
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
File: def2f129-370a-3f3a-b968-b028953a0674.roa (raw, json)
Hash identifier: UCmsIe7RH3EvYGJZf8pdYrRRJDesUxmo3Xj/XczMAVQ=
Subject key identifier: 2D:B7:C4:6A:EB:B7:38:83:8A:01:46:92:6A:B2:84:A9:14:4C:84:2B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D746FF75835F076CA9D454000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397218
IP address blocks: 156.154.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:f7:58:35:f0:76:ca:9d:45:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=90b2eb9e-766f-4893-aaf7-54e39f42ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:f8:40:fd:17:87:8b:a6:1c:fa:f3:b5:cc:
96:73:b4:c4:28:4b:e5:0f:5b:b0:e2:8a:3a:93:cb:
97:00:7e:0c:1d:21:92:09:b8:6a:6c:78:39:4c:33:
a5:22:0c:29:81:7f:af:f3:fe:3e:35:79:f3:4a:40:
ab:2a:53:15:93:57:89:45:6f:c0:5e:6e:d1:0e:eb:
1e:1b:ff:96:a4:ac:22:63:d0:4b:b0:25:d3:d0:9e:
1b:bb:0f:b1:59:5f:bb:38:90:ba:c5:67:d4:df:ff:
c3:ea:b1:7a:65:21:3e:f6:36:71:2f:a4:c5:2c:a2:
d9:71:46:c2:e8:d9:47:ff:7e:9d:24:0e:1a:31:ff:
9e:2b:3c:32:b2:26:e9:c5:bf:5a:83:80:5e:01:a7:
ff:9f:14:b6:d5:97:2e:b9:0f:b1:6a:1f:f2:05:b8:
3e:ca:30:23:34:f4:15:01:d4:a6:51:ff:dc:cd:ac:
7f:7e:94:2a:7c:10:1e:ec:8a:88:ad:f4:12:96:21:
1c:91:cb:8e:9c:57:73:37:54:07:c1:0d:2a:71:bf:
e4:3f:8c:c0:e3:cc:8c:0b:6b:38:9c:df:8b:a8:02:
ab:d2:b7:cf:4b:60:a6:29:db:8c:6d:05:87:bf:ee:
71:b7:9a:06:b3:03:28:c8:1e:dd:b0:22:4a:cf:2a:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:C4:6A:EB:B7:38:83:8A:01:46:92:6A:B2:84:A9:14:4C:84:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/def2f129-370a-3f3a-b968-b028953a0674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:07:28:2c:4a:39:9d:0c:ee:99:f9:d4:61:aa:1b:4d:01:d8:
ad:a5:db:d1:aa:9c:cc:a5:19:f3:fd:49:6d:b8:05:a8:eb:b0:
ab:7b:73:1c:0a:cb:00:dc:7e:0b:f9:6d:1c:49:e5:50:73:81:
11:ae:af:fe:b8:98:3a:c9:0d:19:a9:85:d0:57:6b:42:50:40:
6d:22:d9:33:94:42:1f:fc:31:02:a3:e0:46:72:61:0c:36:c1:
79:d8:9f:f8:4f:be:6b:36:60:64:0c:1a:35:95:90:48:fa:2b:
e5:ed:23:9f:f5:8b:ee:44:da:0d:89:97:8b:14:f3:33:85:9c:
8a:e2:69:53:6e:6b:1b:5a:af:46:42:d7:1c:43:30:cb:29:c7:
28:4e:b1:26:7f:63:0a:8d:a3:d4:92:f4:6e:dd:7f:61:5f:30:
bb:ff:f3:ac:79:4b:af:aa:a0:7b:72:aa:16:15:3a:40:4a:78:
96:07:53:0b:55:2e:a5:28:67:ef:53:e6:cd:4c:a3:ff:71:dc:
ff:70:e0:99:97:4a:b7:a8:b6:6c:c6:3c:00:db:a3:c6:ec:ab:
37:2d:fd:46:86:53:5f:ee:44:b0:f1:2d:cd:73:30:e1:77:c6:
8e:ee:01:61:0a:e7:a7:20:8f:55:e8:67:1e:8d:7d:a9:00:b2:
64:bd:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:13:16 2026 by rpki-client