
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa
File: 027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa (raw, json)
Hash identifier: XAJ90D0pG7t6nlixZkNwqDRPowqLpmHPwOmf81N3AgY=
Subject key identifier: 88:28:1C:FA:BD:6E:84:30:69:E6:8C:47:07:5A:F8:98:28:07:7B:13
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F497DC57F3EEF196EB19ABB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397229
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:c5:7f:3e:ef:19:6e:b1:9a:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b4bdf01b-c858-4d75-9a3f-8648ab3376c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:a6:4d:de:d4:08:34:23:ac:41:4b:7a:e7:
80:a9:9e:44:94:ce:d0:de:39:f8:7c:f0:f5:23:e6:
e0:33:db:9e:ac:9a:ed:dc:2a:d3:5e:75:b9:1d:c3:
02:41:a9:a3:65:d5:f3:33:27:28:46:e8:89:ff:30:
1d:03:0d:3f:23:1d:1a:76:29:8f:35:6e:5c:4b:7c:
08:67:c7:87:5f:51:fb:58:1d:66:6d:73:e4:2d:e6:
ce:d7:d3:84:47:32:f3:75:f0:a2:33:8a:fc:a4:a7:
e1:aa:ee:06:7c:c0:d1:83:56:a2:fd:b7:47:35:e4:
b5:7d:f0:73:19:c0:59:a7:7a:ec:86:e6:5a:cf:d1:
f3:1d:7d:61:41:a1:af:2a:ea:fb:6e:67:a8:2d:27:
1f:81:d4:89:95:3c:ec:f4:e5:f7:a8:80:2a:a7:94:
39:93:4e:4b:02:1f:75:cc:34:ad:f4:b3:1b:39:b8:
26:ab:bc:47:37:51:8e:c5:06:4e:e2:7e:b7:93:fb:
84:2e:c6:a7:fb:1c:ae:17:71:1f:25:1a:e8:18:57:
b8:b4:26:19:54:cd:48:72:77:7c:dc:9c:02:b2:bc:
d9:2e:28:0a:ee:62:93:4a:d3:71:7a:3d:8f:ac:82:
7a:05:63:5d:a4:b5:5a:5d:d5:88:73:04:1b:6d:25:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:1C:FA:BD:6E:84:30:69:E6:8C:47:07:5A:F8:98:28:07:7B:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/027e3d4e-b5fa-3962-a6e9-8508b31d2131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:54:21:c4:74:ba:5d:0a:99:7f:e1:d2:a8:30:94:5f:c8:50:
fb:06:33:f1:e3:2f:9c:f2:35:ab:cc:14:54:0d:d0:89:d4:54:
69:53:b6:70:e6:ec:bd:89:39:5d:e7:7c:48:35:59:1e:33:3d:
7d:c8:da:10:4c:30:16:7b:b7:2c:a1:1f:2d:dd:a8:08:1b:05:
c1:d7:ad:53:c8:7e:6e:e2:89:99:b3:cb:14:31:c0:54:1c:ed:
96:06:94:00:51:65:c6:5c:2a:18:22:14:21:48:80:08:84:99:
6c:fd:46:9f:de:29:52:d1:9b:8d:23:1a:c2:b6:8f:d8:ff:6a:
44:35:f7:b3:95:7d:06:18:f0:77:7f:7c:4e:2d:02:d8:bd:43:
d6:0e:67:40:04:b4:0c:5f:7e:58:82:ce:e1:3f:06:c2:f8:c3:
be:8a:9e:19:0a:96:1a:bd:ca:e5:44:42:25:39:29:69:cc:76:
fd:d3:08:1d:fd:78:9d:88:5e:ee:e5:94:b8:f3:5c:0d:02:85:
ef:3c:25:ff:17:bd:90:63:ab:69:47:74:2f:1b:30:3b:ae:85:
78:6d:4d:71:35:6e:bb:47:8f:77:75:e3:a6:d2:c2:8d:72:5e:
a8:39:65:b8:5d:a9:98:09:d0:d7:51:23:ad:75:9f:b9:0b:36:
8c:91:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:43:55 2026 by rpki-client