
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
File: 5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json)
Hash identifier: gnZsiM1yvs5uNGVKyMFCBwINyqE/WMtU0l6HczJOyQI=
Subject key identifier: BE:3C:C9:9B:DE:DE:B7:50:6B:47:9D:08:0C:1C:11:48:DA:E2:5B:83
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F4328584DBA3AFE68B36C4CC93BE37400
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 209242
IP address blocks: 170.176.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:fe:68:b3:6c:4c:c9:3b:e3:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=0c7d146b-1ee9-465b-88ad-e0593ffdf2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:44:f4:c9:26:f8:c2:10:4c:8e:d0:8a:1e:
cb:fe:cc:2b:18:b1:51:6d:58:b3:74:39:9e:32:49:
89:43:f9:d2:0a:f1:c0:32:3f:82:8f:92:87:a9:61:
c5:59:f6:1f:b4:ca:e3:b7:29:e7:ba:02:c5:f9:c2:
77:cb:4e:8d:e9:b5:7c:0a:57:56:ae:9b:42:9b:2d:
75:fb:bd:f1:ee:3d:45:3e:7d:de:d5:4e:79:7a:b5:
39:90:34:e4:14:00:0c:93:e4:94:fd:e7:0b:4f:31:
44:6b:6d:63:f9:ee:0a:ce:11:28:91:9a:cc:f6:20:
7c:5c:c3:54:9d:88:d1:43:18:0d:0b:c8:fa:bd:d1:
c2:4a:57:f8:db:1f:cb:4f:92:ec:95:6b:ea:98:3e:
7d:ec:84:5d:04:87:63:93:85:54:7c:0f:bb:20:22:
40:08:0f:07:90:68:4f:50:f0:f1:16:f1:b7:f0:d6:
75:b6:ce:8f:4c:63:82:3c:59:8a:ce:ee:f1:99:67:
a3:ff:74:8c:85:1b:6f:71:ec:2f:f2:5b:56:3b:32:
5f:ec:f1:fd:1a:b3:2e:47:7d:44:b2:73:6c:ad:ba:
0d:0d:8b:91:23:ef:54:8d:a6:5f:3f:f4:7b:de:14:
d8:c0:a9:b2:b7:e6:eb:1a:4c:03:0d:5c:26:61:84:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:C9:9B:DE:DE:B7:50:6B:47:9D:08:0C:1C:11:48:DA:E2:5B:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ca:90:17:5b:1d:03:4a:02:0b:dd:df:cb:15:6a:2a:e0:4a:
4b:12:d6:53:fc:ba:d9:eb:b8:e6:a8:62:a1:51:af:86:1d:c2:
e9:52:a6:4b:3a:b3:50:fc:1c:32:75:f8:d4:b8:33:68:8e:5d:
24:21:f2:80:04:a3:2c:47:02:00:4e:22:34:62:3f:3c:a8:2f:
22:4d:3c:ff:78:c0:08:fd:f1:8a:a3:35:22:c6:a5:76:25:ec:
28:00:fe:dd:9a:1d:b5:bf:b1:04:8f:f8:e6:63:07:5b:15:12:
d6:b5:7e:ef:ed:6b:6e:44:c9:be:bb:9a:cb:0c:0b:6e:d7:80:
e0:29:d1:98:c7:6c:7f:85:ca:36:e2:95:6e:f7:dd:fa:c9:96:
ee:fa:1c:e2:00:6d:cc:34:b8:58:90:8e:13:1f:dd:4b:1f:43:
16:23:04:55:e5:f2:23:be:78:f1:ad:35:7f:b8:d9:c4:28:6c:
45:4b:49:33:60:39:3c:29:f6:48:54:8a:b0:26:65:17:1f:05:
d6:ce:bd:41:73:29:ff:03:27:6e:63:74:02:77:02:f6:c7:2f:
25:d6:64:74:93:84:1b:e6:9f:35:b4:a0:9b:40:57:c3:60:d2:
98:bc:be:46:09:90:32:45:61:aa:ff:ec:b7:1e:1a:63:89:6a:
44:d6:bc:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ov5os2xMyTvjdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
MGM3ZDE0NmItMWVlOS00NjViLTg4YWQtZTA1OTNmZmRmMmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ5E9Mkm+MIQTI7Qih7L/swrGLFRbVizdDme
MkmJQ/nSCvHAMj+Cj5KHqWHFWfYftMrjtynnugLF+cJ3y06N6bV8CldWrptCmy11
+73x7j1FPn3e1U55erU5kDTkFAAMk+SU/ecLTzFEa21j+e4KzhEokZrM9iB8XMNU
nYjRQxgNC8j6vdHCSlf42x/LT5LslWvqmD597IRdBIdjk4VUfA+7ICJACA8HkGhP
UPDxFvG38NZ1ts6PTGOCPFmKzu7xmWej/3SMhRtvcewv8ltWOzJf7PH9GrMuR31E
snNsrboNDYuRI+9UjaZfP/R73hTYwKmyt+brGkwDDVwmYYQWuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL48yZve3rdQa0edCAwcEUja4luDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNWVkYTQ2MzYtNjViYS0z
M2Q5LWFhMzctMmFlODk5MTI2OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTKkBdbHQNKAgvd38sVairgSksS1lP8utnruOaoYqFRr4YdwulSpks6
s1D8HDJ1+NS4M2iOXSQh8oAEoyxHAgBOIjRiPzyoLyJNPP94wAj98YqjNSLGpXYl
7CgA/t2aHbW/sQSP+OZjB1sVEta1fu/ta25Eyb67mssMC27XgOAp0ZjHbH+Fyjbi
lW733frJlu76HOIAbcw0uFiQjhMf3UsfQxYjBFXl8iO+ePGtNX+42cQobEVLSTNg
OTwp9khUirAmZRcfBdbOvUFzKf8DJ25jdAJ3AvbHLyXWZHSThBvmnzW0oJtAV8Ng
0pi8vkYJkDJFYar/7LceGmOJakTWvP0=
-----END CERTIFICATE-----
Generated at Wed May 13 05:18:43 2026 by rpki-client