
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57c47d9e-7488-3ed2-a7fc-fa510420f853.roa
File: 57c47d9e-7488-3ed2-a7fc-fa510420f853.roa (raw, json)
Hash identifier: 0bhdm5sheRX0UOg8ePnrNL54xkKt0OZhyElMaTNzS0Y=
Subject key identifier: B1:88:C6:61:CE:E8:E3:E8:27:19:48:E2:25:A5:1D:45:4E:0E:F8:CF
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584BB2F7EEFE927F7CF365A20DF0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57c47d9e-7488-3ed2-a7fc-fa510420f853.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397233
IP address blocks: 156.154.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:ee:fe:92:7f:7c:f3:65:a2:0d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=9c63c3f0-6efa-47db-b311-d667b4ce9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:8a:fa:10:41:e7:32:b9:2e:28:d3:ca:db:
03:af:0b:c6:cf:3a:f1:b6:25:94:54:c2:32:d5:d2:
b7:1b:11:99:4b:e2:a6:4f:a5:1c:32:b7:3b:fe:05:
0a:e9:46:76:b8:f2:a8:ae:fc:26:df:6f:4d:6a:6e:
86:6b:a0:10:f4:38:a2:c4:86:66:4d:14:4e:1b:0c:
dc:6a:b9:33:83:cd:dd:00:30:5d:4e:48:fb:2e:7e:
d2:9f:f6:cf:10:75:62:ee:31:b4:e5:3e:1d:a1:08:
22:d7:2a:b2:33:48:0a:9a:a5:bd:64:d0:f4:3f:47:
c6:44:48:9c:49:84:16:79:f5:7c:e8:0c:96:15:99:
ed:44:66:f8:e3:89:4b:7c:50:97:30:46:66:dc:df:
e6:6f:ca:6b:61:d1:db:d5:3a:5d:23:ed:4f:f7:96:
d9:92:f7:58:4a:73:c3:c0:9f:43:66:0f:c1:89:7a:
5e:c3:66:2e:ff:6a:8b:12:a5:d3:36:68:7f:fe:3b:
40:a5:51:2e:e8:af:5c:83:70:04:db:fc:6f:00:27:
30:6d:7d:48:e5:23:24:7d:98:6d:bc:34:d6:8b:b1:
51:fb:c5:cd:9e:ad:4e:28:ad:cc:09:30:51:88:c4:
26:9e:74:3e:c7:1a:56:2a:2f:bd:9a:3d:7f:41:31:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:C6:61:CE:E8:E3:E8:27:19:48:E2:25:A5:1D:45:4E:0E:F8:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57c47d9e-7488-3ed2-a7fc-fa510420f853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:40:4a:aa:7a:87:e9:18:79:2a:e1:55:8d:84:79:54:d4:b3:
52:ae:b4:a2:81:89:ae:8c:83:82:3d:45:91:77:f0:5e:e8:bf:
77:d3:8b:ee:28:f3:86:28:36:6b:af:ac:c4:7b:99:82:7b:7e:
2e:96:1a:13:7b:11:f0:95:fe:28:8f:40:55:81:3b:42:aa:aa:
e7:32:9b:0e:38:8d:d6:af:7f:4e:79:28:8f:b3:cb:81:ba:c2:
36:fb:0e:f2:0b:21:4e:17:a1:c4:ff:6f:1b:d4:d4:ad:37:1a:
0c:93:d3:4f:b9:b9:7e:f9:98:44:10:22:9c:3d:06:c1:8e:56:
ed:e6:c8:f5:94:47:2f:0b:61:57:be:b7:1e:f4:31:81:67:74:
04:38:78:0d:71:81:b1:fd:32:c0:60:3e:65:38:8f:b5:24:77:
2e:20:04:12:dd:96:62:1a:48:95:2d:bc:fc:cc:1c:27:84:66:
69:85:41:a0:44:68:c0:61:0d:d9:92:ab:80:11:9c:ba:28:ac:
af:6f:a6:d7:6b:ba:9b:ad:16:57:34:3b:b4:e0:97:b9:5f:86:
8e:fb:9e:e6:95:c6:d4:e0:c5:94:23:05:9d:33:69:55:4e:b4:
37:3c:1e:07:61:ed:1f:2c:7b:e0:2b:3b:ee:cd:9d:9e:37:e3:
57:51:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 10:06:20 2025 by rpki-client