
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34ba1771-09a9-3b43-9175-6445e6d2dd6b.roa
File: 34ba1771-09a9-3b43-9175-6445e6d2dd6b.roa (raw, json)
Hash identifier: djznsGJccGxGLtbhdEE0oYPAw6gZvM6P4IEQoEeFpAg=
Subject key identifier: FE:F4:A9:6C:6A:AB:88:CA:B9:34:DF:F9:40:B2:D3:E1:C8:4F:79:F2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D1B1A3FE4D9E3A8F602C56100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34ba1771-09a9-3b43-9175-6445e6d2dd6b.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 397224
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:3f:e4:d9:e3:a8:f6:02:c5:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=1442cf4e-e1d2-4ced-8259-b64f5e1873d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:f7:0a:78:15:22:88:40:93:84:da:fe:d8:
72:54:22:19:dd:23:4f:e7:b6:4c:a6:09:07:b8:6f:
74:6b:a9:35:6b:6d:20:98:f0:c0:f1:82:27:33:5a:
61:a0:7e:46:a6:55:3b:c3:86:aa:ed:6f:51:89:c6:
c3:e7:c9:b5:67:33:eb:96:6a:e7:75:39:29:5e:af:
33:95:42:64:a4:1a:36:e7:4a:82:e3:38:b0:44:2c:
63:c3:35:2c:85:8f:0e:a9:84:99:d5:c1:e4:4b:86:
9a:f1:ee:fa:d0:65:f6:fc:e2:17:e4:93:1b:96:36:
9a:14:a9:44:5e:59:56:d9:3e:9a:21:95:e4:b5:7a:
cb:2a:3d:93:35:81:08:33:26:18:9e:25:03:32:a4:
b6:fe:88:4c:97:ab:1c:30:f2:43:08:dc:c4:8a:42:
53:7f:86:b7:e8:73:c5:d2:14:81:99:ac:17:5a:fd:
66:02:28:a6:82:9b:cf:09:79:71:14:a1:ce:08:97:
fa:c3:1d:8f:08:8d:ee:7c:d6:1f:c5:d6:95:ea:51:
c4:1e:82:d8:6e:16:ad:96:85:a6:22:eb:b3:ba:1e:
98:1b:bf:35:b9:ff:82:05:ec:2c:6b:13:a1:c9:48:
bc:38:65:1d:68:23:65:a5:53:12:3f:70:e9:6c:74:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:A9:6C:6A:AB:88:CA:B9:34:DF:F9:40:B2:D3:E1:C8:4F:79:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34ba1771-09a9-3b43-9175-6445e6d2dd6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:92:16:76:10:4a:9b:b6:de:89:ed:56:4b:3d:f6:43:3e:45:
1e:bb:aa:cc:31:f1:67:45:17:37:eb:f4:0b:db:c3:ee:b0:7f:
35:df:df:80:12:a1:80:58:05:e4:e2:b1:92:5b:22:37:0c:33:
ec:74:e4:54:70:8b:5c:df:80:42:c7:2e:f9:61:c8:f0:87:c4:
13:37:7f:34:7c:03:5f:f3:54:3a:ec:f1:d7:ad:05:13:5a:5d:
78:7f:09:93:c5:87:b0:9a:78:53:33:30:76:ad:99:bf:c8:da:
25:b6:7c:0a:76:9c:de:6b:58:ab:58:cd:48:a2:6a:3e:ab:08:
93:d9:4b:e3:8b:27:61:7e:86:f0:9a:4f:71:2a:ac:46:f5:b2:
eb:33:5e:b9:9b:c0:9b:e6:27:5a:38:90:ce:47:44:49:9c:1d:
df:1a:4e:31:0b:d5:48:a4:95:c1:15:a8:03:45:18:e8:4c:0e:
d5:53:d1:d2:ed:f7:a1:79:90:97:9b:a7:cf:5a:b3:c0:4e:4b:
8d:00:7b:51:e4:74:8f:da:0b:e1:d6:bc:e6:ea:93:4d:5d:3e:
cd:0f:ff:e6:21:55:89:1a:01:4c:b4:14:f8:40:01:25:e6:27:
39:f7:cd:a4:82:ec:a2:40:60:98:c9:22:00:50:82:14:f9:5b:
da:16:83:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGj/k2eOo9gLFYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MTQ0MmNmNGUtZTFkMi00Y2VkLTgyNTktYjY0ZjVlMTg3M2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykv3CngVIohAk4Ta/thyVCIZ3SNP57ZMpgkH
uG90a6k1a20gmPDA8YInM1phoH5GplU7w4aq7W9RicbD58m1ZzPrlmrndTkpXq8z
lUJkpBo250qC4ziwRCxjwzUshY8OqYSZ1cHkS4aa8e760GX2/OIX5JMbljaaFKlE
XllW2T6aIZXktXrLKj2TNYEIMyYYniUDMqS2/ohMl6scMPJDCNzEikJTf4a36HPF
0hSBmawXWv1mAiimgpvPCXlxFKHOCJf6wx2PCI3ufNYfxdaV6lHEHoLYbhatloWm
Iuuzuh6YG781uf+CBewsaxOhyUi8OGUdaCNlpVMSP3DpbHQfjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP70qWxqq4jKuTTf+UCy0+HIT3nyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzRiYTE3NzEtMDlhOS0z
YjQzLTkxNzUtNjQ0NWU2ZDJkZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+SFnYQSpu23ontVks99kM+RR67qswx8WdFFzfr9Avbw+6wfzXf34AS
oYBYBeTisZJbIjcMM+x05FRwi1zfgELHLvlhyPCHxBM3fzR8A1/zVDrs8detBRNa
XXh/CZPFh7CaeFMzMHatmb/I2iW2fAp2nN5rWKtYzUiiaj6rCJPZS+OLJ2F+hvCa
T3EqrEb1suszXrmbwJvmJ1o4kM5HREmcHd8aTjEL1UiklcEVqANFGOhMDtVT0dLt
96F5kJebp89as8BOS40Ae1HkdI/aC+HWvObqk01dPs0P/+YhVYkaAUy0FPhAASXm
Jzn3zaSC7KJAYJjJIgBQghT5W9oWg10=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:02 2026 by rpki-client