
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa
File: 3bab456b-b5c9-38cd-afda-c29ceb66f558.roa (raw, json)
Hash identifier: L6Ytbw+RY5zzFySsLL2FQj6Kt4c2NfBFGbc5pHy4gQE=
Subject key identifier: A2:BD:4C:33:10:43:BE:7B:CB:16:31:22:D5:2B:A4:8B:1A:4E:48:C6
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D09129C8D29274C19FC359328
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397221
IP address blocks: 156.154.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:9c:8d:29:27:4c:19:fc:35:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=99f29295-5bcb-4a11-bb05-6942042d5913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:86:df:6f:e7:5b:6c:65:ac:3c:40:0a:63:
9c:d4:ed:b2:9b:71:0a:3a:6f:ff:8f:a6:d8:69:82:
01:cd:e8:21:d0:29:a4:d6:ed:ad:a4:59:44:fe:b1:
85:43:c7:7f:cd:da:12:ab:51:d7:ab:8e:e8:0d:1c:
d0:c0:07:a6:10:c5:51:74:69:38:0c:94:36:34:b9:
32:b5:52:51:62:96:ae:04:5f:87:53:6c:8c:f5:6c:
70:bb:0e:ed:9b:ec:23:4d:a5:db:81:5b:a8:5f:7d:
04:f7:40:71:27:0c:cc:93:13:a3:ac:92:f5:c2:24:
d5:74:b5:9f:28:22:89:08:45:b9:ff:c0:66:cb:13:
79:37:84:e2:ff:52:b6:ad:74:e6:04:ac:49:65:80:
6f:b7:17:2b:dd:60:22:77:6f:2c:7b:d8:95:73:9c:
8b:6a:bc:61:a9:2a:b6:7a:22:86:6e:ba:f2:25:8d:
b7:23:46:e5:69:8c:a8:b6:ac:d5:fa:f9:62:ec:43:
df:f3:ac:63:17:86:2c:00:77:ca:22:01:51:c8:9e:
0f:58:0b:6c:f9:68:f0:dd:e2:fc:58:fe:01:c2:b4:
ad:ed:fc:72:fe:3c:a9:b9:41:9d:e8:d8:3e:04:d2:
4e:17:96:a3:68:ae:3f:d2:03:4d:af:42:cd:c0:ae:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:4C:33:10:43:BE:7B:CB:16:31:22:D5:2B:A4:8B:1A:4E:48:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:7c:db:0d:4a:61:8c:41:e4:27:6e:72:18:fa:67:bc:b4:ab:
6e:9a:56:13:f2:47:34:23:d9:17:a9:ef:55:e3:9c:95:2a:d6:
d3:98:e7:8a:64:c6:3b:f8:06:ee:0d:df:bf:6e:6b:3c:20:ed:
e4:39:0e:47:d5:6c:b0:43:8c:37:6f:2d:04:dd:8d:0b:ac:ae:
a4:0f:16:fc:ae:31:27:62:5d:de:a5:3d:0e:28:e7:60:5f:e2:
f3:01:e8:d4:1c:fb:96:a3:b8:dc:3d:f2:d4:43:57:b3:e7:7a:
0d:d7:5a:30:05:02:1a:fd:09:e1:5d:ab:77:6b:89:89:97:a5:
aa:57:54:a9:d1:4e:eb:3f:8f:02:ae:1a:51:f3:6a:22:19:f1:
dd:23:d3:c2:c0:0c:7f:8a:20:2d:57:a9:19:cf:ac:d1:01:c4:
7c:aa:69:ae:08:af:1c:09:7b:36:a5:d6:02:2a:85:6f:3a:a9:
84:48:95:0c:00:6c:88:fc:04:be:80:03:f9:40:74:e1:df:6a:
4d:0b:9c:e7:52:2c:e7:34:c4:d1:53:48:46:db:c2:90:8f:d3:
d0:df:0c:d9:4b:e8:60:a6:d2:82:c1:20:c9:aa:4f:68:14:1f:
72:b3:2d:2d:81:bf:40:f3:37:3a:5d:b2:bd:ad:e8:15:79:13:
90:68:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:17:41 2026 by rpki-client