
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa
File: 23529858-d4ab-30bf-a73f-38e8897de341.roa (raw, json)
Hash identifier: tPT/1wkQU2Bln8N1vz70c+yV/KXg45FuO5IbwdlfkPg=
Subject key identifier: B1:FE:5E:B1:09:3E:11:84:4C:A8:7C:B9:91:22:1D:BD:B5:59:A0:57
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F3FAD5A6F20D1E08763B79400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 19905
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:5a:6f:20:d1:e0:87:63:b7:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=cf1d837f-d96b-4435-88f8-c1cf345a4530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:61:e2:29:25:b8:51:0a:46:6d:40:9a:bd:
ac:40:d5:96:32:02:bc:39:ab:99:30:f9:ac:c8:aa:
ca:05:f9:84:57:77:ca:6b:2d:18:83:8b:5c:d7:f8:
04:6a:7d:b9:93:fe:e9:44:4d:88:7e:28:a5:fa:17:
39:48:c8:ca:f9:6a:dc:56:3b:54:5f:ee:1c:7d:0f:
4b:e6:89:f5:3a:0d:53:92:5b:2c:d8:82:6f:43:4a:
38:4b:04:a7:1b:e3:ec:f6:53:a8:44:a3:8c:b6:11:
5b:16:62:e2:92:be:46:a5:2d:9b:49:41:5e:d7:46:
a0:55:b1:b7:78:57:85:32:f6:18:aa:76:f3:c7:b2:
1d:66:d0:64:d5:b4:e5:8d:86:2d:4c:da:81:de:95:
37:c4:c9:c8:bf:ba:c3:58:d2:d9:64:dc:6d:71:73:
df:47:4e:4d:ec:33:0b:d8:11:7c:27:c0:f3:d2:25:
e1:85:d7:a4:53:c9:83:fe:44:10:20:91:61:45:fa:
cb:7b:e3:1b:c5:76:4d:b0:a1:66:f1:8e:2b:9c:41:
80:57:cd:8f:58:30:e1:e8:3a:31:e7:7f:b0:dc:32:
93:e5:0a:ba:65:08:43:9d:d3:4e:a4:c1:dc:59:5c:
2c:20:da:7f:a7:41:ef:1d:d3:02:ca:4b:7e:88:d7:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:5E:B1:09:3E:11:84:4C:A8:7C:B9:91:22:1D:BD:B5:59:A0:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23529858-d4ab-30bf-a73f-38e8897de341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f8:ca:78:7d:c6:17:40:39:ec:69:9b:58:2b:2e:45:67:7f:
55:4d:1a:24:d3:c1:b8:7c:56:2b:85:bb:43:9d:5e:b1:22:f9:
f9:88:e1:c4:10:8c:32:2a:98:af:68:94:3a:57:d0:eb:d2:82:
05:e0:e0:e1:b2:22:09:fb:79:6f:ad:4a:fe:19:b7:c8:94:42:
30:bf:a1:b1:dc:d7:b2:44:fb:ac:0e:66:28:50:ae:36:65:1e:
1c:e2:cc:64:1a:58:74:36:1c:3d:d4:fb:87:0d:cf:d3:4f:1c:
e1:7f:85:3d:db:22:61:42:cd:98:6b:3c:be:0b:d7:ba:22:3a:
dc:35:a2:59:53:1b:26:bc:23:26:35:01:5f:a3:2c:95:61:84:
87:f9:d5:c6:04:fa:8a:14:e1:0e:54:96:d6:7f:91:ce:1c:67:
75:0f:4e:90:4f:35:c1:02:c5:2b:de:6b:04:b4:2b:77:6f:07:
b4:b3:7f:fc:07:b4:ef:90:e1:4a:55:57:04:61:17:9c:46:80:
08:0f:ac:16:09:88:1b:f7:a6:56:2d:5b:db:69:6a:8d:e9:c3:
cd:1c:17:b6:4f:9b:ac:d0:f3:9e:3a:7f:88:b1:65:3c:56:4f:
28:2d:21:0e:d3:b3:01:99:5b:24:70:3e:e2:14:c9:48:04:97:
2a:92:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:11:19 2026 by rpki-client