
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
File: 23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa (raw, json)
Hash identifier: eFocumEC2Zuzh3foq6TJcSc0nTwbS588Zjuk/4dykwU=
Subject key identifier: 8A:F6:C4:8D:C8:CD:D7:F6:CE:B1:23:C0:88:9B:BE:F3:93:BC:D3:FC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D746FEDAC6E6AF40DF4FCC780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397242
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:ed:ac:6e:6a:f4:0d:f4:fc:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=5cee7e6e-65cb-4e96-ad8e-3b0b2bcbc2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:60:68:3d:75:be:50:c3:35:18:6c:83:a9:
e2:f7:de:0b:d2:c8:d4:29:f7:09:72:69:e1:c2:4a:
da:51:ef:49:ac:68:26:a3:cc:cf:6c:35:d4:14:36:
30:4b:f4:02:cc:9a:88:a3:b8:60:11:1b:f1:73:70:
46:d7:09:60:cc:63:f4:34:4a:b1:0c:33:22:d4:f6:
c6:c8:c9:5d:4b:1a:9d:75:91:63:45:8a:16:da:41:
b8:cb:2d:20:15:18:14:b3:71:3e:0c:34:ff:36:f0:
d4:a1:a6:c4:30:c4:db:a3:a8:1b:b1:7e:a7:fe:d7:
bb:d9:5f:bf:14:37:5d:69:21:92:be:40:82:63:01:
31:2e:68:21:4b:cc:8c:a0:59:54:9f:3a:36:4a:18:
b5:bc:33:6e:c3:ce:85:73:d5:84:1e:9c:c3:b7:c1:
73:78:2c:c6:cc:9b:2b:29:c2:14:b9:16:28:98:f4:
44:34:81:69:95:74:07:b5:d9:4d:e2:7c:74:38:c9:
a8:25:e8:12:94:d7:de:35:90:85:6c:37:e5:cb:0c:
46:83:16:fd:e4:de:50:47:5c:1f:58:94:ae:ad:62:
e3:3a:e8:a3:2f:23:b3:3f:df:8c:26:0d:4d:2f:20:
bc:24:15:6c:a7:88:73:92:2e:f4:58:03:a3:49:7f:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:C4:8D:C8:CD:D7:F6:CE:B1:23:C0:88:9B:BE:F3:93:BC:D3:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23c0b7f0-1c72-3d28-8175-39867f3b6e44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:a9:b5:da:ef:0a:66:08:46:67:af:32:a2:c9:3a:c2:ca:9c:
ca:0b:7c:f1:bd:ce:22:5c:d7:ac:be:d1:20:b2:a0:f8:4c:8b:
21:67:49:61:5c:1c:f3:a2:cf:c4:e1:96:c5:ad:25:ad:a7:18:
61:01:b6:60:bd:ce:81:84:c6:60:16:2e:c9:28:a5:b0:73:34:
80:50:ce:4b:50:66:43:99:78:4d:d0:94:2d:9e:b0:3f:7e:37:
ed:14:2b:30:32:4c:a7:2a:e3:51:02:14:96:6e:4f:9d:80:b4:
18:14:db:14:a6:f5:25:57:eb:dc:50:e0:3b:67:dd:d7:a8:da:
c0:3e:01:fc:89:c2:b2:e9:19:4b:42:19:76:ae:97:b0:88:ac:
2d:34:43:f9:6f:47:53:cd:24:af:f4:e7:22:2e:52:0f:c9:e2:
38:64:a9:82:7a:6f:db:67:c1:a2:1d:0f:26:94:10:c3:5a:56:
39:2f:4f:2b:6b:9e:fd:04:17:f6:4e:fa:0b:ee:7b:9a:a2:76:
42:6a:2f:5c:a2:7e:a3:19:2f:8d:d3:18:30:41:bd:f2:47:61:
63:a3:ae:c8:eb:cb:6e:93:e0:f3:6c:f3:ab:12:44:91:e1:97:
ad:f4:8c:b8:40:25:17:43:b4:4a:2a:be:b9:bf:8f:83:bc:53:
82:d7:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:11:57 2026 by rpki-client