
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa
File: f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa (raw, json)
Hash identifier: 69pnyei0/3U83gzYigjZiYoIpgROx/p1uQVfQMdMmWM=
Subject key identifier: 38:52:A0:10:95:F7:1B:06:56:88:95:ED:01:E5:26:E9:6F:C3:2E:D5
Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial: 010D0C9F4328584D9A2010EA37541DA134EE8F00
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 9042
IP address blocks: 153.46.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:10:ea:37:54:1d:a1:34:ee:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=e3ad8099-0528-41d4-901f-1a881e57eaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:9d:1a:79:6a:91:b4:c6:15:69:47:83:eb:
1c:9c:29:de:e2:5d:e0:f9:ca:af:16:8a:e0:b9:91:
8a:55:40:eb:76:c3:6a:a1:3d:01:ac:c2:b7:33:21:
2c:44:52:7c:e5:ff:a7:67:31:ff:7f:21:bd:b6:0f:
20:5d:d0:52:cd:a4:e6:19:20:77:30:a1:9d:2e:82:
a0:a3:52:f3:bd:59:be:24:63:56:68:0d:16:e7:f4:
72:04:93:1a:c0:4e:ee:a8:b1:3d:af:dd:0c:50:80:
96:dd:56:0f:4f:b5:4f:ec:3f:5d:46:38:59:84:d7:
eb:4d:3d:e1:92:02:27:92:48:5f:47:e9:da:18:67:
d8:9c:3b:2f:70:a5:a9:2b:4e:87:e0:57:f9:93:77:
1a:6f:b2:c1:0c:42:cc:c0:16:40:5d:6b:34:dd:66:
4a:9f:4b:14:86:ae:14:cf:64:4b:06:1d:c5:0e:70:
79:33:33:ac:f8:39:1d:d7:45:3f:67:71:e9:de:d3:
ca:94:94:c9:7b:6e:a0:31:e9:b3:ff:b0:58:40:8a:
6c:0c:03:20:44:76:6a:07:42:e0:8e:8b:6b:1b:5c:
9e:e3:44:39:5a:81:d7:1e:3a:f3:dc:88:e9:07:4d:
5d:40:cc:7c:b5:44:be:31:b6:eb:b4:76:5e:84:02:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:A0:10:95:F7:1B:06:56:88:95:ED:01:E5:26:E9:6F:C3:2E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/f7575885-72d4-3d7a-8ad8-6a2f4770cbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
X509v3 Authority Key Identifier:
keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
sbgp-ipAddrBlock: critical
IPv4:
153.46.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:5f:e2:90:74:6d:c2:82:64:17:77:8c:b9:bf:43:45:db:81:
e3:f9:85:da:cc:ba:fc:b8:fb:c9:a5:9a:4c:cc:42:92:6b:85:
f0:f2:c5:65:c5:90:d4:04:a9:e7:a4:d9:41:ae:84:60:d5:6a:
60:f4:35:d1:8d:e2:eb:62:72:89:13:bc:b5:b9:37:d4:69:fc:
42:f0:7d:e1:e6:ff:23:d5:b5:cc:6b:9a:95:73:a3:92:6b:f2:
a2:ae:dc:c6:39:6e:54:00:7f:b3:73:d2:46:1c:f4:42:88:f1:
b8:fa:06:c6:10:de:88:41:07:6c:f0:cc:b2:0d:ee:9e:af:01:
fc:0b:b8:a3:35:b4:07:3b:af:03:b3:40:4f:50:88:47:b2:c7:
9c:ad:43:e4:a6:36:d6:eb:74:ea:a1:83:0f:e1:0c:12:81:77:
ce:c2:34:f0:87:4f:5c:21:90:74:82:14:74:b2:f7:cc:8d:74:
70:0e:ce:ee:6e:c2:3c:b4:c7:73:c6:09:25:48:b5:9f:88:86:
9d:d0:78:0d:fa:76:1f:71:32:6e:ac:89:6d:b5:f0:29:84:7a:
e0:b7:f7:b7:75:e5:5b:b3:e3:56:c8:c9:6d:92:b3:c8:87:90:
a4:6d:66:35:f5:79:ec:5e:1a:7f:57:4a:d0:96:3d:2c:7d:6b:
13:45:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:42 2026 by rpki-client