
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa
File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json)
Hash identifier: PGdyBIelIChdrmzYUb0XfcrKfDdn6bT0h42qOmWMh44=
Subject key identifier: 4E:40:2E:49:D9:26:3E:90:E4:14:42:D1:56:96:2F:BD:C4:61:A6:36
Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial: 010D0C9F4328584DC830439923C1592C187BD000
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa
Signing time: Sun 10 May 2026 01:00:24 +0000
ROA not before: Sun 10 May 2026 01:00:24 +0000
ROA not after: Sat 08 Aug 2026 01:00:24 +0000
asID: 46154
IP address blocks: 157.52.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c8:30:43:99:23:c1:59:2c:18:7b:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Validity
Not Before: May 10 01:00:24 2026 GMT
Not After : Aug 8 01:00:24 2026 GMT
Subject: CN=5b9d4a5b-1e4d-445e-9b66-9525a8ad583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:d7:b1:cb:e6:68:26:d0:00:53:25:72:19:
17:77:47:57:49:b3:3e:7f:f0:6a:24:3c:a1:0b:cf:
7c:17:ab:61:82:e5:fe:95:ec:3a:6e:e1:94:4b:0f:
2b:83:ae:d2:6d:5e:d5:68:a5:6e:8a:ee:93:61:18:
c0:5e:1e:c2:b4:6a:9b:e5:6b:b5:5e:62:fc:5c:dd:
b7:9a:bd:56:3e:eb:6b:5e:f4:5f:9c:73:db:b6:a2:
a7:81:35:54:59:e7:94:57:ed:61:e4:e1:ee:99:69:
35:95:f0:18:7a:43:7d:7b:85:7b:45:d2:d5:85:1a:
a7:92:84:67:d2:6e:f6:bb:68:65:19:3c:58:65:b9:
ad:0b:61:f3:78:9c:43:ca:41:ee:dc:93:11:8e:a3:
c5:66:b3:c7:93:c9:2b:25:51:8a:a6:d3:5e:2e:b4:
af:48:d4:7c:1f:e5:57:c1:4f:8d:e7:af:f5:0e:b0:
b4:a2:e0:2e:6c:b6:cf:c3:87:21:38:92:45:99:d9:
dc:6f:d3:b8:17:98:c7:03:59:d4:6b:4c:12:44:c5:
6f:14:4a:2d:a6:c7:03:a3:c8:0b:30:49:59:cd:5e:
01:bc:41:0e:a5:e0:03:02:da:58:30:bc:3c:e6:ef:
8e:fe:95:82:b7:12:87:25:e4:d9:8e:4e:c6:73:5c:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:40:2E:49:D9:26:3E:90:E4:14:42:D1:56:96:2F:BD:C4:61:A6:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
X509v3 Authority Key Identifier:
keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
sbgp-ipAddrBlock: critical
IPv4:
157.52.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:3b:79:74:fe:89:a0:ce:fe:b4:6f:fd:98:d2:24:39:98:7e:
3a:6b:c8:ec:b2:52:d3:03:c6:64:fd:67:57:4c:42:15:5c:b3:
9f:bc:1f:e8:3d:f8:9d:ff:6c:4b:cd:62:af:f3:ca:09:34:a5:
99:a8:79:8f:85:af:e9:44:9c:fa:23:cd:51:1a:44:22:53:3f:
f4:21:86:4b:9a:5f:e1:fb:e0:8d:7b:22:ee:78:96:67:f8:95:
78:8d:44:be:83:1f:56:de:a5:a9:ed:56:a8:9c:8a:bc:51:19:
3a:86:0a:3b:89:0c:17:27:23:86:f9:99:f0:f8:d8:62:2f:36:
38:80:4a:99:67:99:43:00:f1:fd:e2:9d:92:da:5c:87:95:71:
8e:0b:bd:13:56:ad:1b:2b:7f:74:86:93:bc:8b:2e:92:17:4f:
8d:ca:96:56:a9:7d:86:eb:f0:94:66:76:31:ce:39:42:a4:d0:
cb:c7:c3:4c:be:5a:ec:48:62:4f:d9:ce:c6:54:a5:d4:01:74:
20:ab:77:d3:6b:de:a3:e7:c9:c2:05:1c:4d:fe:fa:bb:bd:42:
f2:ba:29:d4:96:61:f5:73:33:ec:00:05:df:f3:80:6c:11:44:
c5:5b:cc:94:2b:ce:05:9f:0a:a8:54:e1:68:8c:c0:86:d0:46:
10:df:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:48 2026 by rpki-client