
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c8622a2-7743-3c56-a580-d90c6e001798.roa
File: 0c8622a2-7743-3c56-a580-d90c6e001798.roa (raw, json)
Hash identifier: mfdSunOce+KAX8U79iRRHqwIVggNRzffkC8o9lAwfts=
Subject key identifier: 67:78:9F:8E:D2:74:A2:6E:4A:29:22:95:5D:F9:D5:EE:D5:0B:58:58
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D091278D3603E042E670578B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c8622a2-7743-3c56-a580-d90c6e001798.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397243
IP address blocks: 156.154.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:78:d3:60:3e:04:2e:67:05:78:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=4f1d8b79-8a8f-40de-a087-788b0307dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:11:f6:64:a6:42:9a:11:c5:e6:bd:e0:19:92:
9e:b9:73:48:b2:3b:c0:dd:a6:49:f0:44:64:12:dc:
b9:ff:e1:5c:5a:88:24:74:f4:d8:8e:93:34:36:d1:
cf:62:8e:6b:4b:2c:ea:d7:ff:52:41:b8:55:bf:0d:
e9:32:a5:3e:36:55:07:98:6a:3c:32:eb:5a:0d:59:
4b:38:e0:b9:d7:07:ed:7f:b2:f4:eb:75:67:1f:70:
13:16:00:5d:ac:f4:bc:df:bb:6a:58:0c:52:62:1d:
0b:5d:95:80:8b:21:79:cf:ee:93:8c:36:93:51:a4:
6e:b0:a7:29:92:b9:43:61:96:1b:fd:49:c7:5f:b9:
5e:3c:54:14:3b:18:6d:04:9f:eb:e6:f6:79:d5:66:
54:95:b0:c5:bd:ea:d0:b7:7c:58:67:4f:21:96:5d:
2a:91:92:13:28:a8:0b:c3:fc:ac:98:42:1b:3b:f2:
67:80:2f:11:23:d8:37:56:a1:ce:01:a5:d6:dc:b4:
c7:bf:6a:bf:59:dd:71:3b:1e:d5:8d:01:82:10:51:
2b:01:65:28:e4:1a:dc:27:21:e8:9c:10:d0:6b:a5:
31:9a:4a:ae:13:0a:12:1a:71:e2:37:6d:f2:c7:dd:
4d:4d:88:28:b3:ca:06:fb:04:02:0f:ff:ac:06:4c:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:9F:8E:D2:74:A2:6E:4A:29:22:95:5D:F9:D5:EE:D5:0B:58:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c8622a2-7743-3c56-a580-d90c6e001798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:97:3a:46:d8:3c:ba:bd:8f:4a:41:3c:f3:c3:63:55:be:64:
76:3e:de:ef:81:73:d1:c9:62:f9:24:e7:62:88:f9:b1:ba:f2:
0f:49:4c:b3:1e:4d:73:2b:76:bd:a9:f7:43:ec:93:0f:a9:52:
51:bb:0e:2a:45:39:dc:6a:f5:8a:f2:f4:f2:11:fb:59:1e:15:
19:92:15:26:fb:aa:d6:a3:eb:06:35:a1:de:24:6d:d0:9d:52:
3f:be:7b:70:f5:8d:ea:a8:8a:1d:06:d6:8e:1c:04:3b:d3:59:
60:18:fe:6d:53:ad:66:49:d3:a1:b5:51:79:84:fd:cc:f0:9a:
c0:0b:f4:b7:78:34:2b:47:5a:8e:95:99:fb:2a:0a:e6:b1:ae:
a0:2d:3b:0d:ae:df:87:52:ed:f8:35:2f:7c:b9:31:95:13:c1:
e6:85:2b:e9:cb:c7:51:9a:0b:da:5a:77:a1:3c:a2:f6:08:68:
40:e5:7d:22:e4:86:97:69:e9:88:41:60:88:5f:bd:0e:c1:df:
70:e3:8a:14:8d:bd:1e:c9:93:7f:f6:30:cf:c2:ee:c1:ae:60:
df:2a:0d:27:00:93:c9:7c:53:c2:53:b0:09:b2:5a:37:97:b1:
58:c8:0c:5a:e9:8e:ab:97:0c:b7:64:d7:44:2f:94:61:7e:6c:
a4:1a:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:41 2026 by rpki-client