
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/52a1fe5c-35f6-3c8b-9d8a-c1374f557d36.roa
File: 52a1fe5c-35f6-3c8b-9d8a-c1374f557d36.roa (raw, json)
Hash identifier: BsElWEJEvcft3hIcHe/iSwLvxbjfa1MsbenWJ6632Fk=
Subject key identifier: AC:38:61:22:87:61:5C:DE:4B:10:80:B3:22:B5:E8:17:31:72:95:74
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F4328584E90BA44EC0FC00AFF9CA2F3A0
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/52a1fe5c-35f6-3c8b-9d8a-c1374f557d36.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 19905
IP address blocks: 198.23.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:44:ec:0f:c0:0a:ff:9c:a2:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=5c9d091c-f661-4e47-8994-53e830a8b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:ab:fe:dd:84:df:65:bb:97:9b:02:2c:10:
42:e4:0e:bb:46:54:9c:69:71:cc:e7:d0:44:81:f6:
0a:7d:82:b2:75:2e:71:df:1a:87:99:85:75:72:7c:
47:8d:2e:85:6b:1c:fb:e8:a6:55:41:9b:ad:c9:d7:
3f:8c:05:d5:c7:50:0d:6f:bd:90:6b:d4:2f:c9:9e:
84:cc:c1:9e:db:3b:cf:9d:fb:f8:7a:ff:5f:47:79:
5f:61:ec:da:19:f0:ed:4f:a5:4b:85:ed:1d:a9:8d:
7b:a0:46:24:8c:57:ba:8e:6f:f0:c8:f9:8a:b9:5d:
f4:99:69:77:05:f3:5f:97:ab:c3:8a:f3:6b:d6:88:
d6:5d:52:b5:8b:a4:e6:71:11:d7:ce:67:7f:8e:c4:
b6:84:44:37:5d:be:a5:f1:66:88:98:fb:b8:b1:89:
c3:cf:99:7d:f2:72:8f:6d:6f:6f:f0:4e:d7:4a:0e:
09:71:76:05:31:a7:6a:6e:9e:3d:5d:be:03:21:7b:
d6:04:b5:5c:11:a6:95:49:0f:b2:a9:c7:7c:c2:d1:
6b:97:5a:5b:79:1b:df:c1:b7:ec:f9:25:6c:3c:51:
a3:d3:a9:12:61:69:0e:fc:4e:2d:b7:57:5e:64:32:
73:b4:6e:16:66:68:25:01:68:13:68:52:65:67:b0:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:61:22:87:61:5C:DE:4B:10:80:B3:22:B5:E8:17:31:72:95:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/52a1fe5c-35f6-3c8b-9d8a-c1374f557d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.23.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2d:7c:cd:14:01:bc:8f:df:35:ec:8e:22:78:fc:d9:f9:55:
67:37:d5:0c:be:1c:f3:db:11:3c:bd:9b:73:5d:e9:a1:d4:d1:
67:c7:5b:f2:bd:2b:bb:44:69:0f:89:bc:d4:b0:44:6d:32:ba:
44:af:4c:8b:b0:21:dd:30:d6:63:2b:b2:db:03:d3:05:d9:72:
12:18:54:8d:97:40:12:28:bd:2c:de:fb:dc:ec:23:a9:a8:a7:
cb:65:e7:0f:ed:55:6b:b9:13:5c:79:7c:7c:d1:95:91:14:11:
e9:c3:67:9f:a4:d6:95:17:b3:d7:26:f0:48:1f:62:a1:21:13:
02:cc:27:2f:a2:60:a4:e6:c0:93:44:6e:bd:e4:81:f4:39:c2:
88:dd:00:32:7e:a3:86:c9:e0:aa:73:ec:a8:94:b5:be:93:48:
8e:5e:75:33:12:6c:d0:3e:e1:a7:91:2d:db:2a:e3:6a:a0:d1:
87:64:59:07:91:47:d7:1c:33:8d:ec:fc:1d:4f:7b:e2:12:2d:
14:84:26:ca:4e:1e:0e:85:f3:5c:ca:4b:09:ec:7a:25:8f:f5:
33:bd:92:4f:f5:1f:29:62:af:58:a2:7a:69:7b:be:fb:03:d9:
13:22:eb:cc:41:5d:0d:7c:f0:9e:18:a9:fb:9f:78:77:a9:a8:
27:d1:86:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QukTsD8AK/5yi86AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
NWM5ZDA5MWMtZjY2MS00ZTQ3LTg5OTQtNTNlODMwYThiMTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvCr/t2E32W7l5sCLBBC5A67RlScaXHM59BE
gfYKfYKydS5x3xqHmYV1cnxHjS6Faxz76KZVQZutydc/jAXVx1ANb72Qa9QvyZ6E
zMGe2zvPnfv4ev9fR3lfYezaGfDtT6VLhe0dqY17oEYkjFe6jm/wyPmKuV30mWl3
BfNfl6vDivNr1ojWXVK1i6TmcRHXzmd/jsS2hEQ3Xb6l8WaImPu4sYnDz5l98nKP
bW9v8E7XSg4JcXYFMadqbp49Xb4DIXvWBLVcEaaVSQ+yqcd8wtFrl1pbeRvfwbfs
+SVsPFGj06kSYWkO/E4tt1deZDJztG4WZmglAWgTaFJlZ7AgjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw4YSKHYVzeSxCAsyK16BcxcpV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvNTJhMWZlNWMtMzVmNi0z
YzhiLTlkOGEtYzEzNzRmNTU3ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYtfM0UAbyP3zXsjiJ4/Nn5VWc31Qy+HPPbETy9m3Nd6aHU0WfHW/K9
K7tEaQ+JvNSwRG0yukSvTIuwId0w1mMrstsD0wXZchIYVI2XQBIovSze+9zsI6mo
p8tl5w/tVWu5E1x5fHzRlZEUEenDZ5+k1pUXs9cm8EgfYqEhEwLMJy+iYKTmwJNE
br3kgfQ5wojdADJ+o4bJ4Kpz7KiUtb6TSI5edTMSbNA+4aeRLdsq42qg0YdkWQeR
R9ccM43s/B1Pe+ISLRSEJspOHg6F81zKSwnseiWP9TO9kk/1Hylir1iieml7vvsD
2RMi68xBXQ188J4YqfufeHepqCfRhgQ=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:23 2026 by rpki-client