
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa
File: 1e746d0f-5ec2-3256-addd-5807f9b93443.roa (raw, json)
Hash identifier: truwtzJ1sYA7zS4MtxSLnL9F4cjP5DS58n4rSOnhWDk=
Subject key identifier: 23:C4:74:E7:D1:56:36:CC:EA:A1:88:01:9C:49:9D:47:89:F5:33:9D
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584DF4DB9FF4FE09AA2078B8FD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 81
IP address blocks: 152.22.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:9f:f4:fe:09:aa:20:78:b8:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=526c335a-1d92-46cd-ae92-f65c9238ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:c6:1b:ff:83:8e:27:d2:fe:16:88:3e:a5:
5a:bf:5a:35:c7:00:e6:fc:8f:0a:7f:cd:3f:66:2f:
b7:4d:f3:93:9e:7a:ad:b7:24:66:7e:28:4d:05:bd:
a6:d1:46:e0:32:83:bb:29:94:b4:7b:bb:88:90:7a:
bc:d1:8d:f7:f7:ec:d6:8d:cd:a5:e4:cd:42:e1:98:
aa:d2:21:57:24:e2:66:a1:3a:a9:33:66:8a:e0:1c:
ed:70:ff:1d:46:52:a7:12:0c:94:62:f7:46:f3:25:
22:a4:ab:bb:44:87:ec:e8:d3:ba:2c:d9:2e:9d:d4:
77:ff:d1:86:2c:a9:ef:96:bf:cb:f6:00:dd:bc:42:
f8:a0:09:cd:56:5c:de:2d:3c:d2:da:dd:a8:57:08:
76:c0:2b:fd:d1:e2:f1:3d:38:41:b7:2f:97:54:8c:
32:42:d5:78:7f:96:1d:02:60:d4:c6:76:29:d5:b4:
fd:9f:31:9e:cf:e0:d7:f6:aa:e5:f5:91:21:64:ef:
28:9c:8d:a5:af:28:33:21:9c:c1:a8:ed:88:26:eb:
de:66:05:81:a2:29:44:52:4f:0a:85:d5:c9:84:87:
9c:2a:22:96:91:09:ca:df:14:0b:9b:20:46:bc:95:
ef:0c:cc:7e:4e:20:91:65:77:83:75:52:38:f2:9f:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:74:E7:D1:56:36:CC:EA:A1:88:01:9C:49:9D:47:89:F5:33:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:41:14:e2:e7:1f:43:a4:0c:49:00:2d:03:b6:17:79:a6:9b:
96:3d:8e:2f:3a:17:26:1d:b6:f0:d6:ff:8e:34:01:84:27:4a:
ce:3a:09:22:04:99:4c:d7:e0:a2:20:be:5a:4a:6c:56:2f:ee:
2f:c8:b0:5a:ab:89:a5:43:30:7b:d9:09:49:3c:76:93:7f:89:
62:e0:53:16:f4:f8:d8:61:2a:da:ca:a2:4a:71:6c:7d:1e:8b:
6c:7a:86:a4:a7:d3:8d:e3:3a:fe:64:71:bb:c2:02:c2:f6:d8:
9a:a2:6a:25:22:df:72:39:b8:d1:47:c5:f5:d5:ea:09:a3:48:
59:b7:fa:50:40:12:f6:c9:c9:b1:20:49:a5:0d:9c:bb:eb:92:
d6:be:76:f9:e1:fc:78:df:a8:5b:f5:93:26:73:fc:eb:07:e7:
bb:2f:b2:99:96:09:cd:48:b3:cb:a2:2a:21:23:14:b8:82:ca:
dd:08:06:cb:b7:72:e5:b2:30:55:8f:a3:24:7a:5c:5d:ab:cd:
0a:af:ad:da:27:33:45:d0:45:16:b4:2b:a5:04:ca:97:ca:37:
c6:0b:b9:2b:10:a1:70:5d:63:6f:f5:48:39:af:1f:39:14:26:
71:d3:2a:ff:eb:ba:12:9a:7e:55:ea:65:e2:af:43:c8:d7:06:
ff:65:05:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025/0/gmqIHi4/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NTI2YzMzNWEtMWQ5Mi00NmNkLWFlOTItZjY1YzkyMzhlYzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoLGG/+DjifS/haIPqVav1o1xwDm/I8Kf80/
Zi+3TfOTnnqttyRmfihNBb2m0UbgMoO7KZS0e7uIkHq80Y339+zWjc2l5M1C4Ziq
0iFXJOJmoTqpM2aK4BztcP8dRlKnEgyUYvdG8yUipKu7RIfs6NO6LNkundR3/9GG
LKnvlr/L9gDdvEL4oAnNVlzeLTzS2t2oVwh2wCv90eLxPThBty+XVIwyQtV4f5Yd
AmDUxnYp1bT9nzGez+DX9qrl9ZEhZO8onI2lrygzIZzBqO2IJuveZgWBoilEUk8K
hdXJhIecKiKWkQnK3xQLmyBGvJXvDMx+TiCRZXeDdVI48p+nJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPEdOfRVjbM6qGIAZxJnUeJ9TOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMWU3NDZkMGYtNWVjMi0z
MjU2LWFkZGQtNTgwN2Y5YjkzNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRBFOLnH0OkDEkALQO2F3mmm5Y9ji86FyYdtvDW/440AYQnSs46CSIE
mUzX4KIgvlpKbFYv7i/IsFqriaVDMHvZCUk8dpN/iWLgUxb0+NhhKtrKokpxbH0e
i2x6hqSn043jOv5kcbvCAsL22JqiaiUi33I5uNFHxfXV6gmjSFm3+lBAEvbJybEg
SaUNnLvrkta+dvnh/HjfqFv1kyZz/OsH57svspmWCc1Is8uiKiEjFLiCyt0IBsu3
cuWyMFWPoyR6XF2rzQqvrdonM0XQRRa0K6UEypfKN8YLuSsQoXBdY2/1SDmvHzkU
JnHTKv/ruhKaflXqZeKvQ8jXBv9lBWY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:42 2026 by rpki-client