
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
File: 5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json)
Hash identifier: kszfv0QuJiS3QI2hdIgUtnhxVCPNwiZiiOTxhfdM+Gc=
Subject key identifier: 88:82:83:63:CB:94:93:AE:EA:39:36:13:D3:FB:6E:ED:5A:EA:40:33
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F4328584E9A7FD280B7F9E6874C6BB380
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 209242
IP address blocks: 170.176.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:d2:80:b7:f9:e6:87:4c:6b:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=66e74c30-16a2-4586-9fcb-cd7023c8bfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:69:0e:0e:b1:3e:0d:96:06:35:d3:19:b0:6f:
fa:b2:c8:2b:34:a6:60:99:3e:f0:2d:a2:99:3f:b6:
fd:4c:58:e1:ea:0c:83:e5:fb:66:d3:45:8e:ac:15:
30:70:22:57:21:88:d0:97:01:1b:45:78:66:a4:82:
30:63:68:2a:00:3e:31:7d:08:b1:2f:08:8b:d9:f2:
5f:80:a8:c2:18:17:9b:bd:eb:1c:65:cd:ac:06:3c:
54:f4:5b:62:49:6b:7f:38:ad:90:43:68:c5:a7:7b:
4d:ea:27:f8:1d:e4:9a:3e:2c:7b:7d:3a:c6:ab:53:
5a:51:0a:f7:f0:5e:15:f3:81:8a:e8:90:f5:1a:98:
a1:e0:77:d2:2d:24:bb:b0:91:59:82:6d:c7:1f:b6:
c9:7d:c2:c8:1d:1b:96:98:ee:6c:90:e1:d1:d2:a3:
2d:c4:11:d9:c8:4d:a9:3a:36:28:1a:55:ac:b8:37:
56:0b:a0:a3:e6:40:42:5b:a5:5d:61:77:e4:59:f6:
54:40:6c:4a:a9:67:88:83:6e:16:84:7b:96:32:4f:
dc:8c:36:60:d7:f4:94:e9:96:7f:94:fe:84:27:36:
c1:8e:9e:f0:d2:57:d7:73:3c:92:d6:4b:9e:ee:b5:
9c:00:74:2d:c5:d5:8a:04:f7:37:d3:de:9c:23:2c:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:83:63:CB:94:93:AE:EA:39:36:13:D3:FB:6E:ED:5A:EA:40:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:00:91:c0:a5:b2:5e:5b:fa:20:c6:b3:0b:67:3f:ab:44:9e:
96:9d:e0:0e:3c:8c:5c:51:9a:17:95:1f:9a:49:85:69:d9:19:
47:21:da:48:d2:80:04:99:9e:7a:18:5a:ca:22:c9:36:eb:72:
9d:09:87:2d:02:08:fe:04:b4:52:17:bf:fc:a9:af:c2:6d:6d:
52:05:e7:1c:83:24:e2:93:80:04:56:b4:7a:c5:72:e4:f0:97:
b9:8e:93:76:e3:f8:ab:71:4e:43:d6:96:ad:17:76:f3:e7:36:
42:c0:ee:94:9a:22:5a:dd:ec:8c:6e:5c:fa:f3:9d:6b:b0:f9:
9f:ff:a3:6d:f0:dc:f0:71:e1:b8:84:53:ee:29:bf:d7:43:71:
c7:a8:1c:e8:85:52:22:cb:75:6c:78:2e:f5:79:36:b4:06:b5:
27:27:dc:9d:66:e6:d2:4f:60:dd:3e:d1:20:bb:05:2d:e3:cf:
df:e3:4b:8e:39:fd:8d:41:f6:7a:e2:73:f7:cb:6f:35:0d:aa:
ea:c5:9f:52:d6:6e:76:b8:0e:f5:93:3c:ed:91:81:c3:9b:b5:
b8:6a:15:cc:d1:09:3e:af:ef:2b:00:1f:be:d1:f0:48:ea:05:
56:49:ff:54:bb:fd:df:e1:cf:6c:23:94:70:f4:a5:90:7c:1b:
0d:25:9b:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9KAt/nmh0xrs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
NjZlNzRjMzAtMTZhMi00NTg2LTlmY2ItY2Q3MDIzYzhiZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkODrE+DZYGNdMZsG/6ssgrNKZgmT7wLaKZ
P7b9TFjh6gyD5ftm00WOrBUwcCJXIYjQlwEbRXhmpIIwY2gqAD4xfQixLwiL2fJf
gKjCGBebvescZc2sBjxU9FtiSWt/OK2QQ2jFp3tN6if4HeSaPix7fTrGq1NaUQr3
8F4V84GK6JD1Gpih4HfSLSS7sJFZgm3HH7bJfcLIHRuWmO5skOHR0qMtxBHZyE2p
OjYoGlWsuDdWC6Cj5kBCW6VdYXfkWfZUQGxKqWeIg24WhHuWMk/cjDZg1/SU6ZZ/
lP6EJzbBjp7w0lfXczyS1kue7rWcAHQtxdWKBPc3096cIyz8bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIiCg2PLlJOu6jk2E9P7bu1a6kAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNWVkYTQ2MzYtNjViYS0z
M2Q5LWFhMzctMmFlODk5MTI2OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAAkcClsl5b+iDGswtnP6tEnpad4A48jFxRmheVH5pJhWnZGUch2kjS
gASZnnoYWsoiyTbrcp0Jhy0CCP4EtFIXv/ypr8JtbVIF5xyDJOKTgARWtHrFcuTw
l7mOk3bj+KtxTkPWlq0XdvPnNkLA7pSaIlrd7IxuXPrznWuw+Z//o23w3PBx4biE
U+4pv9dDcceoHOiFUiLLdWx4LvV5NrQGtScn3J1m5tJPYN0+0SC7BS3jz9/jS445
/Y1B9nric/fLbzUNqurFn1LWbna4DvWTPO2RgcObtbhqFczRCT6v7ysAH77R8Ejq
BVZJ/1S7/d/hz2wjlHD0pZB8Gw0lm+k=
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:30 2026 by rpki-client