
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa
File: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (raw, json)
Hash identifier: 54gxeSCjG7hF4oSOxoxYwlkSjdEENjkQC5ilvlfQNbg=
Subject key identifier: 3E:8C:A0:9E:CA:3B:D9:5D:5B:43:81:61:D6:62:08:36:DB:06:0E:BB
Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial: 010D0C9F4328584DCC60666584F7F1447F1156C8
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa
Signing time: Mon 11 May 2026 13:00:31 +0000
ROA not before: Mon 11 May 2026 13:00:31 +0000
ROA not after: Sun 09 Aug 2026 13:00:31 +0000
asID: 35860
IP address blocks: 63.133.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cc:60:66:65:84:f7:f1:44:7f:11:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Validity
Not Before: May 11 13:00:31 2026 GMT
Not After : Aug 9 13:00:31 2026 GMT
Subject: CN=bb5813b3-e796-496b-9cd9-cb80ccad986d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:f1:27:b8:6e:09:3e:65:9b:92:8a:1c:8f:
8b:3f:76:75:b9:ce:bc:c0:43:6f:b7:e7:8b:33:91:
21:51:c3:ed:1f:84:09:b4:3e:76:86:0e:86:b8:0d:
de:48:51:ea:72:c8:03:4d:af:31:5d:bb:07:81:aa:
86:43:09:8a:50:2c:25:be:e6:ec:ba:c2:e9:44:c1:
38:45:d3:ec:7f:a7:11:05:35:96:cd:5e:00:ac:e3:
49:e7:84:71:79:ad:26:5d:4d:68:60:2f:b9:a9:40:
a4:34:9a:5e:c0:fc:24:ab:89:bc:fc:f9:fb:cf:13:
80:8c:de:0f:a8:1e:14:4f:30:ad:a6:4a:e1:16:9b:
50:bb:15:55:72:2a:0c:48:21:c1:6a:8d:94:d1:72:
23:89:b4:64:36:0e:75:bf:55:ad:06:32:a9:df:55:
dc:59:a1:b2:df:15:8e:cc:2f:de:41:21:bc:a9:02:
32:3a:a3:95:4b:57:63:67:ea:fa:87:d3:82:ab:eb:
f5:ad:ae:e1:03:13:3c:59:e6:83:6b:27:fe:e9:bb:
72:3e:6b:79:72:59:3c:d0:5b:9f:66:37:25:b3:e7:
00:d5:31:48:b3:0f:df:25:a9:8b:15:4c:13:7c:70:
ff:fb:4e:c7:10:0a:74:32:ad:8e:f1:95:f2:2e:26:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8C:A0:9E:CA:3B:D9:5D:5B:43:81:61:D6:62:08:36:DB:06:0E:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
X509v3 Authority Key Identifier:
keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
sbgp-ipAddrBlock: critical
IPv4:
63.133.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2e:f2:5f:a7:4a:01:fd:51:2d:3e:34:d2:8c:f9:c4:74:11:
52:34:72:9f:46:c3:48:f9:6d:7e:53:3a:4c:f6:21:88:ff:41:
9f:f9:1a:f7:63:ee:7b:87:df:51:8e:78:82:23:b5:3a:22:f6:
dd:dc:11:53:7d:3e:06:56:d6:7d:b8:6c:0e:5d:e0:88:91:57:
01:55:04:58:bb:61:b2:c1:38:cc:a0:02:d6:2a:b2:33:52:0a:
8f:8f:bd:f4:38:f3:48:b1:85:9b:19:fe:7f:12:73:74:ed:fd:
e6:2c:69:26:05:5b:0d:09:af:aa:04:9f:ae:8b:80:4e:f6:60:
5d:ab:9d:f2:5f:c1:c3:99:05:de:27:04:0b:b5:b5:99:fb:5a:
7d:a6:c5:ff:44:20:ce:88:01:d4:54:e9:fc:5a:7d:57:21:d1:
eb:59:03:e3:17:08:18:e5:05:f7:c1:6b:9f:d9:9f:ca:9c:5d:
90:bc:ea:42:df:26:17:84:31:a7:48:8b:0e:09:75:43:ee:4f:
7f:57:01:be:dc:b6:9d:89:fd:73:9c:a3:71:05:a1:e8:f4:a5:
0e:af:3f:64:41:90:0a:3c:19:f4:e1:ed:7e:e5:72:aa:fe:20:
00:88:86:95:12:1d:3c:36:15:a3:2d:d4:f4:99:e9:b5:b9:82:
44:90:89:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYGZlhPfxRH8RVsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2
ZDA5MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
YmI1ODEzYjMtZTc5Ni00OTZiLTljZDktY2I4MGNjYWQ5ODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvifxJ7huCT5lm5KKHI+LP3Z1uc68wENvt+eL
M5EhUcPtH4QJtD52hg6GuA3eSFHqcsgDTa8xXbsHgaqGQwmKUCwlvubsusLpRME4
RdPsf6cRBTWWzV4ArONJ54Rxea0mXU1oYC+5qUCkNJpewPwkq4m8/Pn7zxOAjN4P
qB4UTzCtpkrhFptQuxVVcioMSCHBao2U0XIjibRkNg51v1WtBjKp31XcWaGy3xWO
zC/eQSG8qQIyOqOVS1djZ+r6h9OCq+v1ra7hAxM8WeaDayf+6btyPmt5clk80Fuf
Zjcls+cA1TFIsw/fJamLFUwTfHD/+07HEAp0Mq2O8ZXyLiYkHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6MoJ7KO9ldW0OBYdZiCDbbBg67MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy
MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvZmY2NWFmNDEtZWNkMy0z
ODk1LWJjY2QtNmYxYjU1NDQ4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky
ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj
NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl
MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgu8l+nSgH9US0+NNKM+cR0EVI0cp9Gw0j5bX5TOkz2IYj/QZ/5Gvdj
7nuH31GOeIIjtToi9t3cEVN9PgZW1n24bA5d4IiRVwFVBFi7YbLBOMygAtYqsjNS
Co+PvfQ480ixhZsZ/n8Sc3Tt/eYsaSYFWw0Jr6oEn66LgE72YF2rnfJfwcOZBd4n
BAu1tZn7Wn2mxf9EIM6IAdRU6fxafVch0etZA+MXCBjlBffBa5/Zn8qcXZC86kLf
JheEMadIiw4JdUPuT39XAb7ctp2J/XOco3EFoej0pQ6vP2RBkAo8GfTh7X7lcqr+
IACIhpUSHTw2FaMt1PSZ6bW5gkSQiXM=
-----END CERTIFICATE-----
Generated at Wed May 13 14:42:56 2026 by rpki-client