
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b3a9217-8e9c-374d-8309-67f0cfaa367b.roa
File: 4b3a9217-8e9c-374d-8309-67f0cfaa367b.roa (raw, json)
Hash identifier: KNEgPSeOplFM5Pq8JvrgVnf4OgghIltkIvy4G/8FjKA=
Subject key identifier: 08:26:59:E5:35:8C:71:EB:29:ED:AC:E2:7C:27:87:5D:37:7A:12:03
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D1B1A40584CE312AFCB6EB840
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b3a9217-8e9c-374d-8309-67f0cfaa367b.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 397231
IP address blocks: 156.154.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:40:58:4c:e3:12:af:cb:6e:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=1686c64b-dd23-49e6-8192-1d4d77b4056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:eb:54:2e:12:f7:89:ee:1e:12:5b:8a:99:
f0:9f:9d:da:66:06:6e:2b:ab:c0:d6:2d:1e:c1:c0:
01:70:b7:46:6f:df:28:0b:72:82:f6:8f:6b:e8:34:
57:7e:aa:b1:27:6b:34:23:7f:67:13:77:6c:e4:6c:
8d:6a:a2:63:85:c1:4c:ff:39:70:01:97:9f:da:ab:
c8:ae:8b:d5:99:ff:9c:fa:e3:47:32:7f:57:71:f7:
64:a6:fc:3d:2d:dd:55:a8:3e:66:35:00:83:1c:3b:
fd:d5:80:89:fe:ba:06:aa:b0:4a:e2:4d:e7:e3:91:
4d:ff:59:d4:94:8e:97:83:5c:60:df:a9:d8:f8:7a:
e0:be:8f:55:ec:a3:33:40:c2:de:16:26:46:92:68:
9a:e7:73:92:80:5a:ea:0a:f9:1f:b8:49:ff:aa:92:
f9:22:ee:b7:13:8e:8c:79:fb:9c:3c:90:9f:8a:9a:
1b:a6:b3:6e:9e:c2:11:7b:ef:79:e1:6b:b3:16:12:
3e:d8:6e:5b:06:1b:90:0d:f8:5d:5b:a2:9a:38:92:
d6:f6:f2:17:4a:ff:d2:01:9d:05:47:81:c7:bc:94:
c6:d3:fa:92:6b:78:4f:30:d4:3c:e1:0f:a0:d8:3f:
5f:10:bb:93:b7:8b:53:f5:c7:e7:61:98:0f:14:78:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:59:E5:35:8C:71:EB:29:ED:AC:E2:7C:27:87:5D:37:7A:12:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4b3a9217-8e9c-374d-8309-67f0cfaa367b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:6a:30:0d:58:de:60:d7:73:db:3c:4b:da:f8:6e:f0:cd:fa:
f0:32:28:ac:09:d9:d3:84:2b:5c:a9:77:76:42:ae:d7:ff:ba:
36:c5:ac:05:4a:84:ab:dd:9d:1b:eb:8b:8c:b2:47:b0:5c:bc:
a8:be:99:eb:24:da:81:a4:8d:d8:35:1b:94:f8:ce:5a:dc:ca:
1f:f4:a8:8b:cb:b6:8e:ea:b9:6a:29:0f:46:d1:5f:3c:63:b0:
c0:f8:16:0c:27:b1:f5:08:f3:a7:05:1d:79:f2:cd:6d:dc:a3:
78:ff:c2:61:b4:ef:f4:34:6f:32:ea:8f:db:ce:a0:80:a8:b2:
db:9a:7e:ca:24:f6:a8:de:2c:04:87:b0:2c:9c:ac:c9:5b:28:
0f:61:5b:20:bb:74:20:e1:7b:41:46:9b:83:73:4d:13:f6:44:
c0:19:62:46:e7:fb:0a:af:9f:d4:1c:6f:62:e5:1b:e2:3a:d1:
9e:54:db:56:74:e6:cf:1f:b5:a5:4b:b3:15:e6:de:1d:a7:a5:
08:ee:07:27:a0:1e:bc:35:dd:3e:06:e0:29:4b:bf:69:c0:39:
9a:ef:e1:07:40:60:61:7e:5f:94:98:c6:67:19:70:88:df:ba:
3f:ed:ae:44:34:a5:80:01:5b:a9:34:02:4a:0c:f0:68:84:11:
84:47:2c:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkBYTOMSr8tuuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MTY4NmM2NGItZGQyMy00OWU2LTgxOTItMWQ0ZDc3YjQwNTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXrVC4S94nuHhJbipnwn53aZgZuK6vA1i0e
wcABcLdGb98oC3KC9o9r6DRXfqqxJ2s0I39nE3ds5GyNaqJjhcFM/zlwAZef2qvI
rovVmf+c+uNHMn9Xcfdkpvw9Ld1VqD5mNQCDHDv91YCJ/roGqrBK4k3n45FN/1nU
lI6Xg1xg36nY+Hrgvo9V7KMzQMLeFiZGkmia53OSgFrqCvkfuEn/qpL5Iu63E46M
efucPJCfipobprNunsIRe+954WuzFhI+2G5bBhuQDfhdW6KaOJLW9vIXSv/SAZ0F
R4HHvJTG0/qSa3hPMNQ84Q+g2D9fELuTt4tT9cfnYZgPFHioBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgmWeU1jHHrKe2s4nwnh103ehIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGIzYTkyMTctOGU5Yy0z
NzRkLTgzMDktNjdmMGNmYWEzNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdqMA1Y3mDXc9s8S9r4bvDN+vAyKKwJ2dOEK1ypd3ZCrtf/ujbFrAVK
hKvdnRvri4yyR7BcvKi+mesk2oGkjdg1G5T4zlrcyh/0qIvLto7quWopD0bRXzxj
sMD4FgwnsfUI86cFHXnyzW3co3j/wmG07/Q0bzLqj9vOoICostuafsok9qjeLASH
sCycrMlbKA9hWyC7dCDhe0FGm4NzTRP2RMAZYkbn+wqvn9Qcb2LlG+I60Z5U21Z0
5s8ftaVLsxXm3h2npQjuByegHrw13T4G4ClLv2nAOZrv4QdAYGF+X5SYxmcZcIjf
uj/trkQ0pYABW6k0AkoM8GiEEYRHLJU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:17 2026 by rpki-client