
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa
File: bd0224f0-3770-3a1b-880d-6c681d82e122.roa (raw, json)
Hash identifier: +JgVczS8Qp6Bng3IpEp/NZEdWX/8VJi4CpM1EvVPCA0=
Subject key identifier: CA:2A:CC:A8:7F:A4:37:39:39:AC:21:7F:80:F6:F8:D7:8E:4C:85:5C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F497ECED3763853F036E86280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397238
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7e:ce:d3:76:38:53:f0:36:e8:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2880a5c3-1eb8-4a2e-803b-2bfe7715b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:3b:98:05:cd:f5:1a:d8:40:55:a6:e4:df:
f7:14:00:c7:64:0f:fb:f1:58:45:1c:42:c4:4b:d6:
ce:d4:2b:9b:90:c9:6c:79:77:0e:e4:55:07:be:db:
5b:a0:9b:71:c9:60:6d:1a:7d:c3:1d:6f:bf:e6:21:
78:a4:84:ed:31:e5:4d:4f:17:cc:4f:bb:48:5c:00:
51:fc:09:ed:66:c4:4b:7c:cc:8e:45:fd:b3:14:bf:
e2:1b:c8:d1:7f:c3:bc:e7:98:a2:4e:7f:a9:7b:db:
b6:bf:2d:4c:c0:11:f2:8e:ef:a7:a5:95:43:54:06:
b1:ea:48:f0:08:15:3e:25:4e:21:64:e0:ef:dc:9d:
1d:8c:40:a3:5e:c2:27:10:0b:f7:94:84:0f:fb:91:
19:71:f6:5f:60:13:db:f8:db:ca:93:30:59:06:df:
1d:22:f7:98:77:2a:a9:2c:ce:d7:be:f5:e9:89:c9:
d7:d2:c5:b9:99:12:ba:75:c3:d1:2b:fb:8d:52:65:
55:d0:4c:c6:c9:40:f1:ef:d2:83:ff:43:1e:14:22:
b3:95:1d:57:4c:26:59:50:7f:6e:f8:bf:31:c5:c7:
bd:8f:3d:c0:ab:76:a4:5a:5b:7f:a3:48:20:1e:96:
1a:d8:79:50:8b:37:63:24:05:05:01:47:dd:19:ed:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:CC:A8:7F:A4:37:39:39:AC:21:7F:80:F6:F8:D7:8E:4C:85:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:15:f0:a6:ce:aa:91:98:71:66:a0:c1:6d:0b:30:9c:a8:32:
87:2a:5b:eb:53:9a:94:fc:f2:5d:e3:50:7f:9f:bc:b7:41:ff:
d5:7d:d5:41:32:3b:c6:69:a0:93:a4:7c:0b:4a:7f:53:cc:4e:
09:20:46:b7:7c:83:c8:47:bb:a9:b9:e9:97:1b:b8:20:1a:56:
ea:a4:2f:c1:84:e3:66:9e:c5:9d:5b:ad:23:88:c7:6f:a7:63:
9c:44:61:5a:61:21:5d:3e:81:a4:03:7d:b9:b5:82:75:81:2b:
67:12:0b:b2:b3:9a:52:46:c4:77:93:9a:41:ac:65:71:3c:6c:
ce:d6:a1:df:27:f6:ab:74:41:61:19:39:56:87:16:e7:f8:57:
27:49:32:d3:fe:95:85:b4:00:ae:d4:0f:98:be:d7:d3:72:c7:
13:26:87:38:cc:c8:3d:e3:01:95:af:d0:d9:b0:49:e6:fb:a0:
39:56:c1:f3:e9:87:a0:a5:14:19:77:7d:e3:a1:32:39:78:ec:
ee:89:49:5c:e6:06:99:73:c5:0f:a1:96:5e:7f:f2:7c:c0:6f:
59:4e:9c:d9:65:00:e1:bb:5b:fd:c4:ca:e4:35:af:f4:64:dc:
28:a8:a8:42:f5:4a:1e:da:7d:b3:15:17:11:d2:3f:89:50:06:
3b:10:2b:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfs7TdjhT8DboYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mjg4MGE1YzMtMWViOC00YTJlLTgwM2ItMmJmZTc3MTViMTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPg7mAXN9RrYQFWm5N/3FADHZA/78VhFHELE
S9bO1CubkMlseXcO5FUHvttboJtxyWBtGn3DHW+/5iF4pITtMeVNTxfMT7tIXABR
/AntZsRLfMyORf2zFL/iG8jRf8O855iiTn+pe9u2vy1MwBHyju+npZVDVAax6kjw
CBU+JU4hZODv3J0djECjXsInEAv3lIQP+5EZcfZfYBPb+NvKkzBZBt8dIveYdyqp
LM7XvvXpicnX0sW5mRK6dcPRK/uNUmVV0EzGyUDx79KD/0MeFCKzlR1XTCZZUH9u
+L8xxce9jz3Aq3akWlt/o0ggHpYa2HlQizdjJAUFAUfdGe0JjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoqzKh/pDc5Oawhf4D2+NeOTIVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmQwMjI0ZjAtMzc3MC0z
YTFiLTg4MGQtNmM2ODFkODJlMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQV8KbOqpGYcWagwW0LMJyoMocqW+tTmpT88l3jUH+fvLdB/9V91UEy
O8ZpoJOkfAtKf1PMTgkgRrd8g8hHu6m56ZcbuCAaVuqkL8GE42aexZ1brSOIx2+n
Y5xEYVphIV0+gaQDfbm1gnWBK2cSC7KzmlJGxHeTmkGsZXE8bM7Wod8n9qt0QWEZ
OVaHFuf4VydJMtP+lYW0AK7UD5i+19NyxxMmhzjMyD3jAZWv0NmwSeb7oDlWwfPp
h6ClFBl3feOhMjl47O6JSVzmBplzxQ+hll5/8nzAb1lOnNllAOG7W/3EyuQ1r/Rk
3CioqEL1Sh7afbMVFxHSP4lQBjsQKxs=
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:54:46 2026 by rpki-client