
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa
File: 3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa (raw, json)
Hash identifier: g1SXEa4FX/ggOYIT0qWZUyyHTkPLQqSn/AG7QfDChqE=
Subject key identifier: A3:22:BB:54:00:88:27:01:33:19:34:15:3F:72:0E:FE:18:CE:C4:1C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584CEBC21DB8170A0129D2540700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa
Signing time: Fri 20 Feb 2026 02:00:32 +0000
ROA not before: Fri 20 Feb 2026 02:00:32 +0000
ROA not after: Thu 21 May 2026 01:00:32 +0000
asID: 81
IP address blocks: 152.46.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:c2:1d:b8:17:0a:01:29:d2:54:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Feb 20 02:00:32 2026 GMT
Not After : May 21 01:00:32 2026 GMT
Subject: CN=ede21b98-7866-471e-b79b-d9042f58eaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:30:70:58:0e:97:d8:1d:2f:8c:e5:c7:e9:
f5:e5:b3:80:27:e9:36:46:e4:d3:a9:61:6a:8a:51:
a8:ea:39:8c:30:28:98:3b:1c:cd:56:7a:33:24:8e:
5e:b7:a3:da:15:3f:16:19:b6:ab:e2:c7:bd:e1:5f:
70:ad:cf:5e:96:2b:e5:97:17:8c:ff:e0:f5:bd:85:
c1:95:41:54:92:55:a8:1c:d7:db:31:72:8d:a0:58:
ce:41:92:55:71:e9:fc:ee:34:be:b1:6a:fe:9e:9b:
16:2d:19:b1:66:d9:8b:35:70:3b:d6:4d:e3:44:8f:
a7:37:8d:a6:1e:49:46:4d:8d:95:54:73:f8:b1:b7:
08:ba:e9:9e:4b:7c:fc:eb:60:ed:28:53:25:16:b9:
dc:2f:a1:91:a4:91:fe:6c:75:db:56:14:9c:58:81:
01:44:d7:c7:49:fa:9a:fe:82:86:48:0b:67:05:67:
54:4d:97:2e:e2:6f:04:50:3c:85:27:f8:44:6c:5f:
c1:46:e9:68:e2:21:44:f4:e8:77:d6:c8:ff:21:59:
ca:4a:3f:1a:03:c1:6c:6a:13:15:e2:b8:c8:4f:38:
1c:a8:27:69:84:5e:89:85:de:d9:5c:ad:e6:4a:1f:
b0:8c:bb:2d:1a:64:66:3c:69:e2:16:4f:4b:b7:07:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:BB:54:00:88:27:01:33:19:34:15:3F:72:0E:FE:18:CE:C4:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d0:7d:4e:63:41:72:02:30:cc:e1:ee:46:16:c2:3a:46:13:
43:43:1c:16:5a:b2:3d:bb:bc:ed:99:1e:c5:d6:de:3f:a3:83:
85:81:92:1c:92:dd:a2:fe:d5:25:06:75:d0:0b:db:6e:e9:95:
e2:f5:ea:24:39:89:f7:45:16:28:91:86:13:8b:23:f2:e0:c3:
85:30:ee:b1:29:b8:24:2a:42:06:c0:b3:f9:2b:17:3c:39:25:
fb:42:56:59:7e:37:1b:dc:49:3e:6a:a6:b9:fe:be:d5:65:c3:
f2:d6:23:94:47:95:99:73:8c:4c:67:16:5c:76:eb:26:80:b3:
72:ba:37:30:29:56:a9:7a:9a:05:a6:c5:b9:99:61:98:9f:30:
a9:48:f1:fd:20:34:c9:de:05:d1:14:87:e4:4f:5a:de:28:77:
9c:41:b7:d9:58:99:89:7c:59:14:88:aa:db:0b:16:a4:11:64:
9c:36:12:0f:01:01:64:33:f8:f6:96:86:71:28:d2:44:54:ad:
a1:64:ec:09:06:b5:90:9e:a0:4c:d6:88:e2:60:3e:05:0b:88:
30:28:18:65:9c:74:6f:9a:84:da:5b:07:05:e8:80:eb:f3:8a:
93:ac:92:a2:04:70:c5:f7:e7:ef:78:9c:30:35:1c:d4:d2:d6:
b5:05:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:27 2026 by rpki-client