
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d9aacbd-c296-301a-823d-a7ef3120a74a.roa
File: 7d9aacbd-c296-301a-823d-a7ef3120a74a.roa (raw, json)
Hash identifier: gyug5jRcQZyEoDIsGX0qCfv8NISGRx2TsYr3F+K6z7Y=
Subject key identifier: 0E:C1:6D:F5:B5:69:F3:37:14:51:AF:28:60:99:83:85:78:EB:AF:10
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584BB2F7E8FE4B66CB81D7BFBE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d9aacbd-c296-301a-823d-a7ef3120a74a.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397235
IP address blocks: 156.154.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:e8:fe:4b:66:cb:81:d7:bf:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=c8d6133a-9e71-46b9-affc-bdb24d8853b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:5e:cd:f1:e9:ff:06:1a:8c:75:32:26:a3:
80:9f:5d:57:90:1a:59:a8:6d:f1:b5:8f:51:63:eb:
95:43:99:79:76:d7:78:9f:08:72:dc:76:9e:e8:0d:
86:d8:2f:94:2c:98:98:24:68:13:af:a5:ef:6d:24:
08:e2:39:25:93:64:73:8f:cd:b4:4f:16:ac:3d:f3:
43:41:b6:cc:71:93:a7:00:67:4b:21:b6:ca:78:10:
b2:26:a4:c8:e3:86:a8:e5:a4:93:dc:56:dc:f1:3e:
94:0a:57:ad:7f:ce:15:e8:36:f6:48:a3:79:dc:9c:
c1:f5:91:5f:79:7f:db:af:54:d8:41:86:9e:a0:3c:
6a:be:9c:92:c7:5c:8d:7b:3f:4c:ce:3f:ac:df:a2:
c9:ee:94:b4:67:cb:f6:f1:6a:ee:83:fa:c4:3b:ab:
53:9e:69:c3:38:09:eb:cb:53:28:a8:c1:88:dd:31:
40:ba:57:c7:cc:73:44:06:28:dd:f1:17:77:34:2c:
b8:f5:e2:fc:b5:63:db:0a:85:ce:97:26:30:e1:09:
02:ce:9b:5a:11:d7:ca:59:5d:ce:c1:60:28:20:bd:
a3:6a:5b:a4:9b:bd:63:1e:7e:a9:7c:34:6c:85:24:
1a:ac:b1:68:d6:18:81:b6:7e:92:29:e1:b9:1c:cd:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:6D:F5:B5:69:F3:37:14:51:AF:28:60:99:83:85:78:EB:AF:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d9aacbd-c296-301a-823d-a7ef3120a74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:7c:61:1f:b5:9d:c7:13:f2:e2:f2:39:f2:d6:94:dd:df:cc:
9b:10:23:2c:a4:70:21:3a:50:b8:f8:df:2c:e5:3c:da:89:c5:
7e:ad:5a:e2:7e:93:da:36:81:5f:9b:db:b9:e4:6d:df:37:97:
23:cc:3e:25:92:37:5f:b8:0d:c0:5f:3e:03:82:2e:8c:c7:f5:
5a:4b:3f:68:28:bf:31:b7:76:a6:c4:e1:33:3d:b1:67:9f:a0:
53:95:b7:e6:8a:87:70:01:ce:85:ab:3a:a8:29:c2:65:b8:d6:
e6:bc:a8:36:0c:61:3e:3a:df:a2:08:5e:95:b4:ea:d1:26:21:
43:4f:1a:27:d2:c7:43:d5:93:f3:61:c6:7c:99:c7:7c:59:e0:
3d:d8:7d:93:85:80:89:89:cb:4f:5a:0b:49:bf:6e:a3:ee:56:
a9:77:a1:70:8e:ad:7d:8c:88:a2:36:62:1d:ba:18:0b:1d:39:
bc:96:94:4c:d4:80:86:fb:d3:e6:75:02:48:21:db:cf:f3:8d:
d3:5b:6d:2a:ea:4d:90:3b:ff:c7:10:d0:d3:22:e6:a9:c3:15:
69:7c:3a:e7:73:d2:b6:be:eb:25:03:65:fa:3f:aa:ed:79:c4:
99:32:0a:ad:41:90:de:6c:b7:25:41:4b:eb:df:2f:ec:ab:73:
89:d6:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:19:19 2025 by rpki-client