
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdc49f98-57d4-342f-88f0-88da8eeb4373.roa
File: fdc49f98-57d4-342f-88f0-88da8eeb4373.roa (raw, json)
Hash identifier: Hroc97UCREJeTDAYJGPQ/BPUSs6S7LKlWLbjespRT68=
Subject key identifier: 0E:8E:EA:E6:34:9B:1B:45:01:FD:43:BE:12:D5:99:04:0E:98:86:54
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D1B1A4D05D778D7ED59782600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdc49f98-57d4-342f-88f0-88da8eeb4373.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 397231
IP address blocks: 156.154.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:4d:05:d7:78:d7:ed:59:78:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=8bb4c76e-5fc4-4813-b42b-f29cfd439a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:98:90:8e:91:26:13:82:dc:30:5a:50:23:
e9:55:e7:36:0d:63:72:a9:66:b4:61:ee:92:e4:b4:
07:30:0e:a1:67:a1:a2:3e:05:81:5c:0e:64:df:2a:
f0:1a:d7:fa:ef:6c:d3:c4:55:35:a4:6f:80:fc:ac:
28:82:4f:cc:70:20:d9:a0:cb:4f:0f:71:20:ed:fd:
87:34:37:14:5d:df:dc:29:f0:37:28:3c:46:17:d2:
56:00:11:6e:3f:0a:60:f8:8d:e7:4b:6f:9a:5c:4e:
6b:37:14:d2:1c:04:65:b5:79:fb:ed:75:4b:b8:3b:
e3:62:ce:3c:45:f6:62:1b:4a:d7:a1:07:e8:86:cc:
7c:a0:4c:aa:c6:7b:de:1c:9e:e3:e4:eb:f1:6f:4c:
49:ba:7b:d8:82:6c:73:24:c5:51:2c:3a:6e:81:41:
ed:cb:2e:61:3f:bc:ee:24:80:0e:21:c2:0f:fd:5d:
1b:3e:d7:b5:e7:34:5a:d6:ce:cf:57:cd:91:15:36:
4a:7c:91:8b:17:43:9c:ed:95:20:36:72:38:d3:51:
72:9a:18:f8:bc:f1:3b:70:5b:e1:eb:1b:fb:18:b2:
0c:3e:d3:4b:49:39:b8:7d:0b:9f:94:b9:ac:44:b1:
1f:c2:0a:b3:8c:8a:de:26:10:cb:78:77:df:b3:95:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:EA:E6:34:9B:1B:45:01:FD:43:BE:12:D5:99:04:0E:98:86:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fdc49f98-57d4-342f-88f0-88da8eeb4373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f9:8d:0c:c4:2a:bb:a6:71:a7:f1:a8:14:70:e5:1d:be:bf:
93:6b:fd:58:e2:a3:71:a9:05:d8:f0:5e:ac:df:e9:3f:03:a1:
55:24:26:4e:96:a3:6d:0d:da:26:98:cf:ce:28:ed:e9:05:14:
5c:04:d8:35:cc:ce:08:c1:67:f3:af:bb:1b:c7:ac:43:4c:ae:
bf:bc:ef:fe:fe:6b:0e:c4:d0:ed:ed:93:10:ce:3f:83:6e:86:
6b:2d:76:c3:2c:a1:7c:fa:a3:70:2e:ae:a9:ac:35:7e:c1:76:
a1:3f:3c:6e:84:80:ed:fe:ef:aa:0a:37:e5:06:8b:f6:61:1e:
78:b5:25:f0:64:d1:50:39:15:2c:bc:1f:c2:26:31:b3:6f:63:
f6:71:a7:15:5c:78:c1:da:6c:2f:e4:39:4c:e8:66:99:f4:d6:
c9:35:c7:5b:a3:1f:0b:48:ed:29:b2:f3:42:fd:69:db:46:16:
12:e4:86:da:ff:9b:b3:8e:c9:af:5b:2c:43:19:5e:d3:20:62:
ca:48:9a:dd:fb:2f:b7:4e:69:49:03:78:d6:27:02:88:95:68:
08:30:11:fe:e4:3c:d8:08:67:e6:55:cb:36:4c:d8:ee:b3:26:
b3:7d:9f:91:00:4e:b0:50:7c:8b:6c:f9:cb:57:c3:d3:fc:80:
c3:6f:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:02 2026 by rpki-client