
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
File: 33acdaeb-a95e-3df1-be44-e1190abf4019.roa (raw, json)
Hash identifier: 6sMoO2yCo0RCmP8gdQPnKdioSL7crh212jwcNck/V3U=
Subject key identifier: 86:96:9D:31:67:8D:39:2A:5B:7D:48:0A:27:55:76:B7:FD:41:7B:CA
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584DCAFB004BFEAA8BAE65E2CF80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
Signing time: Mon 11 May 2026 01:00:24 +0000
ROA not before: Mon 11 May 2026 01:00:24 +0000
ROA not after: Sun 09 Aug 2026 01:00:24 +0000
asID: 16509
IP address blocks: 164.152.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:fb:00:4b:fe:aa:8b:ae:65:e2:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: May 11 01:00:24 2026 GMT
Not After : Aug 9 01:00:24 2026 GMT
Subject: CN=fdda5976-6754-4f7c-b6ce-8ea31729a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:f0:5b:46:b1:3c:63:5f:9e:d6:b4:ba:cb:
32:a7:9c:73:a5:cd:5e:2a:b0:30:d9:bf:14:40:43:
f3:c2:87:16:d0:f2:3a:65:90:15:72:cd:f0:68:72:
6c:27:ca:55:9d:c9:0e:56:01:59:5e:67:1d:a5:95:
dc:67:ec:bc:89:51:14:87:a2:04:0f:44:95:78:e8:
4d:87:ed:01:62:90:f4:db:7a:db:f5:28:dd:82:b1:
8e:9e:5c:61:a7:20:a6:dc:b3:b0:5e:6b:c9:7b:10:
17:84:15:cf:aa:48:d3:b1:34:a0:d7:1e:18:9c:69:
eb:22:c1:19:8a:be:4f:a0:61:0f:ee:a0:68:c4:c1:
d4:08:1d:5e:c3:9d:4d:c7:af:20:02:70:89:14:2e:
d3:ad:e8:d8:9f:9c:ec:8e:c5:1b:2b:9c:da:a9:eb:
dd:4a:a9:a2:3a:5f:8b:6a:4d:7e:60:7e:f9:f6:99:
53:4b:fd:91:c5:59:64:71:cd:b8:c7:7e:b9:8e:87:
31:cb:cd:68:87:f8:17:be:d1:9e:2c:5d:a3:8c:27:
b5:a9:f4:b7:c1:cb:ab:82:3a:23:eb:b1:3a:20:d9:
73:0b:f0:d5:11:cd:e5:ea:34:41:19:e5:c1:fc:c7:
15:ea:54:5c:12:8b:72:c1:70:f8:48:ed:0f:e7:a0:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:9D:31:67:8D:39:2A:5B:7D:48:0A:27:55:76:B7:FD:41:7B:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
164.152.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a7:8d:5a:57:cc:03:f5:a5:22:c5:c9:d2:32:c3:21:cb:05:
ff:b5:b9:35:8f:77:23:23:77:03:84:16:51:67:26:7e:0d:de:
c0:4f:c7:50:58:6d:0f:62:dc:9a:3a:57:8b:a8:dd:89:3f:6e:
29:08:ec:a5:8a:34:62:09:97:27:6d:be:bf:80:a2:f7:8d:88:
1d:9e:f8:e1:47:0e:d1:02:a5:c5:4a:d7:5a:e5:b9:e9:a5:34:
b0:a1:58:17:ee:87:11:ec:b8:87:d4:8c:b5:de:74:86:02:f9:
99:03:da:f1:30:2d:1f:64:75:3b:d6:50:35:97:37:06:16:cc:
b4:c8:09:5e:dd:14:df:1b:cc:13:0a:c7:08:d6:d4:87:cd:6e:
e3:07:e7:49:f1:40:e1:91:9b:a9:f8:13:8e:08:eb:c0:ee:45:
4e:5d:1f:45:a6:2e:eb:a2:05:e8:14:ab:3a:60:d5:cf:30:79:
67:d9:9c:87:04:59:71:63:1a:a2:0a:28:70:47:5f:f3:4e:c2:
fc:a6:54:3e:84:96:c9:7c:36:80:a7:3f:8e:61:23:85:d9:ec:
e5:e8:6f:96:83:73:86:83:b6:ae:d4:68:98:9a:e8:28:84:ce:
e5:8c:1a:a2:52:96:49:86:9e:f6:3a:6b:59:5a:67:12:74:52:
c7:bc:69:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wBL/qqLrmXiz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZmRkYTU5NzYtNjc1NC00ZjdjLWI2Y2UtOGVhMzE3MjlhNTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXfwW0axPGNfnta0ussyp5xzpc1eKrAw2b8U
QEPzwocW0PI6ZZAVcs3waHJsJ8pVnckOVgFZXmcdpZXcZ+y8iVEUh6IED0SVeOhN
h+0BYpD023rb9SjdgrGOnlxhpyCm3LOwXmvJexAXhBXPqkjTsTSg1x4YnGnrIsEZ
ir5PoGEP7qBoxMHUCB1ew51Nx68gAnCJFC7TrejYn5zsjsUbK5zaqevdSqmiOl+L
ak1+YH759plTS/2RxVlkcc24x365jocxy81oh/gXvtGeLF2jjCe1qfS3wcurgjoj
67E6INlzC/DVEc3l6jRBGeXB/McV6lRcEotywXD4SO0P56Co9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaWnTFnjTkqW31ICidVdrf9QXvKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvMzNhY2RhZWItYTk1ZS0z
ZGYxLWJlNDQtZTExOTBhYmY0MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJhAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+njVpXzAP1pSLFydIywyHLBf+1uTWPdyMjdwOEFlFnJn4N3sBPx1BY
bQ9i3Jo6V4uo3Yk/bikI7KWKNGIJlydtvr+AoveNiB2e+OFHDtECpcVK11rlueml
NLChWBfuhxHsuIfUjLXedIYC+ZkD2vEwLR9kdTvWUDWXNwYWzLTICV7dFN8bzBMK
xwjW1IfNbuMH50nxQOGRm6n4E44I68DuRU5dH0WmLuuiBegUqzpg1c8weWfZnIcE
WXFjGqIKKHBHX/NOwvymVD6Elsl8NoCnP45hI4XZ7OXob5aDc4aDtq7UaJia6CiE
zuWMGqJSlkmGnvY6a1laZxJ0Use8aYA=
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:09 2026 by rpki-client