
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ab82bc77-bd24-3c55-abea-aeebb0d1a888.roa
File: ab82bc77-bd24-3c55-abea-aeebb0d1a888.roa (raw, json)
Hash identifier: YW/YVYNdGl3sD5ggKVBnIgW3V/qh+BR4Emaxx5dkRpE=
Subject key identifier: 22:D9:F4:F5:00:9A:DC:A2:53:5A:16:40:4C:A2:1E:4A:EC:A2:D3:EA
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584ED2CC76B429E274B1E56514C0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ab82bc77-bd24-3c55-abea-aeebb0d1a888.roa
Signing time: Thu 13 Aug 2026 13:00:12 +0000
ROA not before: Thu 13 Aug 2026 13:00:12 +0000
ROA not after: Wed 11 Nov 2026 14:00:12 +0000
asID: 55286
IP address blocks: 152.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d2:cc:76:b4:29:e2:74:b1:e5:65:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Aug 13 13:00:12 2026 GMT
Not After : Nov 11 14:00:12 2026 GMT
Subject: CN=540dd0fd-db6f-42b1-9e53-05eb8c91cd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:96:ec:5a:85:91:71:dd:74:97:33:f2:b7:
1c:bb:27:2f:df:a7:68:58:6e:71:6e:cf:ad:4e:ea:
95:56:95:3c:c9:c4:fc:91:e7:13:94:63:97:74:58:
72:db:c7:4c:c5:b7:45:5e:f3:6a:39:42:be:5f:3c:
ed:a6:21:d7:7a:aa:18:dc:11:6f:fc:86:d8:04:69:
63:05:b8:31:11:c8:1f:de:ea:b8:82:16:10:34:fb:
52:cd:72:97:68:a6:0e:fb:ee:10:28:39:4b:b1:1f:
c2:c6:35:82:65:c7:ca:fa:05:83:ef:aa:7c:03:2b:
6c:99:ea:94:0e:79:ce:95:e1:cf:6a:0c:36:27:ad:
b5:89:98:1b:60:6c:f0:14:b2:9c:23:e7:49:d3:8d:
6d:a9:a8:c2:ed:a2:85:86:a8:54:7d:17:8d:3a:e2:
da:e0:ba:13:06:c0:4e:02:8d:c8:7c:34:7f:bf:b5:
4f:e2:7c:22:a3:90:14:31:ea:47:40:94:ec:a5:af:
84:ef:9c:c1:6a:0a:6e:45:1f:3a:2e:4b:e7:b1:ab:
6d:31:6b:3d:cf:3e:5d:3b:21:17:61:c9:ce:fc:b9:
f6:d8:6b:43:fe:89:83:ef:18:70:25:25:ae:8c:8e:
bb:70:29:1d:78:9b:ed:c8:be:10:59:4d:13:12:30:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:F4:F5:00:9A:DC:A2:53:5A:16:40:4C:A2:1E:4A:EC:A2:D3:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/ab82bc77-bd24-3c55-abea-aeebb0d1a888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
152.232.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:98:71:90:84:ab:fc:a0:3a:2c:28:3d:0d:9b:1a:08:53:a1:
8e:b3:2a:cb:b3:06:61:92:3b:f8:fe:7d:61:7a:e3:af:82:90:
9f:1a:4d:2b:a4:c7:e3:02:a4:ce:3d:0d:74:4f:32:30:38:f6:
08:ed:77:ee:af:ec:e4:e0:b8:46:3b:e7:9b:42:42:42:31:e4:
12:a0:6f:69:0f:6a:72:3e:71:58:a6:23:75:a9:58:2c:5a:95:
28:96:8b:fb:95:6c:ea:b2:0b:2b:2f:63:a6:64:27:5c:6b:02:
8e:e0:21:d2:bf:af:5a:f0:e8:4b:76:d8:e4:be:61:53:e2:0c:
5e:13:0b:da:e5:e8:e0:10:47:f2:7f:c9:4c:eb:b6:97:ba:a0:
e7:a9:05:57:52:5e:98:ef:94:63:31:fe:b1:ce:73:f9:df:ea:
5f:18:79:bf:d5:c2:d3:77:26:f8:c5:b5:96:a7:d1:be:b2:5f:
f9:08:da:4d:28:b3:87:8c:99:9d:77:3f:ec:c1:5b:3f:44:88:
66:d2:de:76:dc:7d:bb:c1:ea:6b:9c:4c:0f:bc:dc:b9:17:c9:
c4:fc:55:c6:4d:07:06:46:39:2f:21:94:60:84:67:9f:64:71:
dd:11:b5:7a:09:a3:62:e9:1d:40:f2:17:b0:c1:4e:39:99:3e:
df:5c:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:17:15 2026 by rpki-client