
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
File: 79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (raw, json)
Hash identifier: 9wwb+2ooLXWi++rzEmB3nmdLpE7XFCXWXn75/zfBXOw=
Subject key identifier: 37:5A:C1:6A:0C:AA:08:F2:99:76:AD:B7:91:A5:CC:8D:6E:7B:C2:6F
Certificate issuer: /CN=52356d5e-3580-4025-a264-1c6d347bc052
Certificate serial: 010D0C9F4328584D9FB58BCB6ED4AD6FE4544200
Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 18214
IP address blocks: 198.59.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:8b:cb:6e:d4:ad:6f:e4:54:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=42cdecbd-45bc-4c76-983b-8e5b23629fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:70:f0:50:34:12:07:d0:57:64:07:d8:18:
58:8b:c3:a4:92:4d:a2:f0:73:d8:5c:e0:bb:b0:43:
00:86:3e:a5:2c:b8:f5:ca:f5:3d:53:28:9e:de:a4:
bc:25:1b:73:f1:79:c0:12:5e:8a:34:a2:e5:ab:69:
f4:d7:c2:b9:24:c7:6e:0d:b1:d3:78:d0:f2:af:07:
88:4a:1e:a5:46:b8:a9:a4:bf:50:31:12:7a:f1:2f:
2f:37:9e:37:9e:35:35:62:1c:25:a7:f7:cf:2b:cc:
07:fc:f6:73:c2:2a:35:2d:44:a4:7c:cf:49:8a:05:
da:e9:1f:f8:ca:eb:c0:3b:0a:66:57:6e:d7:0b:84:
7c:76:0b:ce:3d:c4:86:46:55:0c:be:59:16:9f:37:
bf:b2:25:2c:42:dc:3d:05:45:17:1a:9b:29:27:a3:
cd:0e:bb:ab:d1:ee:0b:03:bb:79:b9:e0:16:51:6d:
1e:0f:33:0e:76:94:6d:0c:c6:29:b6:17:7f:cc:e4:
e7:c0:56:ec:13:6f:34:3a:6e:10:47:18:5a:a2:09:
b8:de:fc:6e:56:38:fb:a8:8c:f1:16:20:ce:1d:6d:
9c:b0:cb:62:ec:77:1a:40:6f:59:fe:c9:8f:90:47:
94:8a:56:d1:9a:5b:2e:e2:74:13:1c:27:d7:aa:60:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5A:C1:6A:0C:AA:08:F2:99:76:AD:B7:91:A5:CC:8D:6E:7B:C2:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl
X509v3 Authority Key Identifier:
keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:32:9b:5a:17:50:f2:70:75:5d:0f:47:9f:1f:7a:87:7d:d5:
e2:e0:76:38:5b:c4:b0:a9:b1:35:f7:10:90:4d:5a:5f:45:79:
38:db:86:76:8b:4a:79:ae:d2:ca:4f:4d:d9:45:4e:a4:ce:a4:
e0:d1:39:d1:31:54:43:16:29:80:bb:55:1a:c2:46:78:11:cd:
ab:13:3b:a4:fe:b6:41:99:72:6e:bb:af:22:4c:0c:31:84:40:
d7:d7:8a:c2:95:21:89:35:81:81:bd:89:91:79:90:b1:39:0d:
5f:ac:95:ed:e7:9e:e9:0a:1b:78:87:2e:9b:49:40:7d:a1:e5:
ca:4a:ed:75:dc:45:a5:c2:2f:c8:76:b4:a1:d3:ed:c8:7e:ed:
0d:d5:14:71:2d:07:3d:44:8b:21:09:b6:56:45:e4:42:5f:bc:
eb:2c:d5:c5:cf:67:9b:c6:23:e0:6f:ad:fa:05:c5:73:cb:c6:
2e:70:44:d5:23:e6:5f:72:f2:24:c7:42:02:dd:4a:45:3e:84:
25:36:3c:ba:bd:40:31:bb:29:71:86:53:c1:f8:d9:6f:f7:ab:
34:6b:f0:0a:48:62:0a:ef:99:af:a1:87:6a:9c:f4:a1:7b:62:
d9:62:97:70:42:1a:93:c2:b4:21:bb:3d:f3:90:e0:0b:88:91:
1a:c6:7a:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYvLbtStb+RUQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIzNTZkNWUtMzU4MC00MDI1LWEyNjQtMWM2ZDM0N2Jj
MDUyMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
NDJjZGVjYmQtNDViYy00Yzc2LTk4M2ItOGU1YjIzNjI5ZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8pw8FA0EgfQV2QH2BhYi8Okkk2i8HPYXOC7
sEMAhj6lLLj1yvU9Uyie3qS8JRtz8XnAEl6KNKLlq2n018K5JMduDbHTeNDyrweI
Sh6lRrippL9QMRJ68S8vN543njU1Yhwlp/fPK8wH/PZzwio1LUSkfM9JigXa6R/4
yuvAOwpmV27XC4R8dgvOPcSGRlUMvlkWnze/siUsQtw9BUUXGpspJ6PNDrur0e4L
A7t5ueAWUW0eDzMOdpRtDMYpthd/zOTnwFbsE280Om4QRxhaogm43vxuVjj7qIzx
FiDOHW2csMti7HcaQG9Z/smPkEeUilbRmlsu4nQTHCfXqmBVWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdawWoMqgjymXatt5GlzI1ue8JvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjM1
NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZkMzQ3YmMwNTIvNzljODQ3ZWYtOTBhNS0z
ZTFmLTk3YzgtOWY3ZjcyYThkMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTIzNTZkNWUtMzU4MC00MDI1LWEy
NjQtMWM2ZDM0N2JjMDUyLzUyMzU2ZDVlLTM1ODAtNDAyNS1hMjY0LTFjNmQzNDdi
YzA1Mi5jcmwwHwYDVR0jBBgwFoAUjkbM0qkiy8s3aFegFRY32/4vc1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjM1NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZk
MzQ3YmMwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjucMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcym1oXUPJwdV0PR58feod91eLgdjhbxLCpsTX3EJBNWl9FeTjbhnaL
Snmu0spPTdlFTqTOpODROdExVEMWKYC7VRrCRngRzasTO6T+tkGZcm67ryJMDDGE
QNfXisKVIYk1gYG9iZF5kLE5DV+sle3nnukKG3iHLptJQH2h5cpK7XXcRaXCL8h2
tKHT7ch+7Q3VFHEtBz1EiyEJtlZF5EJfvOss1cXPZ5vGI+BvrfoFxXPLxi5wRNUj
5l9y8iTHQgLdSkU+hCU2PLq9QDG7KXGGU8H42W/3qzRr8ApIYgrvma+hh2qc9KF7
Ytlil3BCGpPCtCG7PfOQ4AuIkRrGegk=
-----END CERTIFICATE-----
Generated at Wed May 13 09:26:01 2026 by rpki-client