
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f6768c4-250b-3327-8e76-e24bc43a52ab.roa
File: 8f6768c4-250b-3327-8e76-e24bc43a52ab.roa (raw, json)
Hash identifier: 7ImH7/1aEd5L3j22n/TrZ89OJvmvUHiqN/FH0mxylzk=
Subject key identifier: 53:0B:1D:17:FC:73:05:EC:D4:E9:8D:06:42:22:39:8B:D5:66:E3:AF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EAF234B14C16D77E3A3DB9980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f6768c4-250b-3327-8e76-e24bc43a52ab.roa
Signing time: Fri 31 Jul 2026 18:26:05 +0000
ROA not before: Fri 31 Jul 2026 18:26:05 +0000
ROA not after: Thu 29 Oct 2026 18:26:05 +0000
asID: 17031
IP address blocks: 152.22.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:23:4b:14:c1:6d:77:e3:a3:db:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 31 18:26:05 2026 GMT
Not After : Oct 29 18:26:05 2026 GMT
Subject: CN=49ca58f9-6da7-475d-ad16-29780424c1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:81:8e:16:29:0b:a5:50:66:27:0b:29:b7:
3d:29:77:ea:02:32:4c:9c:79:8d:be:e9:3b:0e:29:
e1:2c:c8:c9:5f:ad:e8:b4:75:ce:ca:2e:e4:6f:f6:
34:36:f7:f2:7f:98:5d:fa:46:a9:6e:b4:d2:27:74:
59:1a:da:fa:14:f4:35:0b:c7:66:a8:61:c0:6c:93:
95:60:4b:0c:9f:d6:3c:94:5c:3a:b5:86:a2:2a:02:
7e:a5:b9:7a:2b:c2:22:54:56:b6:63:bd:0a:4a:ae:
02:1f:6c:5e:8d:2e:42:03:e3:44:49:b1:b2:3f:a6:
7a:cf:c0:dd:45:7c:d1:0a:6d:b1:2a:be:ce:1a:a5:
e8:f6:52:2c:bf:3a:dc:3b:68:f7:7e:5d:4e:64:5a:
45:7c:74:c0:7d:c7:d2:e0:c2:e9:8c:c5:36:59:c3:
4e:56:f7:97:5f:d5:6f:69:a2:d3:92:85:bf:1c:22:
3b:4b:1d:85:a8:2e:19:92:ce:ce:ca:67:e5:4a:37:
4c:1e:05:4e:24:83:9c:d8:e3:56:71:c6:7c:71:d4:
9c:d5:44:ac:83:6d:ac:c7:ce:b2:d1:84:6b:bf:ab:
52:d7:a2:de:07:be:c7:6d:fd:8e:65:20:ea:c8:81:
91:a3:b6:ec:f8:4b:ba:54:46:a7:6f:b1:c5:b0:2a:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:1D:17:FC:73:05:EC:D4:E9:8D:06:42:22:39:8B:D5:66:E3:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f6768c4-250b-3327-8e76-e24bc43a52ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.22.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:42:89:d2:da:7b:42:40:e0:ef:62:70:74:5e:52:2e:78:e9:
69:73:d8:f9:0c:74:d6:36:dc:a2:cb:19:d9:b3:ba:ee:1e:0e:
70:d7:0e:55:d0:4e:fd:1a:a6:a9:98:d0:cf:97:c4:b0:87:7f:
56:ff:d1:56:fb:cf:40:1f:7a:a3:d9:d4:d1:e3:67:76:78:03:
00:29:bd:68:e3:d5:d9:d0:c9:5d:bb:00:eb:09:7f:13:68:14:
c7:47:2c:eb:b5:c4:42:e2:e6:72:3c:b7:65:8d:55:09:e9:c3:
87:14:90:ea:f2:ce:8b:9f:36:4b:91:e0:8d:e0:ce:62:54:92:
14:9f:c4:0c:44:bd:59:80:c2:5a:01:a6:56:c7:b2:cf:1d:35:
d6:ff:28:77:0a:cb:54:22:4f:49:92:56:04:78:75:c7:f2:8d:
d4:ed:0a:b4:6c:e9:3d:a7:1c:6d:3a:dd:53:17:9e:ee:97:25:
52:4c:84:c5:45:4a:df:98:1b:57:b4:76:32:f6:d3:6a:97:ca:
fc:78:d8:55:6b:0c:6f:0e:36:da:23:d1:77:d5:96:8f:88:a9:
37:be:0e:e1:26:f9:76:d1:48:27:ea:94:d1:5a:f4:12:0c:97:
60:7a:3e:29:82:22:74:5e:4e:97:0c:fa:66:e4:64:61:dc:f3:
26:06:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:44:14 2026 by rpki-client