
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3611e38c-459c-3dc3-ac3d-61dc37bfe16b.roa
File: 3611e38c-459c-3dc3-ac3d-61dc37bfe16b.roa (raw, json)
Hash identifier: g1aR+Ej+05slOPXxyIXhEva56Vd7+6dX5PRV5h1owLU=
Subject key identifier: F0:75:D3:48:9A:5E:05:0A:82:5D:9B:F7:7E:A3:DE:62:F4:5E:A1:94
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D40CB9D4DC9747BDE2FA23760
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3611e38c-459c-3dc3-ac3d-61dc37bfe16b.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 16552
IP address blocks: 156.154.38.0/24 maxlen: 24
2610:a1:3014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:cb:9d:4d:c9:74:7b:de:2f:a2:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=f7c228be-07fa-4423-8461-412fee54ab97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:38:9e:fd:06:7a:e7:e8:9e:9b:ea:4b:b7:
fd:83:86:c0:21:89:f2:fa:23:fe:c9:b3:5f:a3:22:
2c:b4:04:80:5a:bf:3b:e7:d7:2c:b5:4e:9e:d7:4b:
09:c2:fa:bc:98:ae:2f:9b:13:3d:10:b0:ad:11:c7:
a7:0d:17:fc:2e:d4:55:4f:1e:44:c7:52:05:7e:b6:
39:ac:1d:75:5a:d1:09:94:3b:04:cd:95:f5:17:c6:
e4:fb:72:b7:63:c8:3c:0d:b8:5c:0e:85:fb:94:81:
82:8d:88:7e:c0:ae:9e:14:69:66:9b:85:bb:66:be:
37:38:b2:18:6d:20:b2:e3:a9:fc:41:87:5a:59:f3:
2e:05:ca:a2:19:74:80:68:89:2a:86:94:48:e7:99:
4b:72:3e:e2:ee:06:5c:e0:98:c4:f3:03:ec:6a:4b:
93:f7:79:2d:12:16:63:df:8d:e4:23:f3:1e:be:64:
aa:a9:a3:de:70:e3:b2:06:2c:90:5a:4b:2d:7c:e1:
ed:aa:45:67:8e:90:8c:17:18:12:60:ad:a6:16:b9:
13:b1:48:bc:19:01:28:59:69:8e:6b:f9:bb:b6:a4:
6f:40:8e:98:c5:86:e1:2d:d3:eb:78:ad:d8:c2:89:
8a:08:d0:de:0f:3d:ba:db:d9:57:8d:74:90:41:53:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:D3:48:9A:5E:05:0A:82:5D:9B:F7:7E:A3:DE:62:F4:5E:A1:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3611e38c-459c-3dc3-ac3d-61dc37bfe16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.38.0/24
IPv6:
2610:a1:3014::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:b8:82:eb:be:d7:97:f8:bd:9a:eb:c1:8b:23:59:d4:e6:d1:
99:df:92:8e:52:63:18:fb:f0:a7:bb:92:eb:7c:68:12:21:ad:
2e:a1:21:50:83:c4:f4:a2:bd:7f:bc:81:25:01:f5:cd:bc:5f:
83:eb:32:8d:46:88:af:a9:26:82:ce:2d:d1:bb:c9:f8:f2:55:
7c:ce:b7:3e:03:6b:dd:56:df:e2:15:d4:f8:3f:07:71:af:28:
1e:22:90:bd:7c:23:b8:12:2e:05:9d:98:97:6b:72:21:30:9a:
4f:7a:1d:59:ef:d3:83:03:71:6d:4f:a9:08:72:7f:73:58:d1:
25:a4:ac:b4:76:7b:a0:c3:a6:9a:8b:6a:81:bc:bb:89:3e:09:
38:79:67:84:1d:f0:9d:e4:68:30:8f:4d:93:8e:83:9b:df:90:
af:f4:1f:8d:de:0d:4d:b7:de:b5:33:e4:61:d9:3d:ae:b5:52:
c0:e0:a0:42:d1:ed:d3:f2:6d:15:0a:96:2d:da:11:40:03:b3:
f0:ef:ff:6a:77:13:8c:e7:19:db:18:ea:52:eb:a3:3b:ba:6e:
02:fa:4f:1e:a1:94:7f:eb:23:f8:4f:fe:bc:2d:24:28:ce:31:
0e:68:f8:fe:c6:f2:7f:14:81:4a:2d:e6:2e:e8:4d:bb:3a:b4:
95:62:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:45 2026 by rpki-client