
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa
File: 4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa (raw, json)
Hash identifier: NRN50ox+idd4vQP0FgCEqiUcx8WT+Fm0zlpvaOiSZ0g=
Subject key identifier: F6:FD:DF:A4:81:75:30:2A:43:1C:00:03:7C:09:29:FA:31:A5:9B:E8
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D09127B823A56FFD758035420
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397222
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:7b:82:3a:56:ff:d7:58:03:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=ad0d119d-e94a-4639-a5e5-13e4e37a546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:23:f0:b9:b0:f8:7c:61:b8:38:bd:5d:77:
63:38:0c:31:d9:b7:14:d0:11:eb:f2:1c:9f:ee:6f:
3d:e0:6a:ba:57:94:f5:1a:eb:b7:4d:aa:c1:a8:88:
0f:f2:3e:dc:ca:96:df:2d:68:c1:ee:6a:b1:09:9d:
b1:7d:6c:bc:cf:56:3b:1d:e2:f2:8c:13:0d:c7:6f:
8e:56:17:cd:87:7d:92:55:59:ab:b8:fd:61:58:87:
cf:11:4e:2c:9d:5b:57:aa:b8:79:7b:1b:27:08:f7:
cc:8e:c3:90:d4:a4:4d:16:44:dd:82:4a:e1:e9:73:
d8:32:d1:b8:21:77:fb:aa:c8:ba:94:b3:37:90:e3:
79:eb:20:32:29:10:56:1c:cc:cd:20:2a:38:e3:e6:
3b:12:b4:a1:b0:ba:73:2e:46:42:1c:28:01:5b:70:
e1:57:39:ba:88:65:07:3f:85:06:77:1d:65:fb:5c:
77:8e:68:44:36:56:40:88:77:99:7b:cb:e9:75:bb:
04:91:5d:b1:ee:f7:d5:38:c2:34:65:97:50:56:9d:
1c:49:d1:87:3d:15:ae:97:3e:16:6f:07:c5:e2:c4:
19:b4:45:89:6d:5c:df:49:b8:2c:4a:82:20:e3:35:
a4:bd:c3:73:6b:fc:a2:79:cf:f4:90:3f:af:bd:8a:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:DF:A4:81:75:30:2A:43:1C:00:03:7C:09:29:FA:31:A5:9B:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b32809e-d13d-3798-83a7-db35a9b0d9e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:9f:74:f8:e5:3b:b4:3c:b0:72:ce:72:54:e4:24:52:56:6f:
8b:de:46:95:bc:ad:aa:6d:b4:7f:df:fa:3a:7a:5e:b1:7c:2b:
5a:41:41:29:78:bf:5e:80:5b:f8:12:b2:f0:a0:4d:ce:d5:7e:
fa:c8:47:08:9b:a7:0f:ff:72:69:82:bb:42:ac:45:5d:ad:7b:
10:23:41:0e:94:ac:a3:e9:ca:f7:9c:40:43:08:23:66:b6:56:
3c:80:c8:37:7c:74:d6:67:e4:b0:2c:35:2e:0b:8f:37:8a:11:
1f:4b:96:e5:d9:15:22:d8:14:83:b3:9c:ac:90:b9:ab:13:fd:
62:f7:c7:8c:6b:32:67:9e:eb:94:8d:1e:ad:53:2d:01:65:4b:
22:3f:c2:79:b1:81:52:71:bd:9a:8a:be:90:84:b0:9e:1f:13:
24:b9:1c:ff:92:24:35:7a:a8:3c:fb:15:d9:ce:19:5f:39:53:
ff:64:63:08:76:6e:59:33:b3:9c:d1:56:9b:f2:9a:e0:d8:5b:
48:96:75:db:bc:31:43:ef:db:da:42:62:1a:f6:ec:f3:19:0a:
c6:58:f4:cb:96:cd:47:9e:60:8a:0f:f8:69:fb:9a:21:1c:c1:
1d:25:d4:79:2c:49:6d:3a:de:29:b4:15:2b:e3:fe:2a:ea:67:
83:1d:89:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:18:33 2026 by rpki-client