
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa
File: 21b27889-d1bf-37f1-875c-637accb009ac.roa (raw, json)
Hash identifier: KQHNsqPlkF/qpivMnrMFNvc9S47I14DbjN0EZz7pn50=
Subject key identifier: D0:3E:F5:D2:01:51:E3:77:32:82:89:FA:EF:C9:44:15:83:03:E6:C4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EA792A2DDAC85C81986DA28C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397214
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:a2:dd:ac:85:c8:19:86:da:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=91218f9d-f73e-4356-8aee-b2efd72e2863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:eb:b6:bd:50:95:db:80:33:84:59:41:5c:
f7:69:cd:5c:c3:2a:2f:a5:60:96:29:ba:fb:a3:f3:
2e:62:c5:6c:ab:df:05:75:5a:bd:2b:7f:1a:1d:e8:
30:37:92:b3:e4:31:8b:02:4a:a4:59:ed:79:20:11:
f8:f0:b2:75:4c:55:e6:e0:b4:1f:12:8a:de:3a:77:
a6:38:2e:dc:6f:61:cb:f5:c0:db:67:50:17:83:ad:
de:d3:47:a0:10:2f:ff:cc:b1:9f:54:35:66:15:f4:
11:c1:67:d2:bd:bd:5e:fd:aa:b0:b2:48:23:70:97:
e8:5a:24:b9:e7:b6:26:35:e6:40:ce:96:51:a1:90:
35:ed:6b:50:9d:21:6a:1d:f4:4d:b6:68:43:ea:1e:
b3:d1:91:b3:41:66:fc:38:9e:6b:5f:a3:22:7c:b9:
5a:70:d0:7f:d9:19:43:07:61:c2:79:c3:32:cc:ef:
c7:22:5c:16:f1:bf:d3:0e:ee:03:de:2c:33:10:b7:
15:4d:4f:bc:d3:f2:33:c8:c8:64:c2:7e:bc:06:cb:
dd:f5:73:c9:48:0b:3e:71:88:8b:30:57:bd:b0:a1:
38:30:b0:d8:6e:c1:78:22:3d:2d:2b:95:20:70:ef:
87:88:69:47:cb:c5:66:be:33:ec:68:d2:32:c0:45:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:F5:D2:01:51:E3:77:32:82:89:FA:EF:C9:44:15:83:03:E6:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:be:e5:05:ac:6c:a6:69:d1:fe:17:c8:7f:db:9a:ab:bd:df:
c4:80:f0:c9:72:84:ad:c5:01:39:ec:53:aa:70:33:07:99:75:
cf:80:2e:06:d7:29:9b:4e:52:1d:f1:f1:34:e4:a9:b5:d8:14:
b7:49:d9:b3:36:ba:ca:58:99:58:34:41:fc:9f:0d:a6:0b:e3:
a4:a5:a4:82:ba:93:2b:9d:c4:37:91:ef:2a:fd:6a:d6:57:17:
2c:64:6c:88:f5:c2:d6:67:34:79:67:13:5e:8f:e3:b3:7e:96:
25:99:eb:79:f8:c6:47:1e:f4:88:71:01:a5:20:78:90:b6:2b:
06:7b:8f:e5:d6:29:4b:e4:cf:9b:a6:a2:3a:7e:a2:ff:8d:02:
00:11:22:db:0b:f1:bd:20:33:85:fb:e9:b9:1f:13:c8:45:cc:
c9:43:0a:15:c0:09:53:09:14:cc:7c:0e:9b:85:bc:9c:83:7d:
c1:60:b1:f4:11:5e:1c:93:d0:36:da:0e:b2:b5:d2:57:8e:bc:
a6:f8:e8:77:fe:74:7f:6d:a1:52:6c:f1:85:b1:ca:14:d4:a2:
34:7a:b2:16:f0:24:5d:1d:be:86:3f:e5:3d:fe:52:23:3a:6c:
9d:21:ad:ca:c6:b5:8a:1c:cf:52:4f:de:4d:0d:c6:0e:bc:51:
92:b1:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:39 2026 by rpki-client