
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa
File: 6656e98a-d5b4-3c02-9874-8722e972952f.roa (raw, json)
Hash identifier: 6yFKp1lR+AXMyaNQMMjc/nB5CBgdD+P17xl0Ls+JTno=
Subject key identifier: 02:90:96:82:E9:90:AF:5F:4B:F4:57:90:C9:45:81:0F:62:E2:BD:B5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584D146D87FFA93B550162B9BA10
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa
Signing time: Fri 06 Mar 2026 15:38:26 +0000
ROA not before: Fri 06 Mar 2026 15:38:26 +0000
ROA not after: Thu 04 Jun 2026 14:38:26 +0000
asID: 81
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:6d:87:ff:a9:3b:55:01:62:b9:ba:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 6 15:38:26 2026 GMT
Not After : Jun 4 14:38:26 2026 GMT
Subject: CN=8a6f8930-46d1-4320-a55a-8342587c49d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:0d:67:f6:37:a6:06:be:b8:35:6f:9d:60:
cb:63:46:22:16:4f:08:92:d2:cb:0f:4f:37:aa:f0:
f2:f2:7f:f5:73:60:ce:86:1f:c9:8d:9d:0e:56:07:
75:17:4a:ac:85:41:28:55:e5:20:68:90:f5:74:1a:
f6:6e:f1:56:84:8d:d1:e5:4c:38:ae:4d:79:c9:92:
71:3a:9b:ee:70:36:6e:47:f4:cb:9e:a6:b8:19:43:
e6:fd:95:62:5b:3b:ac:b6:77:24:d1:1b:7f:e9:03:
d7:3c:2b:a2:f3:cb:7d:ea:ac:b0:84:8e:31:21:20:
6f:70:5b:a3:21:10:2f:f6:ad:c3:54:e4:84:e3:be:
01:f8:c3:8e:a5:7e:7d:71:e8:9d:8c:24:5b:7f:3e:
a0:31:00:2c:55:b5:81:3c:fb:58:17:3a:56:5b:de:
ea:21:9f:9e:2c:a0:76:48:0b:4f:68:09:62:99:3c:
ec:f3:c2:74:24:e5:2c:53:d4:51:60:f1:1e:20:03:
97:64:d0:a8:53:c5:fd:91:62:63:79:5f:eb:b1:9a:
3e:f7:b5:93:ce:c2:c1:11:91:e1:38:82:46:13:ed:
e7:e1:a0:91:56:96:a5:00:84:e1:44:44:8e:28:c8:
0b:7c:53:42:1e:f5:07:b1:f8:55:3d:5c:e9:24:8b:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:96:82:E9:90:AF:5F:4B:F4:57:90:C9:45:81:0F:62:E2:BD:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e5:88:82:77:80:d1:35:c9:f2:90:a4:db:f5:47:fc:ff:14:
8d:4c:85:6e:85:36:ac:4e:7f:97:0f:7a:3e:3f:09:73:5c:b8:
03:5c:8c:00:cc:5e:bb:ef:d8:c9:58:d8:d9:4d:d1:3f:49:af:
27:e7:4b:a6:9e:11:c6:80:e8:2e:b6:06:96:b6:5a:30:d2:9b:
7c:a1:96:60:b0:e5:a9:ad:13:ae:26:c7:93:bc:c2:cc:ea:a5:
84:2f:2f:18:65:37:c0:d5:fa:84:63:2f:1b:e3:89:1b:c2:cf:
a7:17:53:0a:0b:fd:cf:28:50:98:6a:39:8f:53:85:d4:59:d1:
f6:9a:08:07:ad:9e:2f:55:68:7a:fd:ad:00:d3:1f:b6:d0:87:
8a:64:51:3a:24:18:c3:27:7f:7e:1b:66:52:01:b6:7e:73:81:
61:80:6c:1e:cd:57:d4:59:0c:c6:b1:6b:99:8f:b2:18:c8:c3:
f3:87:f2:e1:67:3d:1d:6d:9a:28:ee:76:c0:be:65:70:d9:60:
53:1e:f2:90:82:d8:c6:56:30:fd:8f:c2:bd:81:2b:a0:00:11:
49:86:d2:7a:f8:db:0c:c6:19:08:12:e7:15:a5:e6:f5:e6:14:
47:da:37:d5:46:4d:2f:a4:59:0d:6c:98:6d:cb:70:75:db:e6:
40:23:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:52 2026 by rpki-client