
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa
File: 0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa (raw, json)
Hash identifier: ASVrK12zYrP1q7OZTH8SoBv5dYQrcrxMXH45Fl4gcA8=
Subject key identifier: D3:B7:56:98:D7:EB:4B:49:07:A9:A9:A5:69:AC:D8:C3:54:8D:A1:B3
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584CF2BD0A22B870AE86D6236200
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa
Signing time: Sun 22 Feb 2026 14:00:41 +0000
ROA not before: Sun 22 Feb 2026 14:00:41 +0000
ROA not after: Sat 23 May 2026 13:00:41 +0000
asID: 7029
IP address blocks: 152.232.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f2:bd:0a:22:b8:70:ae:86:d6:23:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Feb 22 14:00:41 2026 GMT
Not After : May 23 13:00:41 2026 GMT
Subject: CN=c9ab6d53-b7d9-4c12-b691-b648b8ff9f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:5e:a6:38:92:5e:f9:dc:82:f9:10:59:db:
0e:45:66:8c:81:15:82:23:16:26:e5:81:c0:92:3f:
ae:7c:ac:3f:b0:c8:52:51:d5:76:2d:30:31:c7:b9:
a9:1b:7f:d8:82:98:c9:a8:87:7e:18:9e:95:3a:21:
f4:ab:ad:09:8d:58:83:ea:57:17:25:e1:78:ff:ee:
35:bb:fd:82:26:0c:97:4a:58:69:94:47:f8:d3:5a:
e2:90:d1:e1:be:ac:c3:c2:18:72:4c:41:9f:11:08:
e2:a9:06:71:cd:0c:4b:37:c3:ce:4a:c8:49:b9:79:
3e:bf:2d:e8:1a:bc:9d:06:42:c1:4d:00:fc:9b:cd:
d7:65:b8:6e:94:1b:31:61:e2:91:c9:76:16:5b:1a:
c8:18:4f:49:ee:30:57:3d:dd:4f:35:ec:10:7c:aa:
3e:53:8a:c9:75:62:05:0e:fe:db:8d:91:0f:d9:2d:
5d:53:89:43:32:d0:f4:69:84:dc:df:01:da:a0:67:
38:6f:6f:68:5c:a2:70:1a:a6:ca:b3:2e:5e:04:6c:
53:3f:e5:b3:72:b0:b3:5a:16:34:84:66:c1:1d:59:
56:c8:16:8a:17:be:53:e0:4a:25:17:4f:9c:21:bd:
5f:1a:02:06:10:be:32:84:d3:c9:ec:cc:ea:e4:25:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:56:98:D7:EB:4B:49:07:A9:A9:A5:69:AC:D8:C3:54:8D:A1:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:84:e0:82:6e:67:d9:90:2b:5e:c9:c2:eb:a8:74:74:f0:a4:
50:ef:25:18:1e:e3:0b:07:f3:a2:3a:09:e1:c9:e3:ae:ce:81:
ca:aa:bf:78:c7:fe:1f:d7:26:4d:07:34:c5:61:0e:fd:c1:77:
08:25:ff:26:4f:d8:07:0b:2b:f3:4d:f5:8c:e2:48:ea:40:c0:
10:3e:36:38:20:ac:89:bc:35:13:5e:78:bc:1d:c1:4f:85:88:
02:d0:5a:e2:5e:5d:76:60:ff:2c:ae:d4:b0:8f:1e:56:31:98:
93:2c:ae:b0:e8:60:25:95:47:f5:0a:18:0b:4f:aa:ab:3c:bd:
d4:56:a9:05:4a:e6:53:77:85:d4:10:79:76:5a:7d:29:46:ad:
95:62:1c:85:6b:59:c1:9a:95:36:fd:7e:8e:12:3a:e1:54:58:
cf:0a:0c:8b:f3:29:20:87:05:f8:31:80:fe:ed:6f:6a:cc:bd:
e4:9c:a8:4e:02:2f:39:ff:f9:49:73:18:53:30:c5:9e:e1:43:
8c:ea:14:8a:ca:66:0c:70:65:e9:5f:8a:bb:6f:d9:62:30:23:
57:2f:83:6a:d0:52:54:34:f7:0a:3f:f8:65:3e:6d:f1:4a:4f:
dc:8b:3e:98:0a:fa:27:4c:12:16:a6:c0:c3:c4:d2:c6:0f:b7:
d3:d9:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:48:31 2026 by rpki-client