
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa
File: 2bd12218-5d8d-3d21-a703-8278903b4dd8.roa (raw, json)
Hash identifier: pfNg3BCJD2rYra1+7EHcYyH/5UCVg6wvp7ydtVOQ7GA=
Subject key identifier: AA:E1:09:07:64:94:B1:51:28:5C:60:01:47:15:44:71:1F:00:C5:39
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D09128E1EC20CF46B78655BC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397226
IP address blocks: 156.154.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:8e:1e:c2:0c:f4:6b:78:65:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=2340dca7-ce14-422c-9795-382a68bb9af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:3d:7b:dc:1c:58:76:d1:53:0b:31:3a:06:
5b:37:3c:ed:8d:0a:b4:6d:7b:ef:8e:5b:f4:80:d6:
87:df:5b:b6:2b:bc:08:e6:54:44:15:4e:fd:46:7d:
f6:c6:82:66:85:1f:1c:df:54:98:0b:20:c3:9c:72:
d2:50:12:bb:1d:14:e4:58:4c:37:37:9e:51:f6:b6:
3a:e9:37:fe:15:9c:fc:45:a1:14:98:df:33:8e:ba:
13:3e:d4:c0:11:e2:37:f1:26:5d:49:87:04:bf:e4:
15:06:be:2b:5c:3c:dc:2e:de:88:1d:df:79:5f:21:
76:5e:d4:7b:3d:fd:f2:b4:42:fe:75:d9:a4:f8:31:
2f:06:f7:bd:4f:6e:63:3a:d6:bf:e9:a4:d0:b3:c5:
9b:8b:6e:ea:1d:5f:43:f5:98:c0:76:cb:9c:da:a0:
50:f1:57:cb:29:b2:20:57:e3:c2:e1:48:a4:e1:a3:
4e:5f:b4:66:70:fd:a4:7b:37:75:b2:8c:72:74:b0:
63:53:15:0f:87:2a:f4:96:fb:93:59:1c:21:03:93:
2a:32:67:25:06:7b:94:2f:74:93:8a:86:f5:7a:16:
8b:2f:b5:6b:15:ae:17:88:06:21:11:c2:f6:f2:69:
27:1a:43:a9:d9:98:f5:12:24:d6:5d:19:0e:bd:3f:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:09:07:64:94:B1:51:28:5C:60:01:47:15:44:71:1F:00:C5:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd12218-5d8d-3d21-a703-8278903b4dd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:7a:e7:cf:72:b2:49:17:24:3e:aa:18:f0:8b:86:8d:a3:2d:
fc:2e:1f:f9:a0:b2:a3:2c:b1:81:f6:89:8f:89:01:b5:93:88:
66:8c:32:89:e1:86:5d:36:df:65:97:43:de:c4:78:a3:71:0c:
f3:ad:05:fe:70:77:23:f1:bf:9f:7f:0e:b2:c5:f2:c4:0e:0e:
5f:1e:53:a3:56:e7:1c:b4:68:cd:8a:28:63:e7:7d:81:73:3b:
64:6e:c4:cb:15:20:64:5b:b0:bc:2b:d7:d5:88:1d:49:a1:69:
d8:61:b3:9a:8f:b2:6a:87:7f:a3:0f:db:27:ad:29:e9:6b:96:
22:70:b6:3c:4d:d1:73:ce:70:19:c2:be:e7:2a:96:93:b3:e1:
be:45:41:e3:88:b6:71:e2:0f:86:9e:1b:82:1c:90:8e:1b:b9:
25:23:22:c0:be:c7:b8:b6:a6:c8:f5:39:f7:de:3f:8f:8d:d7:
ec:66:53:28:78:3d:0d:51:c4:4e:49:6f:1d:20:08:d7:30:6a:
0b:55:45:5b:80:85:3f:d3:92:a0:13:f9:f5:d0:6f:e8:a3:83:
10:e1:32:a3:3e:37:c7:ea:d2:11:4a:48:20:bc:9f:4e:df:0a:
20:08:5e:14:ac:67:1a:aa:79:9a:8a:b3:e8:bd:76:b6:7e:70:
c8:69:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:17 2026 by rpki-client