
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2089bce2-e08e-3050-89a2-a4e6b21d0b64.roa
File: 2089bce2-e08e-3050-89a2-a4e6b21d0b64.roa (raw, json)
Hash identifier: gIQFOT2GjXYGEvYKzVcJGtY1Hub7xqrmor1vt5Zm9bs=
Subject key identifier: AF:08:44:69:76:EC:C9:E5:DD:C9:CB:B4:33:5C:E4:11:52:95:8A:FD
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F3FAD67573EB5242E4F1FAE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2089bce2-e08e-3050-89a2-a4e6b21d0b64.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 397233
IP address blocks: 156.154.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:67:57:3e:b5:24:2e:4f:1f:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=e1713e5a-c9d7-429d-97bc-8d1aec9f9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:fa:18:b1:a9:b2:4b:15:56:6d:43:09:d2:
ac:58:81:83:62:d2:d7:2c:c3:aa:19:47:35:3d:40:
ab:26:29:df:f6:98:6e:cf:d6:56:94:29:e6:4e:4c:
4b:e1:5c:48:95:6b:46:bf:10:8d:f5:ae:c6:d2:31:
c9:03:e0:98:0e:0b:92:34:39:9a:ac:06:0f:19:cc:
1d:7a:9c:d6:38:c9:31:cd:82:a4:09:fb:01:8b:49:
f1:51:ce:55:d5:ef:e5:af:97:00:d5:01:f4:6c:74:
38:59:c3:20:7f:d9:8f:fd:91:b6:bf:3f:8c:15:1d:
dd:cb:bd:2e:12:53:38:10:ae:d1:df:78:f0:39:98:
17:03:c4:ea:bd:d6:9d:07:3b:0c:c8:d4:dc:0c:ce:
51:39:55:96:de:4d:2c:52:55:3b:9d:d6:9e:2d:7b:
c7:65:21:89:76:db:2c:09:ee:c3:56:9a:ce:2d:c5:
3a:4a:96:d0:d5:91:74:82:ad:b1:48:a8:1d:d1:a2:
54:9e:0c:a7:85:47:ec:55:9d:ac:b5:65:77:08:77:
ae:6c:56:e9:ff:bd:db:2d:78:08:e1:79:d9:26:ec:
92:b5:37:3c:a1:25:6c:83:a5:6a:2f:cc:26:71:73:
df:ac:80:aa:eb:dc:a4:24:a0:8c:c3:b7:28:ee:76:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:44:69:76:EC:C9:E5:DD:C9:CB:B4:33:5C:E4:11:52:95:8A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2089bce2-e08e-3050-89a2-a4e6b21d0b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:76:20:27:9b:7b:83:05:56:af:f0:0f:e1:6f:29:a2:c9:57:
68:f8:68:41:11:8e:41:4c:6f:4e:9d:08:f3:71:a9:3f:0e:2c:
3e:40:e5:cf:5e:82:b5:22:82:e7:bb:1c:2c:71:78:0a:e3:26:
44:fb:46:37:de:b8:f6:f0:67:9a:b0:89:05:1c:30:56:e9:fc:
9c:71:57:73:2d:e1:b0:d9:3f:f3:ef:ba:87:d6:a4:18:54:8a:
00:de:50:e8:35:1e:19:de:be:bf:05:12:af:86:41:a9:5b:6a:
16:8f:58:17:d8:b7:99:f1:09:d3:84:14:f7:9b:dc:0c:62:c2:
d6:bb:f9:0e:73:47:33:83:9f:35:ef:ca:ae:1c:61:5f:c6:af:
9e:a5:7e:c3:ba:ac:cd:34:04:ab:b2:b4:5f:2c:9c:e6:81:f6:
42:5b:90:b3:e0:b4:c3:6e:b1:97:91:5a:e2:e2:2f:3b:78:0a:
1d:df:39:c2:dc:c5:75:bc:43:c0:ac:f8:8c:17:a5:da:a8:24:
c7:59:c5:68:de:d1:94:1e:7a:ed:93:70:ba:5c:c8:4e:11:4b:
e1:35:d5:00:51:8f:ea:28:17:41:b2:9d:09:0f:04:c9:55:e6:
76:ea:d8:66:5d:f5:03:ac:9d:9c:37:74:8f:2c:0b:e2:6a:7f:
cc:f0:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:41:13 2026 by rpki-client