
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a3aee65-0db1-3cad-a8d4-3b53f38bbe66.roa
File: 9a3aee65-0db1-3cad-a8d4-3b53f38bbe66.roa (raw, json)
Hash identifier: kePZA92LaoZNBtKoDOhq/yluOyEkQPlgQ7rpDbeM6h0=
Subject key identifier: 38:23:A0:74:69:F5:39:94:A2:8A:9E:84:FD:29:9A:A8:25:5C:6B:7A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EA792ECDAAC3FB6ADC984A880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a3aee65-0db1-3cad-a8d4-3b53f38bbe66.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397222
IP address blocks: 156.154.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:ec:da:ac:3f:b6:ad:c9:84:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ff7d561b-558d-4886-b119-ade8d5210e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:a2:4e:0b:a8:15:10:dd:34:fc:53:3f:02:
ff:42:5b:5b:5b:fe:a5:a5:db:cd:f4:07:19:8f:f7:
a3:03:e8:78:13:fa:32:d2:c7:d2:d7:8e:67:f3:89:
84:77:ea:51:49:31:ce:10:7b:27:cc:e6:d2:45:0c:
e4:c4:18:4d:40:35:98:1c:35:15:0f:07:fd:95:a8:
8e:27:72:5e:71:94:bd:ca:8a:c1:cd:fb:4f:8e:0e:
d3:9a:4e:27:67:41:ec:5f:63:8a:c8:a7:f3:a2:36:
36:85:f6:28:c8:fc:88:8c:04:d7:85:28:74:44:c2:
9e:6f:d6:e1:46:bc:cc:4e:dd:7c:ed:66:b4:53:2e:
ba:a5:65:73:f3:c6:2c:dc:0f:16:6b:87:89:e4:1f:
ab:fd:ca:13:ad:da:e4:83:2a:da:53:9b:5c:1e:75:
b0:73:b1:40:83:66:cf:13:e0:0c:02:e9:cd:0b:14:
14:21:66:99:7b:3d:d4:4f:ee:9f:3a:89:1c:06:43:
ee:8e:15:92:2f:7d:ce:d1:8b:e7:84:69:e7:7a:89:
70:a4:24:b0:84:7d:1f:dc:5b:dc:22:de:45:95:c5:
6d:98:af:a1:52:36:3d:59:8d:ae:6a:dc:8e:8b:44:
bf:9c:f1:6b:18:83:ac:8e:bd:1b:04:d9:53:c2:e9:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:A0:74:69:F5:39:94:A2:8A:9E:84:FD:29:9A:A8:25:5C:6B:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a3aee65-0db1-3cad-a8d4-3b53f38bbe66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:78:eb:70:a1:44:2c:08:d9:6b:f9:f5:9f:e0:5b:11:b0:86:
e4:c8:80:96:64:da:b2:c2:ec:da:3f:de:1e:b2:bb:4e:de:e9:
6c:01:a9:5f:f4:f3:e9:22:75:9f:37:fe:21:18:91:71:63:d8:
df:db:ab:d3:3d:87:ee:4d:97:aa:f7:16:aa:c3:b5:d5:99:97:
f1:f0:2b:29:41:8f:4b:4d:3f:13:ae:54:4b:53:c9:43:84:dd:
9c:ac:18:0e:91:bc:33:41:1d:ef:91:7e:63:28:09:7a:77:51:
3f:8c:da:43:2e:71:3b:2e:8b:6d:16:9e:d8:b4:a0:b5:c2:f4:
11:1b:f3:1e:26:f9:91:5d:07:f7:c5:08:1e:39:e7:de:d6:e3:
be:f4:80:a9:69:7e:de:10:bc:d8:54:03:cb:1d:31:f4:fd:82:
3b:48:20:7c:73:3b:09:b7:17:48:19:8b:0a:f3:42:62:f4:b1:
96:75:24:5a:de:63:10:2b:63:46:69:ba:77:c3:91:2d:62:95:
55:1c:6b:24:c7:a2:0e:11:18:e6:d2:df:ee:5f:dc:71:7f:68:
37:53:92:3f:be:ad:fb:5a:14:ea:52:74:c7:74:34:8f:bf:69:
74:a4:19:3e:71:91:e8:a4:5c:40:01:01:42:1c:34:d9:63:5c:
07:77:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:41:45 2026 by rpki-client