
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: ddAtqaipuTPj4C+E29OAhzp2ZgGOUcf9n5pcygaqJ3o=
Subject key identifier: 57:66:5B:36:D9:DF:61:EE:A5:1F:1A:57:50:2D:99:4A:5F:58:AC:85
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 5A9A19F6D227F5B9417A0C9945330D8F366C9C84
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS152868.roa
Signing time: Thu 29 Oct 2026 17:12:34 +0000
ROA not before: Thu 29 Oct 2026 17:07:34 +0000
ROA not after: Thu 28 Oct 2027 17:12:34 +0000
asID: 152868
IP address blocks: 199.235.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Nov 2026 07:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9a:19:f6:d2:27:f5:b9:41:7a:0c:99:45:33:0d:8f:36:6c:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Oct 29 17:07:34 2026 GMT
Not After : Oct 28 17:12:34 2027 GMT
Subject: CN=57665B36D9DF61EEA51F1A57502D994A5F58AC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:cf:7f:84:92:5b:de:a2:e0:7a:39:ba:5b:
05:8d:fd:fb:ca:82:3f:b9:9e:2c:78:26:a6:d1:52:
38:79:d4:9f:9f:97:d1:5e:28:c4:80:d5:c7:19:22:
04:23:0c:17:30:2d:22:a6:a2:41:61:00:18:d4:e0:
4e:bb:63:e9:f3:ec:5c:4f:50:fe:ba:55:f8:8e:2f:
bc:6b:bf:89:a7:1a:e4:8c:31:c0:99:85:e1:59:16:
61:14:28:28:30:f0:7e:f1:d9:57:32:ea:21:d6:de:
0c:23:43:61:92:b1:7d:8b:e7:84:51:ca:7a:51:45:
a4:ea:f1:48:86:16:bf:06:e0:31:73:f3:18:d2:7c:
72:d5:cf:1d:c5:0f:f4:1d:ea:63:83:98:81:a8:3c:
03:fe:a1:f9:f1:b2:8a:fe:f4:b7:0c:db:5d:42:dc:
90:af:16:17:a9:be:14:7b:17:9b:53:29:40:17:6a:
d0:4c:8a:b2:cb:21:51:45:dc:6d:75:99:3d:97:10:
43:4e:fb:2f:0d:37:91:d8:6f:8f:f6:87:f9:08:a1:
50:93:d8:4c:0e:78:29:c9:ac:d0:b4:a2:59:a9:89:
4e:21:77:f7:1d:6a:ff:bb:24:f4:a0:40:ef:eb:0a:
56:4a:0b:6d:55:e2:99:0e:8f:48:35:11:f9:37:00:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:5B:36:D9:DF:61:EE:A5:1F:1A:57:50:2D:99:4A:5F:58:AC:85
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:dc:0b:60:bd:b4:3a:27:a3:7c:4b:9c:4c:63:ee:06:39:11:
26:ed:28:d7:3c:66:40:54:b5:1c:ea:9c:a8:22:07:75:f5:d6:
d0:77:89:b5:c5:40:77:cc:ce:e4:20:59:e4:c2:1a:ed:4a:1d:
87:06:d1:e3:5f:c5:fe:13:0a:4a:b4:6d:94:f7:74:78:15:af:
5b:de:ae:f4:2f:2c:0e:5e:59:58:38:d1:8b:57:3a:ec:df:55:
cf:1a:c0:e4:4c:5c:b6:e1:d8:1d:6f:c0:57:24:31:6d:c7:a0:
11:24:6e:af:a8:dc:0f:51:4f:f9:50:1f:44:87:b2:5f:22:0b:
08:a9:ce:f3:f1:ae:7d:d5:99:cb:c5:de:1d:54:dd:71:6e:b0:
23:50:cd:be:08:6c:8a:1c:13:79:91:76:73:61:be:76:21:9a:
cd:82:2c:16:36:a1:53:36:fa:e2:d5:34:3c:49:5b:e2:30:14:
37:8d:49:cb:bc:cf:7f:59:d5:62:0f:12:9d:ae:7b:f0:b8:b0:
6f:d9:ba:45:fc:1d:88:49:d0:b0:11:ab:0e:ca:ab:6a:f4:30:
ca:5e:96:be:7c:97:63:dc:d2:d2:32:27:64:cf:f5:99:a0:4d:
95:6f:6f:2a:ea:63:f3:a2:ca:29:0f:91:4b:d3:f0:04:f1:8c:
ca:98:6d:26
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWpoZ9tIn9blBegyZRTMNjzZsnIQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYxMDI5MTcwNzM0WhcNMjcxMDI4MTcxMjM0
WjAzMTEwLwYDVQQDEyg1NzY2NUIzNkQ5REY2MUVFQTUxRjFBNTc1MDJEOTk0QTVG
NThBQzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxLPf4SSW96i
4Ho5ulsFjf37yoI/uZ4seCam0VI4edSfn5fRXijEgNXHGSIEIwwXMC0ipqJBYQAY
1OBOu2Pp8+xcT1D+ulX4ji+8a7+JpxrkjDHAmYXhWRZhFCgoMPB+8dlXMuoh1t4M
I0NhkrF9i+eEUcp6UUWk6vFIhha/BuAxc/MY0nxy1c8dxQ/0Hepjg5iBqDwD/qH5
8bKK/vS3DNtdQtyQrxYXqb4UexebUylAF2rQTIqyyyFRRdxtdZk9lxBDTvsvDTeR
2G+P9of5CKFQk9hMDngpyazQtKJZqYlOIXf3HWr/uyT0oEDv6wpWSgttVeKZDo9I
NRH5NwCy5wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFdmWzbZ32HupR8aV1AtmUpf
WKyFMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYmFiNWQ1OTI4MmJiNGIyZWJmZWQ5YTdhMzAy
MzE5NTUvMC9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfrkDANBgkqhkiG9w0BAQsFAAOC
AQEAa9wLYL20OiejfEucTGPuBjkRJu0o1zxmQFS1HOqcqCIHdfXW0HeJtcVAd8zO
5CBZ5MIa7UodhwbR41/F/hMKSrRtlPd0eBWvW96u9C8sDl5ZWDjRi1c67N9VzxrA
5ExctuHYHW/AVyQxbcegESRur6jcD1FP+VAfRIeyXyILCKnO8/GufdWZy8XeHVTd
cW6wI1DNvghsihwTeZF2c2G+diGazYIsFjahUzb64tU0PElb4jAUN41Jy7zPf1nV
Yg8Sna578Liwb9m6RfwdiEnQsBGrDsqravQwyl6WvnyXY9zS0jInZM/1maBNlW9v
Kupj86LKKQ+RS9PwBPGMyphtJg==
-----END CERTIFICATE-----
Generated at Sat Nov 7 18:03:10 2026 by rpki-client