
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa
File: 25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa (raw, json)
Hash identifier: UuB27Uy5k67HDICoYVxyFfEPXEfjINZbIcbpWcc9nyY=
Subject key identifier: B7:04:79:A8:62:DB:10:00:FE:E1:B9:64:DB:A6:BE:F0:C7:07:C4:80
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584EA798A64972C555281123EA00
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 401776
IP address blocks: 152.232.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:a6:49:72:c5:55:28:11:23:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3e525a18-468a-4659-9adf-07751b2df77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:92:d5:30:c0:8a:b7:cb:b1:e5:f8:dc:33:
ac:bb:75:d6:96:4e:c1:38:d2:16:93:7d:a6:b8:8c:
4c:b8:ae:61:67:52:90:5b:aa:03:ac:41:c8:c9:e8:
28:7c:0d:d2:2d:c1:b4:db:3b:3c:1b:4e:30:78:13:
21:3a:dd:53:f6:cd:b3:d2:32:f9:48:be:b0:c1:c9:
c1:48:b8:c2:a1:1c:77:84:17:83:fe:24:97:b7:b2:
45:92:67:f9:3f:81:03:b1:d0:fa:f3:21:7e:70:7b:
6b:23:40:de:4d:05:04:6a:1f:7c:03:a1:5a:a0:c0:
e8:12:68:bf:39:cf:89:f2:95:73:ca:62:bf:0b:79:
b1:64:78:a7:7e:bb:f7:70:e7:b1:df:b8:36:49:a6:
96:8c:38:ad:b1:28:15:d7:31:b4:9f:f7:6c:40:34:
28:9c:33:37:e3:d7:64:16:b9:65:d6:41:ac:ca:cf:
4d:e5:1e:05:30:c2:86:cf:6b:cf:87:16:65:58:fa:
fb:7b:a2:a3:5b:d8:70:de:c6:96:be:a2:7f:9f:4c:
45:ad:61:f4:52:01:ec:bf:56:ca:d2:1b:7b:19:c6:
a3:71:87:5f:34:4c:6a:25:99:5f:23:d6:01:b8:59:
df:40:4c:92:bc:e8:a3:9b:1e:88:f4:20:b7:3f:d8:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:04:79:A8:62:DB:10:00:FE:E1:B9:64:DB:A6:BE:F0:C7:07:C4:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:0f:30:1f:e6:5c:fa:f0:8e:d9:db:cd:92:4b:2e:fd:16:b8:
4b:8d:5f:13:14:8a:2d:00:4b:e8:f1:28:40:60:e9:5a:57:8d:
d4:cd:1f:bb:a6:a1:cb:40:5f:d0:c0:3c:c0:b4:47:c4:ae:07:
b0:6f:4a:d2:8d:56:dd:f4:bb:56:2c:31:08:46:80:84:f1:fe:
d9:cd:a9:4c:63:aa:eb:19:3e:de:0a:ea:a0:33:4d:ae:be:d0:
8e:89:73:64:e9:7e:b1:e2:35:e0:0c:6d:2c:df:8a:cd:98:ff:
3d:f0:ab:ba:02:34:0b:85:f1:6d:33:53:75:1e:30:90:b6:3c:
7a:e1:9e:cc:c9:b3:fd:11:75:07:1e:f9:4d:ec:f7:e9:22:dc:
e2:05:10:2f:62:bc:b2:8c:01:08:e3:a6:7e:83:49:96:5d:91:
9e:1e:96:92:d3:2f:eb:e7:c0:9f:83:72:ba:5c:66:76:fa:bf:
3d:f6:02:d0:a1:68:7d:85:69:a8:59:52:56:15:35:03:c9:ea:
69:b7:cb:30:ae:d8:3b:4e:29:f6:cf:b3:44:fc:5a:26:fd:2f:
77:8d:27:2e:87:61:14:21:e0:a6:a4:c8:e4:24:3d:19:ea:e0:
5d:2f:71:03:f1:9b:d4:10:0c:61:63:89:11:17:a2:5d:b5:c6:
48:7a:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:41:08 2026 by rpki-client