
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa
File: d2a81c12-08b6-359b-bc84-38049230f42d.roa (raw, json)
Hash identifier: JQ+wI2Y2biDO8k5JTyx6FAJLjNGTXK0b0Hzo9odo3yE=
Subject key identifier: CA:B6:DE:72:03:71:84:AD:38:78:08:97:0E:2D:BF:FF:B3:AD:84:94
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584BB2F7F3D65EFDF4F1F12C5E40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa
Signing time: Fri 31 Oct 2025 01:00:30 +0000
ROA not before: Fri 31 Oct 2025 01:00:30 +0000
ROA not after: Thu 29 Jan 2026 02:00:30 +0000
asID: 397243
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 03 Nov 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b2:f7:f3:d6:5e:fd:f4:f1:f1:2c:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 31 01:00:30 2025 GMT
Not After : Jan 29 02:00:30 2026 GMT
Subject: CN=8eaa25d3-328f-4d6d-9d36-af79f7fdb9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:56:27:98:f5:ac:44:16:3b:09:5d:a5:e8:
ba:d2:61:aa:fb:a0:f0:96:ae:2f:0e:b2:82:d5:fb:
ef:c8:a8:0f:df:c4:c1:f2:20:43:da:bb:cc:2d:35:
85:63:9e:80:25:bd:49:b7:5a:83:80:d3:77:7a:4c:
a6:75:ff:ce:81:93:be:09:6a:61:55:60:f0:eb:79:
95:9d:49:5b:62:98:ef:d9:02:73:60:0a:43:92:5a:
51:41:ec:8b:6f:8e:7d:ff:18:00:cd:ca:28:16:29:
d0:4e:dd:37:51:f3:97:86:ae:a5:10:43:ae:2f:56:
2b:a2:f7:e0:32:e8:67:7f:34:be:fb:a9:83:ec:b1:
52:2c:30:f2:04:0e:12:b7:a6:6e:e1:1b:cd:5d:e3:
d3:65:10:ef:d3:9c:d4:72:ed:18:75:ab:c4:77:76:
03:45:b4:4f:a5:1c:a9:c1:fb:ef:69:ba:b7:09:a2:
c2:c0:57:3a:bd:27:79:5b:80:39:88:d7:b7:12:a7:
59:54:31:f9:25:ba:a6:5b:76:c1:24:46:f4:6e:13:
07:87:0b:ea:d7:85:c1:10:4e:33:ef:6a:49:2e:56:
c6:bf:c4:73:a3:06:34:1f:2a:fa:8d:07:3e:8b:76:
e0:20:e8:58:44:e7:77:8c:4c:e9:ba:92:7e:a3:a6:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:DE:72:03:71:84:AD:38:78:08:97:0E:2D:BF:FF:B3:AD:84:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:92:fe:82:64:bc:ee:2b:b3:1f:cd:1d:13:9d:88:21:d8:68:
6b:c4:3c:ed:e6:f9:d9:ff:0a:8b:7a:2f:8f:41:5f:d3:d0:58:
f3:07:29:f7:ae:e1:8e:90:32:85:ee:93:b0:15:68:02:9a:36:
79:04:4a:bd:e3:36:bc:99:d9:dc:26:46:6c:1b:b9:98:b6:d9:
2d:96:f5:87:99:70:8d:ac:c3:62:22:92:32:7e:de:55:e2:c2:
f4:04:8d:bd:9e:78:bd:21:46:69:0b:b4:f7:2e:cf:4d:8f:15:
b7:be:d7:e2:15:8c:3d:1e:1f:fa:30:0c:85:c7:7f:23:c6:1c:
3c:72:60:d8:97:ba:d6:30:dd:fe:de:1d:8b:96:2d:d5:a9:16:
e5:f1:c7:eb:42:60:12:ef:c9:74:6a:c4:77:b0:bb:35:cc:a8:
e3:a3:10:68:40:17:2b:39:2f:7d:49:a6:00:46:e2:06:ab:a9:
87:de:62:c2:0a:38:d0:d7:4c:08:2e:b9:e9:4b:38:21:31:b2:
67:4c:aa:14:88:3e:ac:b4:00:9f:f5:a1:a5:a4:89:50:3e:cc:
bf:db:ab:26:6f:0b:6c:10:7b:f8:ca:8b:11:cd:57:26:70:04:
b1:7d:f5:98:2c:ef:2e:92:1a:29:5f:c1:00:03:af:27:a0:43:
38:9c:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:45:31 2025 by rpki-client