
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa
File: df6727da-fd25-3bc0-a428-19aa6a820332.roa (raw, json)
Hash identifier: c9Kb7OpzqUh/lcXHMrgmxf8hYCLImU7eyuB+1jaQhMk=
Subject key identifier: E4:E2:4C:B7:49:43:53:AF:16:64:8E:6F:31:AA:5A:55:36:BB:2A:E1
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D0912A242250947C205607FC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 397242
IP address blocks: 156.154.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:a2:42:25:09:47:c2:05:60:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=5cc4ee39-b0a6-47b2-a2cf-e312d73dafcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:dd:67:4f:75:10:df:20:4d:19:8a:43:37:
64:6a:78:78:ec:e2:72:ed:94:c0:e0:d9:fd:9c:96:
17:41:31:6b:23:0e:ef:14:a4:77:08:53:27:d6:f1:
60:1c:03:5b:8c:e4:68:c3:51:07:80:63:09:62:57:
bf:c9:b6:bb:f8:6f:36:cd:01:9f:4d:57:11:ca:50:
88:60:2c:a5:3d:41:a8:82:a3:7a:9b:22:e9:b4:20:
44:5c:44:0e:9f:06:76:2c:b2:ac:26:7e:b0:b9:07:
b6:7d:fd:83:e8:d2:82:3a:22:f1:60:cc:a6:01:49:
71:ad:ec:7b:4b:e5:7b:5f:97:2b:04:0e:53:fb:0c:
3b:c9:62:ec:20:a3:9d:c0:17:c5:75:a7:2b:c0:51:
cb:e8:d3:98:d2:87:77:e4:f0:d7:c0:ce:a2:5e:30:
b6:06:f2:f2:3f:6f:d7:c2:c8:85:8c:b2:b6:7c:c7:
4c:ba:a6:f9:d5:fb:1e:95:cf:52:92:3d:f4:21:38:
8c:96:90:1e:d7:17:a6:4e:da:fa:a1:11:5b:05:64:
f4:ac:34:11:3f:e4:83:e5:79:5c:16:2a:41:c5:3a:
66:81:1c:27:68:56:0a:0b:9c:bc:ff:6c:e0:05:de:
4a:02:95:16:17:3f:66:b1:e1:ae:9c:42:1a:96:38:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:4C:B7:49:43:53:AF:16:64:8E:6F:31:AA:5A:55:36:BB:2A:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d0:c4:92:15:ff:03:3d:95:da:ff:c3:57:54:93:30:1a:69:
0d:0f:16:b6:b7:a5:e6:2c:d8:50:ae:97:f2:fd:a1:92:39:51:
44:22:cf:d5:5c:b0:26:c6:f0:b1:a9:c9:e7:50:15:f8:ff:b0:
da:de:79:43:ac:bc:1a:09:4b:f5:d5:06:9e:0d:80:c2:13:26:
a6:3c:e6:73:f8:61:15:23:7e:a4:3f:a5:59:30:d0:aa:06:5e:
fa:16:02:14:90:24:6c:c1:7a:b6:77:3c:12:22:e8:96:36:67:
e1:c6:03:8a:63:07:16:35:bc:1f:0f:1e:8b:a7:79:d0:86:e4:
e9:8d:79:e6:5d:f9:28:ed:77:1f:f3:b3:fa:4c:59:3c:e0:0b:
2b:77:7c:28:ca:0e:47:ef:be:d0:53:d2:c5:95:0f:14:84:51:
76:05:7d:59:df:7b:b0:86:63:fb:66:68:9b:1a:e2:a5:c3:ba:
81:51:bc:f0:8d:8a:88:c0:d5:3a:67:19:58:18:bc:1a:53:e7:
d9:2d:86:74:d9:f1:cc:e4:71:7b:03:4f:c2:c2:ad:da:db:b8:
e3:5c:7d:54:04:8e:62:b8:86:68:d2:6f:ee:89:05:2b:e4:96:
9c:ce:46:2a:5c:12:c1:1a:3a:8b:8d:0b:af:93:1c:0e:45:c3:
f0:df:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:29 2026 by rpki-client