
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f6fad34-9a90-3538-9ba6-0767f81f88fb.roa
File: 2f6fad34-9a90-3538-9ba6-0767f81f88fb.roa (raw, json)
Hash identifier: PRwXK5O13OTYRaZiKalyQ3xzxQZpAk2FVfUeeL7Hfng=
Subject key identifier: 57:7A:AC:28:8B:A4:A9:57:FE:E6:0D:61:32:58:5F:19:FA:26:DD:8E
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584CD6D2072B690BE672C7266880
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f6fad34-9a90-3538-9ba6-0767f81f88fb.roa
Signing time: Thu 12 Feb 2026 14:00:40 +0000
ROA not before: Thu 12 Feb 2026 14:00:40 +0000
ROA not after: Wed 13 May 2026 13:00:40 +0000
asID: 55286
IP address blocks: 152.232.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d6:d2:07:2b:69:0b:e6:72:c7:26:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Feb 12 14:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=57cf4365-9028-4f25-8709-edb97d4e1d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:d4:75:10:30:d1:d1:e0:b2:08:49:8e:c0:
74:fa:e5:01:84:77:98:ff:66:15:eb:ed:1c:98:98:
6f:33:df:20:f1:e4:dd:13:8b:67:6a:3b:31:f1:50:
bc:26:66:8f:06:2b:5e:86:72:8b:c8:75:4a:d8:df:
0e:7c:34:00:e7:47:73:32:bf:ca:77:ae:7f:69:3e:
4c:d6:1c:a9:d9:d5:30:82:b1:4f:4b:d8:05:bf:57:
3c:de:d5:32:69:f8:f2:b5:a2:7b:14:bc:dc:8d:1a:
19:d0:d1:22:ed:f7:cf:fc:85:90:1c:7c:9c:f0:25:
64:ac:d6:e1:93:ac:1e:4e:7a:dd:b4:c8:b2:9a:9f:
18:3f:43:e8:5a:94:6f:15:65:a2:c4:4d:10:04:58:
d2:78:ef:52:5e:64:54:72:47:ed:d5:63:4a:bd:a4:
92:90:2b:4a:2e:cb:01:c6:07:4f:7d:69:93:b7:83:
ce:2f:6c:26:b0:67:6d:4c:16:7b:39:aa:ab:71:3f:
43:89:c3:44:b2:84:67:56:77:24:16:1e:f0:a2:00:
58:52:ba:5e:6c:65:c7:32:a8:5a:92:19:33:bb:fa:
45:0c:3c:4f:e1:95:42:36:65:fb:b3:96:82:b4:48:
ec:a7:48:65:15:b5:6b:08:73:74:a1:93:17:0b:11:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:AC:28:8B:A4:A9:57:FE:E6:0D:61:32:58:5F:19:FA:26:DD:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f6fad34-9a90-3538-9ba6-0767f81f88fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:13:9a:2c:ba:96:76:44:5c:f3:32:24:c3:3d:06:f7:3c:b9:
75:0c:a9:b1:84:b4:e7:12:41:10:54:b4:71:d7:51:7f:35:07:
22:ed:12:ae:e6:67:e6:d7:90:02:75:ba:42:40:90:72:9c:95:
06:9f:5f:c7:97:38:7f:6b:ae:b4:77:2d:81:bb:9f:91:4a:b8:
c8:39:98:ab:dd:db:fb:74:a6:a8:9d:8b:30:64:2c:4c:dd:ce:
75:a7:71:04:08:1a:2d:11:f0:27:df:a4:42:5d:01:70:4b:dd:
a0:42:57:da:fa:3c:1d:eb:b0:b6:d9:52:2f:99:da:87:a1:98:
50:2f:02:f1:ee:b3:85:04:8b:e0:66:ab:c9:dc:26:08:08:ae:
6b:1a:69:c9:cb:7e:fc:14:83:58:05:8e:58:38:ac:42:73:8c:
b8:13:63:ca:e3:6b:76:fa:cf:f8:be:06:b6:59:0c:8a:a0:50:
80:d8:da:8e:44:c0:86:4f:74:a9:7c:e2:ac:3b:81:a3:83:a5:
c2:bf:01:ba:79:df:3c:fc:de:b9:f1:d5:f9:da:99:18:59:c2:
a6:6b:69:ef:41:8f:a9:6e:b2:25:84:f1:12:a3:c3:be:f2:12:
85:17:d1:33:e7:2e:dd:c1:6b:26:9c:ad:87:40:94:f0:53:7f:
47:df:df:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gcraQvmcscmaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
NTdjZjQzNjUtOTAyOC00ZjI1LTg3MDktZWRiOTdkNGUxZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmPUdRAw0dHgsghJjsB0+uUBhHeY/2YV6+0c
mJhvM98g8eTdE4tnajsx8VC8JmaPBitehnKLyHVK2N8OfDQA50dzMr/Kd65/aT5M
1hyp2dUwgrFPS9gFv1c83tUyafjytaJ7FLzcjRoZ0NEi7ffP/IWQHHyc8CVkrNbh
k6weTnrdtMiymp8YP0PoWpRvFWWixE0QBFjSeO9SXmRUckft1WNKvaSSkCtKLssB
xgdPfWmTt4POL2wmsGdtTBZ7OaqrcT9DicNEsoRnVnckFh7wogBYUrpebGXHMqha
khkzu/pFDDxP4ZVCNmX7s5aCtEjsp0hlFbVrCHN0oZMXCxHLNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFd6rCiLpKlX/uYNYTJYXxn6Jt2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMmY2ZmFkMzQtOWE5MC0z
NTM4LTliYTYtMDc2N2Y4MWY4OGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOh/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQTmiy6lnZEXPMyJMM9Bvc8uXUMqbGEtOcSQRBUtHHXUX81ByLtEq7m
Z+bXkAJ1ukJAkHKclQafX8eXOH9rrrR3LYG7n5FKuMg5mKvd2/t0pqidizBkLEzd
znWncQQIGi0R8CffpEJdAXBL3aBCV9r6PB3rsLbZUi+Z2oehmFAvAvHus4UEi+Bm
q8ncJggIrmsaacnLfvwUg1gFjlg4rEJzjLgTY8rja3b6z/i+BrZZDIqgUIDY2o5E
wIZPdKl84qw7gaODpcK/Abp53zz83rnx1fnamRhZwqZrae9Bj6lusiWE8RKjw77y
EoUX0TPnLt3BayacrYdAlPBTf0ff32Q=
-----END CERTIFICATE-----
Generated at Thu Feb 26 23:51:03 2026 by rpki-client