
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa
File: 7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa (raw, json)
Hash identifier: wCnEc3g9/MxVG7nvHuyt1k7AyAiA08ivzNHc5R6VHUE=
Subject key identifier: 30:F4:29:99:D3:6C:85:15:C4:4F:45:8E:87:8C:80:B7:FA:D8:E1:96
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584E54B4BE7519299A9A39507C80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa
Signing time: Mon 29 Jun 2026 09:00:12 +0000
ROA not before: Mon 29 Jun 2026 09:00:12 +0000
ROA not after: Sun 27 Sep 2026 09:00:12 +0000
asID: 397224
IP address blocks: 156.154.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 02 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:54:b4:be:75:19:29:9a:9a:39:50:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jun 29 09:00:12 2026 GMT
Not After : Sep 27 09:00:12 2026 GMT
Subject: CN=a0be860b-c8b2-4f83-b9f1-64fba9a96722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:91:1a:d2:a0:01:68:f2:ec:8b:ae:b7:a9:
61:65:d7:20:32:1e:fb:d0:d7:9a:47:4d:9d:50:ff:
79:03:4b:f3:5a:59:72:c9:c9:24:04:68:51:e9:9f:
8e:7e:11:de:96:79:e1:23:8e:e7:99:01:03:74:24:
3e:81:b3:c2:d4:c8:1d:6b:38:99:a7:1c:49:d2:99:
7a:de:a3:f9:94:9d:06:c6:cd:9c:de:6b:9d:87:ae:
39:c0:46:1a:48:93:50:83:e9:9e:21:9b:9d:39:1e:
24:b0:44:d7:27:95:3a:99:65:2f:5e:80:2d:bb:48:
b8:d8:d1:48:d9:67:1f:5e:e8:6b:21:4e:d2:10:86:
d3:82:34:0f:07:ae:2c:44:04:6e:d5:14:19:49:af:
63:34:ee:9a:64:e9:1b:e9:32:4f:ae:9a:44:9e:42:
99:62:ed:01:dc:0f:2e:87:74:57:f3:7c:87:ca:d3:
c5:19:3d:b6:5f:7d:08:40:43:01:37:fc:df:f3:b4:
0a:91:51:87:7b:50:2a:ea:8c:3b:ac:bc:dc:f7:55:
68:6b:15:82:8b:54:0d:95:9c:f4:cb:17:fb:73:f8:
79:bb:6e:b1:c0:a4:fb:f7:1e:ce:3c:74:a0:b0:ed:
28:82:8f:f9:8f:7e:d8:1e:d6:0a:a9:7d:58:07:a6:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:29:99:D3:6C:85:15:C4:4F:45:8E:87:8C:80:B7:FA:D8:E1:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7aa8362e-ccff-375f-ae46-c3c7d4177e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:32:9f:9b:30:49:66:49:56:c8:68:05:33:f9:47:9b:af:4c:
66:f8:d9:d6:5b:49:ca:df:f5:c8:c3:b8:ce:c8:20:ee:b2:0e:
c8:76:07:67:c3:93:de:fe:d3:c4:16:f6:d4:f6:b4:fb:4b:ab:
25:a8:04:26:ab:11:a0:6a:1b:56:bb:a8:a4:ce:ae:3a:48:87:
67:0f:e5:6b:a2:be:40:de:99:7a:e4:f9:22:94:37:77:9f:38:
0f:1f:b9:f5:1b:15:f4:62:f2:4b:ff:d2:b4:d8:a5:eb:06:35:
b3:3e:69:8f:d7:e8:41:39:23:d2:50:bd:9a:93:04:31:05:14:
7e:a3:3b:e9:7f:3b:9f:b0:ea:fb:22:a8:45:f1:b4:63:ab:b4:
22:84:76:5a:8d:56:84:d4:43:7b:47:8e:c4:4e:e8:f3:4d:01:
87:02:a8:2f:19:54:6b:e9:d0:20:46:99:1c:24:65:bb:18:e5:
df:25:71:f2:2d:b5:3b:48:7e:d0:c4:d2:9f:4a:3a:75:50:18:
3c:94:ff:13:cd:8a:f8:36:d8:55:2a:3e:f8:09:4c:c7:05:48:
0c:3d:80:2f:f2:4d:bc:4d:7e:ec:49:2e:e7:26:aa:2f:b1:49:
de:75:85:25:cc:48:50:3c:81:84:ea:1b:5b:93:a0:ae:9d:f3:
3f:80:72:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtL51GSmamjlQfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
YTBiZTg2MGItYzhiMi00ZjgzLWI5ZjEtNjRmYmE5YTk2NzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkyRGtKgAWjy7Iuut6lhZdcgMh770NeaR02d
UP95A0vzWllyyckkBGhR6Z+OfhHelnnhI47nmQEDdCQ+gbPC1MgdaziZpxxJ0pl6
3qP5lJ0Gxs2c3mudh645wEYaSJNQg+meIZudOR4ksETXJ5U6mWUvXoAtu0i42NFI
2WcfXuhrIU7SEIbTgjQPB64sRARu1RQZSa9jNO6aZOkb6TJPrppEnkKZYu0B3A8u
h3RX83yHytPFGT22X30IQEMBN/zf87QKkVGHe1Aq6ow7rLzc91VoaxWCi1QNlZz0
yxf7c/h5u26xwKT79x7OPHSgsO0ogo/5j37YHtYKqX1YB6au3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDD0KZnTbIUVxE9FjoeMgLf62OGWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2FhODM2MmUtY2NmZi0z
NzVmLWFlNDYtYzNjN2Q0MTc3ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcyn5swSWZJVshoBTP5R5uvTGb42dZbScrf9cjDuM7IIO6yDsh2B2fD
k97+08QW9tT2tPtLqyWoBCarEaBqG1a7qKTOrjpIh2cP5WuivkDemXrk+SKUN3ef
OA8fufUbFfRi8kv/0rTYpesGNbM+aY/X6EE5I9JQvZqTBDEFFH6jO+l/O5+w6vsi
qEXxtGOrtCKEdlqNVoTUQ3tHjsRO6PNNAYcCqC8ZVGvp0CBGmRwkZbsY5d8lcfIt
tTtIftDE0p9KOnVQGDyU/xPNivg22FUqPvgJTMcFSAw9gC/yTbxNfuxJLucmqi+x
Sd51hSXMSFA8gYTqG1uToK6d8z+AcpI=
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:27:52 2026 by rpki-client