
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa
File: 5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa (raw, json)
Hash identifier: jX/crLwtKNQ/vVmQGa8vRcYsU2uoIaAdHT59uQoBBGs=
Subject key identifier: 1E:50:BD:26:B9:EB:6A:1B:B7:01:E2:9E:3B:00:80:07:69:5C:9D:81
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584E90BA562AF29F71C7B0157880
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 55081
IP address blocks: 23.229.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:56:2a:f2:9f:71:c7:b0:15:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=22f15ea3-f77c-47cb-b662-4dd10e819168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:a4:1b:34:cb:54:cf:3d:9b:d2:f9:12:fb:
52:47:7a:70:99:25:a4:c5:47:ec:78:36:54:1a:6e:
17:dd:c8:b4:1b:8b:f5:74:1f:5f:1c:2d:f5:a5:21:
69:c0:27:97:17:56:3b:b2:16:08:e9:31:3c:48:a4:
b5:c4:8c:dd:bf:a5:c1:fe:d5:31:b4:57:f0:53:eb:
10:1c:c6:cd:97:a2:b6:3a:32:0b:c1:6b:20:da:2a:
1e:4e:49:9b:5b:1c:5b:59:b7:56:4b:d2:b1:ad:2c:
c6:5c:22:14:77:18:0c:71:28:e8:a9:28:52:c5:67:
f5:a2:c2:a4:0f:74:39:4c:b7:95:f5:ba:56:9b:02:
80:53:b0:3a:43:78:20:c9:ff:0c:13:e3:08:c0:52:
72:22:f9:35:00:11:0a:e4:2e:c9:09:e4:a3:f1:5c:
b2:e0:7e:5e:df:04:91:a1:6d:97:6e:20:e5:22:a4:
a9:28:01:5c:8f:d6:b3:a1:58:5c:8a:9b:bd:b0:8d:
94:01:6d:fa:75:81:de:45:63:42:42:bf:44:ff:7f:
8c:71:3e:40:c1:88:24:1b:0a:39:52:18:fb:8e:42:
15:cb:54:f0:98:a8:3c:1d:81:99:ec:2f:c2:ad:3c:
8e:e1:21:fc:bb:f6:32:52:7d:03:a2:a9:9e:a1:b5:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:50:BD:26:B9:EB:6A:1B:B7:01:E2:9E:3B:00:80:07:69:5C:9D:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5b89f385-412c-3ed9-a4bb-edcc50d12a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.229.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f1:e9:ea:88:ae:cd:19:d8:e2:cc:f4:e5:08:f2:32:3c:3f:
1c:37:df:b0:78:05:93:78:31:1b:99:ab:9a:d9:f9:7f:b7:e5:
92:db:34:10:cf:7e:31:91:d6:16:1e:a0:92:3f:21:b7:fa:cc:
39:15:ea:63:ad:86:63:32:8b:ec:a9:c0:9c:04:50:67:3a:65:
99:5a:57:d0:0b:7e:3f:c6:5e:7e:d8:76:4e:09:3d:2d:eb:9e:
8b:84:2b:e0:8d:df:05:4c:0f:fe:52:d9:0d:11:62:52:c1:79:
7b:59:4d:c8:ef:7f:30:b9:13:d7:24:61:28:a4:df:ef:55:24:
11:4b:3a:c1:eb:ba:62:91:66:97:95:fc:7a:27:e3:53:32:75:
f5:b9:47:34:32:95:38:9f:e7:51:59:d6:53:a5:2a:30:a2:28:
54:40:84:a3:9a:76:5f:56:c0:4b:02:bc:d9:83:95:69:77:86:
ad:81:46:f3:b7:69:51:35:19:c5:6a:7b:58:e0:d3:73:2b:3b:
21:2c:67:1c:62:64:51:c2:20:c7:4d:95:d3:06:30:bc:55:6f:
e9:d3:a0:4e:7d:f8:61:61:6f:64:28:d8:2a:d6:b4:b3:10:2d:
6d:f0:e4:38:5f:0b:2c:2f:dd:e5:16:0f:19:40:a2:3b:a2:4a:
48:04:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:19 2026 by rpki-client