
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa
File: 148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa (raw, json)
Hash identifier: HKlN3yvC8ioEIT18LRuqGgcDcyvD3dW77EIyDgLpjpE=
Subject key identifier: 94:51:B4:8C:0C:60:50:E3:FA:15:E3:C0:C3:A0:C6:EC:99:43:CB:64
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D746FF8B5547DB4006B6EA200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397214
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:f8:b5:54:7d:b4:00:6b:6e:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=f1cece6b-6fcd-4d83-96ad-c95cf022b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c9:7a:b2:23:10:1c:50:28:d0:8b:aa:0b:84:
f8:78:a7:59:44:6d:8c:db:ea:e9:ff:8c:cd:ef:63:
7b:78:ef:13:92:a8:16:ff:57:17:97:bd:b5:36:ac:
e1:e0:98:04:bf:b1:18:c3:5b:7f:94:51:fa:7d:14:
17:41:0b:72:61:0e:0b:2c:e6:8c:b2:ee:d8:50:9a:
5c:33:30:d9:48:59:8b:d1:d6:36:5f:06:65:e6:93:
87:cc:72:c0:24:05:8d:0d:ea:ed:a2:ad:66:ae:b2:
d0:51:83:d3:43:a4:b0:0a:fd:f3:16:c2:33:af:af:
3d:5d:12:23:c1:10:dc:70:d2:09:6e:90:2d:da:5b:
f9:a4:42:ad:97:07:c3:1d:8c:b6:57:96:b7:bc:a8:
a0:32:f4:46:d9:30:e9:47:03:f6:56:1b:3c:55:87:
2a:f3:ff:a0:88:f7:f0:79:a8:c6:03:68:11:7b:47:
5b:3a:5e:ac:be:17:04:f8:38:e0:cc:5a:f0:41:4f:
f0:19:83:cd:25:f5:9a:4c:7b:b4:ff:4d:e2:38:34:
49:0b:04:69:4d:4a:af:6a:01:15:69:b7:f0:3b:0c:
84:69:36:6b:dc:45:d6:de:7b:fa:6f:51:c7:66:50:
51:5d:74:4b:ae:8b:88:ad:14:b2:c3:ff:7b:2a:e5:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:B4:8C:0C:60:50:E3:FA:15:E3:C0:C3:A0:C6:EC:99:43:CB:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:81:68:5b:df:12:0f:40:f9:d5:5a:5b:1d:66:99:6f:72:32:
ae:47:e8:55:bc:9f:36:ab:42:02:52:9b:91:aa:4c:a8:f4:a3:
85:21:0d:1e:82:33:8e:db:98:f2:23:da:25:bf:00:fe:df:15:
b2:a3:0a:9b:0c:92:77:20:a2:a1:5e:69:1c:69:16:86:ee:88:
7c:57:45:6c:ea:1b:65:c5:e3:bf:5a:10:0d:f4:3c:2c:e8:98:
92:5c:31:ab:c7:d3:8e:8e:5e:ed:0a:6f:83:71:5c:5e:9f:47:
2f:8a:8f:30:de:55:ce:ca:7c:e7:cb:75:41:5a:15:54:85:2c:
ee:2c:bb:23:65:b3:65:85:2d:0a:95:44:ec:d6:66:e7:a6:6d:
36:a3:b9:82:fb:d5:e4:1c:17:14:98:da:4d:9e:4b:ba:8f:2b:
f5:f9:cf:aa:a2:e6:85:3a:60:05:9a:e3:03:0b:1f:a2:2d:fb:
a5:85:02:87:2b:5b:63:42:d6:68:d0:0a:08:bf:e1:61:1e:85:
ab:8e:7f:6a:f4:79:59:af:a0:b3:53:17:74:c4:f1:68:fb:7c:
e1:a7:d6:95:89:fb:7b:44:30:0f:d4:b0:bb:06:5f:e1:ad:3b:
de:85:e9:9c:de:d9:8f:fe:67:dc:6c:2d:45:7e:2f:c6:af:52:
8a:8b:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:09:09 2026 by rpki-client