
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa
File: 3268be4e-f8cb-32f8-b22e-958b16262926.roa (raw, json)
Hash identifier: nEGcXKjrEOACNDxEI3ThvQuQKeOTQ9X2bA+tO9TOA3g=
Subject key identifier: 32:02:EB:93:66:7A:14:79:9A:E8:4F:19:A7:13:44:AA:70:FE:D5:50
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D09128C82C9606F1315421980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397234
IP address blocks: 156.154.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:8c:82:c9:60:6f:13:15:42:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=884e4936-183a-40f5-90ba-a74aea92c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:41:78:26:cb:95:51:4d:82:79:46:5d:d0:
d7:66:a4:1a:0f:ff:b7:da:c9:6e:a0:df:7d:ef:51:
60:f8:23:e1:b8:09:67:51:c3:9f:b8:f6:e1:c9:9b:
ae:fb:44:4e:55:8d:e3:42:1e:d8:35:d8:21:d4:08:
0f:b0:15:31:96:f8:de:e3:f6:09:e6:5a:40:b7:1e:
11:5c:6b:1c:f7:ed:da:e7:c6:34:df:4e:21:82:33:
c5:67:cf:38:41:66:13:25:97:58:5c:ea:ec:94:9b:
40:23:9a:09:49:d7:52:8f:c7:91:1c:8b:68:21:32:
0a:09:75:31:4e:8e:4a:8f:fe:c3:53:b0:56:52:6a:
b0:e8:84:fe:43:32:7d:45:00:37:08:ce:42:c8:b4:
0e:73:8e:2b:3a:f5:9f:3c:f2:43:3a:4f:02:4d:4a:
6a:3c:aa:bc:20:e9:0b:37:40:02:a5:0b:7e:bf:0f:
0e:5c:9a:6e:9d:21:8c:6a:d5:e0:54:5b:5d:8c:fc:
80:fb:e0:3f:43:f6:1b:0a:3f:d8:45:0a:af:67:68:
ae:e6:a4:3f:e7:dc:c6:42:b4:b2:d0:89:64:83:3c:
b0:37:15:2b:03:f7:87:f2:53:13:fc:fc:59:70:8b:
e4:01:d4:92:51:91:6f:54:df:6f:6f:1a:4b:9c:eb:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:EB:93:66:7A:14:79:9A:E8:4F:19:A7:13:44:AA:70:FE:D5:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3268be4e-f8cb-32f8-b22e-958b16262926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:cc:fa:a3:61:11:e2:0d:f8:87:dc:da:32:19:03:cf:57:8c:
cb:b5:8c:ea:d5:9b:3f:1c:dd:fe:73:37:2d:50:9e:0a:bc:f2:
1f:f1:81:08:dc:35:65:dc:a8:86:39:1f:7b:9f:3c:1c:a3:33:
de:a6:76:1d:1c:ed:3a:c0:77:25:e2:5a:13:c0:f5:ae:14:07:
80:20:d8:3e:84:09:5b:11:a9:ee:8d:ab:0a:6b:1b:49:e0:b3:
3f:56:61:12:a8:4f:69:bd:2b:49:87:e8:52:8e:2a:20:36:74:
cb:13:ad:d2:24:2c:70:84:a6:97:6b:de:40:98:0f:41:1b:dc:
57:74:50:2b:22:fe:99:9b:3c:4b:c5:3b:1d:ae:34:64:13:f8:
ac:b7:45:fa:c1:73:a5:db:62:da:d4:41:02:72:2c:70:cc:78:
f8:df:13:03:5d:47:a0:b3:a9:83:2a:2a:88:5d:9d:aa:a3:0e:
85:d3:8d:88:85:a8:26:bd:8f:cb:b6:4d:73:a4:3c:42:ce:63:
bf:ff:04:e9:ff:44:30:d5:5d:39:3f:9c:ea:f8:c5:78:f4:67:
a5:19:b2:14:fb:ba:c3:62:44:3f:76:b1:ef:b9:5e:e7:46:ba:
85:13:08:f6:36:70:96:e5:ef:31:37:50:16:6f:09:0e:93:9c:
e2:58:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:09 2026 by rpki-client