
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa
File: c52c86c7-479a-363b-b54c-798e12125985.roa (raw, json)
Hash identifier: Ye5AXshgBvMqQX7TqACJE4N8JUyr7wqwFaYfE/x/g1k=
Subject key identifier: C1:BF:09:ED:63:1A:26:30:91:E3:CD:8E:54:17:96:43:0B:3D:51:C8
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F4328584E9EAFE9C2A520FC79E6658AC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 0
IP address blocks: 192.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:e9:c2:a5:20:fc:79:e6:65:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=01735cd2-6f08-42ed-931e-fadb5721beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:7f:08:58:0a:cc:f0:9e:d0:b6:32:b8:5c:
a8:28:b8:2f:bf:ee:db:82:31:e1:32:28:d0:61:d8:
8d:1c:5c:c8:ef:cb:75:37:b6:2b:f1:a7:ed:96:32:
c3:9c:0a:93:ca:b8:a1:36:8f:d3:93:6a:3a:60:cb:
2f:07:58:81:b4:3f:5f:64:ef:5f:24:0f:ea:67:18:
dd:73:ad:c6:ea:94:0f:59:ad:89:f9:d5:38:b3:95:
df:85:51:50:ac:5a:d4:7c:0b:53:67:36:8e:19:d2:
7e:a5:3d:2a:73:66:ed:77:e7:95:49:31:09:18:1b:
3a:19:67:9a:6f:91:2e:81:c4:a9:25:e8:2f:88:cd:
3e:cd:15:2f:01:a4:c7:47:de:87:20:f1:e2:f0:a6:
62:b3:55:b0:1a:d8:57:a2:42:7a:2f:36:09:00:94:
ff:0d:38:a3:a8:35:39:f8:5c:96:fd:9a:a8:2e:25:
b1:91:27:4e:b1:4c:05:ad:8f:d2:ad:2a:cb:25:6b:
3a:52:7d:ac:b9:78:fb:28:18:79:b3:3a:b3:cc:b8:
50:c5:6b:b5:cd:99:7f:ec:fa:f6:11:7b:b7:56:01:
01:e7:2f:45:e4:2b:ac:38:81:db:e1:eb:b6:8f:bd:
3d:7b:aa:0e:4a:77:aa:dc:7d:5c:20:ec:89:05:26:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:09:ED:63:1A:26:30:91:E3:CD:8E:54:17:96:43:0B:3D:51:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c9:ab:e7:b5:b5:9a:cc:31:69:26:fe:82:c2:00:fd:c6:9c:
be:42:c3:4d:62:d2:99:db:bc:f5:b7:50:ad:38:1c:5c:2f:d2:
8c:6e:b3:2e:ce:68:8d:0f:22:1f:52:ed:74:12:e7:77:5e:be:
e0:ee:c6:6d:57:81:72:0f:d6:45:01:b1:a1:85:21:c0:0b:aa:
0d:59:47:22:d9:b9:a5:88:e3:8f:eb:fa:84:06:90:9e:b5:37:
79:fd:2d:ae:b4:44:5a:c9:ea:8f:45:54:af:79:f9:8d:53:e7:
34:e1:dd:43:c1:94:1c:09:9b:bf:bf:5c:8a:0c:dc:83:1b:9f:
70:8d:4a:56:ca:bb:b7:23:80:dd:c1:b1:22:14:c7:c8:9e:b1:
0d:c1:5a:7b:5a:df:64:3f:89:d0:85:03:b3:f9:b1:a0:a2:cd:
63:d3:0d:82:30:5b:49:5f:b3:6c:62:d8:b7:55:c6:01:cf:23:
b9:8e:9a:e3:46:6a:97:ef:5a:3e:b6:cf:6c:ba:2d:f0:48:b2:
11:c6:d9:80:ad:ba:ac:5b:84:ff:35:cf:33:fc:c8:6a:f1:02:
69:36:a3:15:1f:05:8c:80:fa:9f:89:1a:59:09:23:b5:bb:9f:
2b:d2:63:3b:de:56:ea:58:30:8a:48:9f:1f:7d:fc:34:05:02:
f0:4e:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:40 2026 by rpki-client