
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa
File: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (raw, json)
Hash identifier: UvfLwlOgNbebY4lL6yrbntXKUa7aNM7fKe05YCYxKi0=
Subject key identifier: FA:A3:F0:FF:40:A7:D0:19:1D:47:32:A8:EB:BC:18:84:6B:B1:E2:BC
Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea
Certificate serial: 010D0C9F4328584E1FA99A5B106CB2982E0D03A0
Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa
Signing time: Wed 10 Jun 2026 09:00:13 +0000
ROA not before: Wed 10 Jun 2026 09:00:13 +0000
ROA not after: Tue 08 Sep 2026 09:00:13 +0000
asID: 394090
IP address blocks: 192.136.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a9:9a:5b:10:6c:b2:98:2e:0d:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea
Validity
Not Before: Jun 10 09:00:13 2026 GMT
Not After : Sep 8 09:00:13 2026 GMT
Subject: CN=791dde4a-2e3d-489e-b9e2-1e7b8ca4949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:4a:90:b1:19:cc:bc:c7:14:c3:04:4e:1d:
fa:75:ff:34:a3:f8:2f:67:d0:c2:8a:c2:39:1b:30:
2d:14:72:31:e4:bf:e9:b0:96:e9:f4:81:1d:ef:0a:
51:0d:91:13:1c:b0:82:44:18:2f:84:6a:a1:e5:6f:
2b:d7:bd:5d:28:55:61:58:7b:7b:61:48:10:35:68:
73:c5:d7:f1:b3:5e:a8:5c:e7:5b:c1:ef:7a:27:97:
e7:d5:e8:35:c2:fd:b2:8e:07:e0:07:c2:42:9c:47:
05:68:ad:d3:4e:ea:4e:8a:4e:28:5d:62:d1:f1:6e:
fe:06:fb:ff:ec:7d:44:a4:93:c6:c7:e3:64:21:53:
88:33:0c:e1:48:ca:6a:cd:a3:f5:c7:f4:a3:63:cf:
97:8d:5a:53:79:35:c3:c5:47:2f:76:9b:b1:7f:69:
d9:e3:9c:cb:83:52:e1:51:66:02:c0:63:d6:8e:7c:
eb:7b:28:62:da:af:68:e6:af:1b:97:55:79:1b:ab:
9e:bd:43:c1:ac:40:84:74:cc:da:7f:8e:a7:8e:c6:
67:a0:7f:35:dc:93:62:9e:f9:34:16:25:7b:99:bc:
11:c2:d6:db:2e:34:72:69:50:75:c2:cd:ba:54:b1:
41:04:ef:93:85:7e:ba:fd:e5:a6:2c:e3:9e:dd:ce:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:F0:FF:40:A7:D0:19:1D:47:32:A8:EB:BC:18:84:6B:B1:E2:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl
X509v3 Authority Key Identifier:
keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer
sbgp-ipAddrBlock: critical
IPv4:
192.136.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:eb:da:51:f0:60:68:f0:11:c7:f2:14:18:4e:83:de:21:76:
26:34:bc:41:6b:65:35:81:94:a2:99:10:fc:b4:9f:a9:c5:03:
8a:d7:69:0f:42:b4:a8:b3:f4:04:e8:a7:cd:18:a1:33:93:29:
20:10:fc:e3:9d:1e:3d:6a:1c:85:69:0a:97:39:b4:0f:84:0b:
46:28:5d:ca:88:79:e8:4a:5d:7e:de:0a:96:99:74:77:a2:d7:
8d:9a:16:85:ca:a1:73:61:0e:bc:7e:fa:18:2f:7d:6c:a9:c0:
0d:da:a8:91:f6:28:e2:7d:40:cc:5f:2d:0c:91:e7:58:d8:3a:
0f:fc:52:24:34:5b:df:72:33:09:a4:f1:ae:3f:4e:6b:cd:8c:
06:43:88:c3:29:af:95:7c:ee:70:cc:cb:cd:34:8d:be:a4:4e:
a4:e0:a3:a9:70:f5:d5:84:57:1e:e9:60:3a:ef:3b:1d:85:46:
55:0d:c3:7f:85:51:1e:99:87:bd:71:99:ef:5c:68:6e:42:0a:
34:ea:6c:62:4a:3c:de:ed:a7:a3:56:f8:c7:6d:9b:8e:f1:19:
12:7c:52:3a:44:2c:25:9b:af:1d:51:c9:82:4e:78:46:0e:ae:
73:bf:da:d4:39:a1:e4:b2:ec:af:d1:80:c3:07:47:1a:4b:db:
d4:c3:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:48:25 2026 by rpki-client