
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3aee69c5-3777-3c44-85e0-19b8801d92bb.roa
File: 3aee69c5-3777-3c44-85e0-19b8801d92bb.roa (raw, json)
Hash identifier: 2aLkdAJeoT8vlWawjSKXHqS5ZcBmjDn841U9TaVs/Qc=
Subject key identifier: D2:47:AF:49:E4:49:04:B4:C3:7D:D9:A7:65:A0:46:43:A8:9B:99:94
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F4974265ADC7A7D46F00FA5C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3aee69c5-3777-3c44-85e0-19b8801d92bb.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 16552
IP address blocks: 156.154.122.0/24 maxlen: 24
2610:a1:3048::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:26:5a:dc:7a:7d:46:f0:0f:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b8143b7c-600f-433c-8690-3f37c87cc736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:5c:ce:c0:8f:59:22:01:0e:a0:94:42:b9:
51:5d:aa:68:cf:d1:2d:de:53:71:34:3c:b4:df:f3:
82:34:a9:a0:1a:8d:e1:79:2e:12:32:a4:37:86:e0:
e5:d1:3e:ac:c8:1e:9d:d8:37:73:2b:f2:42:8d:69:
7b:ef:f3:83:ca:cc:a5:3b:83:32:19:8b:ab:7b:87:
6a:d7:e8:3b:4b:93:c0:23:81:87:b4:e8:39:6f:05:
ae:c4:35:7f:85:3e:fb:69:f1:29:c0:2d:d0:65:48:
d9:e9:f7:f5:ec:48:80:39:ee:b1:68:6b:00:d9:a3:
ab:c4:6f:ce:ad:73:6b:71:77:b2:13:16:36:31:d5:
56:50:ff:37:89:e9:ad:38:a5:a3:8a:dd:1c:1a:d7:
1d:d9:83:02:d5:91:ec:a2:59:d6:94:52:cc:4b:ae:
7b:bc:fc:1c:69:8b:85:f4:69:f5:bf:7e:81:0c:54:
5c:85:73:6d:b4:49:c6:b5:4c:7d:0f:e6:90:7a:9a:
2a:ee:43:49:f2:67:3a:b0:aa:aa:20:b2:f9:6e:46:
33:00:2a:62:91:c3:53:c5:de:3a:30:4f:15:86:e0:
0b:6d:77:82:85:cc:81:29:a0:d0:1b:55:c4:21:15:
15:df:8f:e3:4d:83:62:db:f7:32:20:2a:24:a3:dc:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:AF:49:E4:49:04:B4:C3:7D:D9:A7:65:A0:46:43:A8:9B:99:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3aee69c5-3777-3c44-85e0-19b8801d92bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.122.0/24
IPv6:
2610:a1:3048::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:54:a7:5a:e3:a9:05:0f:d2:4b:7c:06:65:9c:91:8a:63:d9:
5f:66:26:c5:b0:ab:b9:8a:10:85:5a:9d:c2:60:ea:38:64:67:
3c:07:a6:9d:23:0e:86:cf:b1:dd:0f:f7:d3:ba:13:5b:10:34:
34:47:6f:6a:1d:f6:fd:19:32:54:01:cb:9b:33:2d:57:eb:37:
6d:f3:2c:5a:45:c2:61:2a:a7:d0:d7:16:73:ed:47:70:99:f0:
df:68:4f:97:97:26:f8:c8:d6:4f:ae:72:77:05:14:62:25:cb:
a7:1a:b8:19:cc:a5:52:a3:f1:7c:44:7e:a4:b8:16:76:8e:09:
87:10:e2:36:7a:b8:9f:9a:d9:26:91:27:cc:b9:66:e5:4a:8d:
a7:fb:d3:9e:6f:b6:c5:9c:13:12:94:81:60:75:af:bb:37:52:
fb:d5:5c:4f:08:8d:ae:99:7a:ac:37:6e:76:5c:b5:6d:9c:21:
6f:54:67:98:77:f6:8a:b0:7f:d5:89:de:99:12:d8:4a:5c:fa:
28:96:e1:e5:fd:a1:18:8a:83:f4:b9:5a:ea:80:59:98:e3:a5:
05:72:21:09:dc:94:1a:25:17:f8:6f:c9:97:7e:0f:5b:28:0e:
18:5f:95:7e:6f:33:38:9e:83:88:e0:cd:34:24:e0:76:57:bd:
12:02:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:41:56 2026 by rpki-client