
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa
File: 3889f598-5421-3478-87d2-e0ee742abe2b.roa (raw, json)
Hash identifier: HvUsWRx0dDlgqOEdo7N4u3yIqE/sk40cFuuMknj0Ask=
Subject key identifier: 4F:E9:96:6A:78:69:74:A4:DB:F9:FB:C7:5C:89:FC:FA:76:2B:71:20
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584BB2F7EE7A5606DBBFB68AB600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397225
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:ee:7a:56:06:db:bf:b6:8a:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=7556bbe9-41c1-4e74-ad63-29485b25e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:b6:ae:7e:f6:64:85:fb:88:d6:7f:9e:f5:
80:9a:bb:8b:73:bf:86:c6:73:a8:f6:02:93:c5:30:
1a:36:28:26:fa:1b:e8:b8:ba:58:0f:84:5e:db:3e:
46:2c:d0:bc:a6:84:94:aa:78:b5:fd:b3:c8:83:ce:
ef:f8:d1:fb:0b:34:bb:c0:1b:8c:df:7e:4a:1e:46:
37:1d:7c:e7:7c:53:1a:23:b7:fb:6b:9d:20:a3:74:
41:3f:03:ba:06:28:d1:f2:bc:d8:0b:eb:7e:d4:2b:
e3:c3:ac:19:53:d7:a9:c7:72:fa:04:9a:1d:2f:b1:
a3:10:c8:61:98:a6:c7:b1:ff:d1:e8:0f:da:1c:69:
9d:ed:dc:45:bf:c8:89:33:f2:7b:66:ff:8b:b1:fa:
62:03:b1:c3:5a:e5:9f:45:7d:15:cf:d3:03:93:be:
f7:0c:99:ac:f6:d2:08:a0:74:e1:9f:82:61:71:c1:
66:45:70:49:86:0d:a4:c1:81:22:ea:ca:2c:5e:1c:
ea:e4:72:f5:34:54:4c:dd:60:00:14:fc:78:17:ee:
de:fd:0b:66:be:fb:2f:c5:8c:bb:80:f6:cf:f0:2b:
b5:78:08:cc:f8:ba:e0:f4:99:7a:06:d6:a3:3b:92:
d3:96:86:a6:09:e9:5f:d9:45:c1:e4:0d:67:e0:42:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:96:6A:78:69:74:A4:DB:F9:FB:C7:5C:89:FC:FA:76:2B:71:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3889f598-5421-3478-87d2-e0ee742abe2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:84:9c:5a:f7:34:ed:0f:d8:5d:29:0c:97:51:e5:c0:f8:05:
5b:5a:79:fb:a8:17:fb:c0:e0:50:4c:e0:1a:ae:f3:81:d9:1c:
11:48:fa:79:ee:8e:88:bb:55:fb:fa:01:90:34:35:c1:84:c1:
e5:98:79:bd:c9:4b:57:bd:53:65:3e:10:7f:88:04:c2:3f:55:
dc:1a:6a:ae:ae:34:94:67:d6:4a:20:41:71:b1:c2:19:ba:75:
f2:70:08:50:2c:ec:83:04:28:b6:74:cb:7e:15:32:9e:57:b8:
50:50:00:d8:af:63:51:ea:41:bf:b0:ce:9b:4a:7b:42:0d:a1:
29:62:4b:f6:56:14:18:e0:52:5a:c7:c1:c1:d5:ff:e4:b9:06:
6d:9a:76:1a:40:e8:84:1b:a9:e7:50:d6:c1:8f:4a:28:ca:e8:
f9:6f:ba:ff:54:1d:0f:da:51:b7:f2:35:00:3d:74:d8:a8:0c:
fb:70:27:f3:5f:e5:3e:a9:07:b0:ad:ed:f2:ff:a2:ca:b2:33:
b2:28:00:f3:87:a4:b6:81:8f:a6:9a:f2:5e:f7:d6:2d:0f:56:
d9:e2:88:f7:2e:2a:c3:20:83:a2:2a:45:1c:ed:5a:47:7a:12:
6a:7b:3e:f8:bf:ec:30:6f:e5:e6:0e:ad:d9:36:f6:8f:b7:97:
f8:59:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:16:24 2025 by rpki-client