
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
File: 5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa (raw, json)
Hash identifier: TeZo8pi6GsD2bOqd+WvLyCAcXH0GF8TffSH5baY5kYk=
Subject key identifier: 57:08:2D:37:5E:F1:4A:88:2A:27:8A:15:B3:07:CC:33:44:F7:F5:47
Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial: 010D0C9F4328584D8EF560466CFEBD44CD5054C0
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 63023
IP address blocks: 104.156.156.0/24 maxlen: 24
104.156.157.0/24 maxlen: 24
104.156.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:60:46:6c:fe:bd:44:cd:50:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=b34a38fe-d72d-4820-94e8-1534298d04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:51:3a:f9:72:0f:7e:1b:54:53:ea:14:e3:
33:3a:e8:e9:95:de:bb:03:45:b2:14:a1:54:d1:24:
4f:62:a8:47:15:44:ad:f6:3a:c6:94:43:6d:aa:78:
77:74:3a:e8:b9:30:b9:1d:8f:3a:a7:0a:06:fa:fd:
87:63:7e:6c:c5:13:d7:62:5b:87:fa:56:b3:a9:e7:
84:c8:b7:ea:8e:69:eb:60:20:89:10:20:22:54:09:
a9:d0:24:8c:41:9c:51:7b:ac:ae:19:33:2b:66:c8:
09:7f:48:10:ab:eb:6a:86:ce:28:6f:1e:03:ca:9a:
5e:79:c9:83:60:92:f8:42:ab:6d:d6:a4:5d:26:95:
90:2f:4c:6f:41:28:34:33:a7:c2:28:94:c8:b6:8e:
03:9c:af:10:85:09:47:1b:bd:f6:73:bd:97:0e:6c:
71:12:f5:1f:b0:5c:da:72:56:57:03:3e:12:43:77:
2d:c3:4d:9f:bf:23:7a:b6:3e:f9:fb:f4:03:cc:39:
ea:7d:2a:b0:cd:cb:b9:82:81:ee:45:aa:9d:0d:15:
52:72:70:42:6c:81:28:17:f4:51:05:cc:f9:c6:df:
f6:4e:2d:7a:f5:b0:24:69:53:16:d3:b9:dc:c3:59:
2c:1b:5e:78:e2:6c:03:58:74:ba:3f:42:cf:83:ca:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:2D:37:5E:F1:4A:88:2A:27:8A:15:B3:07:CC:33:44:F7:F5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/5a5236fa-372e-334f-bc5c-2fc8b6ec894b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
X509v3 Authority Key Identifier:
keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.156.0-104.156.158.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:2f:80:f4:c2:63:c5:30:03:8b:dd:10:8b:33:6e:5b:1f:db:
33:cc:55:0a:bf:d8:04:17:2d:51:83:db:c7:29:0c:20:f6:d6:
db:c0:08:1d:b1:96:17:68:25:52:2d:9d:bf:22:1b:e8:3d:c6:
6e:f7:38:e1:24:ba:a2:c3:05:85:3a:0b:6a:44:28:65:44:fe:
e8:e1:db:7c:ab:a7:c3:2d:5e:7f:c7:1c:19:24:c9:ac:11:21:
78:a4:1b:28:78:85:93:79:d9:a2:63:c0:99:4d:95:93:7b:22:
07:5c:e5:0f:77:9a:62:39:d3:da:28:7a:40:df:29:50:a8:6a:
62:63:84:46:06:6c:ba:5a:03:9d:5d:9f:bc:b0:eb:ce:db:85:
2e:33:91:e1:72:68:5a:42:70:f5:40:87:a3:af:b7:b5:f1:6c:
73:e5:5e:32:a5:ed:b1:3a:26:8d:e3:98:73:66:4f:ed:f1:8c:
46:5e:75:7c:9d:fb:aa:2a:c6:ee:a4:2e:ea:ef:1d:44:d8:69:
1d:c0:61:80:40:2c:ed:77:0e:35:cd:53:5c:41:02:12:97:ab:
6c:da:2a:02:1c:63:b6:98:c4:39:1c:b6:0a:cf:9f:5c:31:45:
31:5a:00:a0:4f:5f:79:14:92:f8:32:c5:59:13:60:4b:90:a1:
78:0e:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:31 2026 by rpki-client