ee:97:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:64:80:FF:53:42:02:76:B3:73:FC:B3:5A:EC:DD:AA:B2:EA:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.104.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:7c:b7:25:0d:21:d9:3c:ef:94:67:31:e3:d9:1e:24:51:5d:
c2:02:a4:cd:a7:fa:5d:6e:a0:cd:41:35:e0:9a:da:18:55:64:
50:69:e6:77:18:93:ba:ce:dc:8b:45:f9:41:e3:8a:67:a5:97:
9b:64:b1:d4:9d:a7:66:4b:df:a4:c1:82:d5:7a:c5:13:ef:22:
9f:8d:4a:98:f4:7c:e4:ec:6a:1f:0a:f1:66:a4:ed:47:1a:a2:
cf:8a:ea:96:df:80:d5:ad:4b:cb:ec:b1:31:b7:70:d9:81:b0:
33:90:5c:4c:e6:34:56:b8:b1:63:c5:21:48:92:34:e5:7e:6f:
5e:e4:29:63:85:b3:5e:74:f2:56:ee:3e:69:b3:f3:6d:ae:ca:
7d:78:29:9c:4b:ea:4c:b4:52:01:fa:cc:b4:e5:8a:60:6e:80:
18:af:94:e9:77:65:78:ab:d6:23:d8:da:6b:b0:fd:97:13:69:
aa:f5:a5:2f:0f:f6:b2:57:77:d3:f0:27:f6:f2:d4:d5:6e:5f:
fe:26:9e:24:4c:43:a3:58:15:91:e6:81:e6:42:93:fb:21:ea:
fd:a9:f1:4d:6f:c6:06:58:db:7c:c9:16:09:e6:b6:3d:c1:46:
56:4a:0b:da:37:87:28:94:2c:e0:f5:22:6a:d6:b1:ce:5b:ef:
aa:91:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:20 2026 by rpki-client