
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/f096dd4c-ab60-39c8-ba3a-b97278452e51.roa
File: f096dd4c-ab60-39c8-ba3a-b97278452e51.roa (raw, json)
Hash identifier: tPt/CvFeVVZZVzZiYbO891KOg57Gwmrh/OA7WuCGN1U=
Subject key identifier: A2:EB:36:5B:D2:15:07:82:D9:70:1D:F3:07:C3:35:19:67:30:4A:96
Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595
Certificate serial: 010D0C9F4328584EB57C458AC74AB5F467F4BC00
Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/f096dd4c-ab60-39c8-ba3a-b97278452e51.roa
Signing time: Mon 03 Aug 2026 01:00:11 +0000
ROA not before: Mon 03 Aug 2026 01:00:11 +0000
ROA not after: Sun 01 Nov 2026 01:00:11 +0000
asID: 14618
IP address blocks: 141.109.249.0/24 maxlen: 24
141.109.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 11 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b5:7c:45:8a:c7:4a:b5:f4:67:f4:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595
Validity
Not Before: Aug 3 01:00:11 2026 GMT
Not After : Nov 1 01:00:11 2026 GMT
Subject: CN=fcb4a4fb-e3c7-4421-ad15-e9245d504aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:10:a5:3c:42:c5:4d:12:22:20:46:d1:57:
c8:97:cb:a3:8d:de:46:23:8b:7c:3f:7c:6a:6d:21:
39:f5:7f:c1:2e:87:9c:83:25:96:52:50:21:5d:28:
a0:28:12:cd:f9:25:3b:d6:40:4e:db:09:93:4d:47:
5c:ff:ca:ef:4c:fa:19:df:12:15:08:02:cb:99:6e:
55:c7:46:5a:e4:16:c9:2a:d1:f9:31:66:57:5b:10:
eb:8e:15:15:9c:82:23:6b:9e:bb:4d:db:32:49:53:
8d:2a:58:91:b3:65:e8:71:67:1b:d8:2f:21:37:6d:
29:df:0d:9f:f5:3d:31:97:1c:ca:43:96:c8:84:d3:
ff:37:74:9b:a3:f5:54:22:a6:71:d4:19:91:9a:e8:
51:44:6c:63:27:52:26:be:9e:8d:e4:e8:e5:58:eb:
fd:25:15:22:b7:a5:07:8e:96:23:5d:de:cc:36:7c:
48:a1:44:4d:34:8c:68:7e:55:aa:d0:f1:18:14:e2:
7d:da:ad:49:51:f0:36:84:4c:0d:04:96:1c:d7:cb:
07:0a:de:af:47:05:a7:9f:6a:12:b4:2d:56:c1:11:
0c:6e:9d:47:f2:cf:51:d7:0d:d0:da:66:9d:79:aa:
6b:01:41:66:67:e0:ef:1c:0e:a5:95:05:9a:fb:15:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:36:5B:D2:15:07:82:D9:70:1D:F3:07:C3:35:19:67:30:4A:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/f096dd4c-ab60-39c8-ba3a-b97278452e51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl
X509v3 Authority Key Identifier:
keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer
sbgp-ipAddrBlock: critical
IPv4:
141.109.249.0-141.109.250.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:14:59:4d:4b:8b:52:85:29:fc:ff:ce:b3:96:e6:9d:b5:49:
08:04:16:3d:a8:05:6e:11:32:52:85:3e:dc:5d:a8:5a:ae:24:
dd:0c:06:d2:7e:53:bf:bd:a2:0d:8c:2f:6e:95:b7:7c:a2:bd:
bb:ca:e9:57:96:08:05:4b:4d:75:ad:d4:ce:e2:7f:34:62:37:
99:1d:f6:4e:5f:32:08:12:5d:5f:f9:03:bc:dc:cd:9d:8a:9b:
0a:68:bb:03:7b:37:09:a5:b0:f0:05:99:36:f2:0a:e1:b7:b8:
53:2f:e5:ad:f6:f1:69:1e:0d:34:79:c8:29:2c:95:6d:c2:28:
56:b3:4a:ef:cd:bc:fd:6a:ba:3c:5a:ab:5c:64:ba:c8:23:5a:
95:eb:b5:da:0a:11:7d:ee:de:de:fa:8f:6c:c3:b5:4c:29:b8:
64:c4:f7:f4:66:b9:9a:27:fb:15:68:81:93:52:54:3d:18:ad:
b5:4f:83:3b:1d:da:56:11:ff:5b:5e:f6:92:cb:a3:d3:08:17:
11:d8:94:51:6c:19:8c:cf:03:b4:81:e4:1b:65:61:a4:74:9e:
73:64:c0:71:e2:53:7b:35:c6:b2:a7:93:28:bf:3f:2e:0c:3e:
fc:fd:70:fc:7b:93:68:98:e6:42:cf:fa:63:7d:ab:ab:d4:90:
e3:84:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 09:57:50 2026 by rpki-client