
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa
File: 3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa (raw, json)
Hash identifier: vDq5cWdWmivK8+2aji8keDlfYWI8vAyxBC21Z4d9Ads=
Subject key identifier: 15:13:3C:CE:14:20:F9:94:06:DA:D2:27:D4:E3:BA:07:83:01:63:94
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584F2957AC9D547CEE65B6C7F1C0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa
Signing time: Sun 13 Sep 2026 13:00:11 +0000
ROA not before: Sun 13 Sep 2026 13:00:11 +0000
ROA not after: Sat 12 Dec 2026 14:00:11 +0000
asID: 55081
IP address blocks: 152.232.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:29:57:ac:9d:54:7c:ee:65:b6:c7:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Sep 13 13:00:11 2026 GMT
Not After : Dec 12 14:00:11 2026 GMT
Subject: CN=1742ad39-8b0a-4faa-a10f-d85f7e5f711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:40:44:39:07:56:d2:7d:0e:cc:ba:7f:5e:
fd:e1:cf:ba:be:84:6a:2c:a2:9b:97:ee:ca:5f:22:
4a:05:3e:a5:a4:1c:67:9e:61:63:b9:42:db:63:0d:
a3:da:4d:7f:5b:94:1a:de:a4:91:eb:25:dc:e8:96:
1b:e1:b3:e9:3a:aa:01:cc:dc:21:69:01:ee:65:54:
a6:fe:4a:80:3e:bd:8e:99:9a:f3:e3:01:a1:db:90:
a3:fc:d0:3b:df:76:61:24:b4:cb:4f:df:12:6d:44:
15:26:ee:ac:66:60:73:29:0b:3c:60:f3:e1:8c:98:
4f:c3:80:fa:97:ba:d5:55:7e:eb:0a:5b:40:33:5d:
6e:7c:a0:96:c6:70:c8:e2:fe:ae:1a:fa:4a:58:42:
64:b3:c7:e8:3a:bd:fd:4a:45:b6:7f:d6:c3:37:97:
99:f9:69:b9:91:44:e9:a3:c8:28:05:92:e9:31:41:
31:ae:d8:06:f5:67:ee:e6:4a:8a:e5:27:63:26:2a:
8c:2c:18:30:81:6c:35:28:53:2f:a8:2a:d8:e1:d4:
4d:12:0f:1a:54:00:ab:e0:af:94:2e:79:4a:ea:2b:
a8:19:18:e9:7c:fd:41:e9:eb:61:41:ee:0c:42:04:
6e:2f:6d:fa:b2:77:1b:00:e9:5d:33:68:11:88:04:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:3C:CE:14:20:F9:94:06:DA:D2:27:D4:E3:BA:07:83:01:63:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:26:34:d3:0b:43:b7:23:29:8a:05:b8:6a:f6:a4:7c:c4:2d:
67:3c:75:db:cf:da:01:88:99:da:96:1b:9e:0b:64:a8:68:84:
d7:0d:82:7b:e2:a0:e7:dc:a6:bd:ab:e3:f4:4c:16:d2:93:44:
59:ce:bc:57:b8:ff:59:bc:9c:90:d0:f7:8c:72:28:8c:95:c9:
38:20:40:dd:48:50:40:ff:49:52:01:50:47:95:1b:b3:ca:c2:
ec:df:2b:19:40:5d:c2:73:bd:be:11:11:86:5a:b4:3c:28:c3:
dd:d4:54:1b:8c:52:14:d1:83:8c:c7:b7:6f:e0:50:c4:f0:e5:
21:14:a8:85:1e:8b:f1:e8:04:39:23:52:ba:70:d8:d4:64:3a:
a5:99:a1:9b:03:ae:8c:55:a6:09:ec:01:cd:7c:95:26:1f:c7:
e4:88:86:2c:51:01:66:9a:bb:90:81:0f:fd:01:b4:fa:2d:9d:
81:4b:54:37:6a:c4:26:b8:0d:37:59:4d:6b:9d:cd:1e:8e:f8:
b7:06:d0:98:d4:e1:54:4e:6e:86:fd:63:97:0e:4d:8d:d9:62:
45:82:67:e4:7a:4d:e3:2c:34:2b:fe:6e:6d:52:fc:28:5a:15:
9c:28:df:43:58:ef:0d:36:42:f2:70:39:32:ed:e7:f3:97:9a:
37:70:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:59:40 2026 by rpki-client