
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
File: 2b555e68-4c51-3752-a450-b18f92e0d2fa.roa (raw, json)
Hash identifier: ivXHJi3LPzELciUd64qJ4nwDMAg9F8GO6NhJ3AWVr+0=
Subject key identifier: 90:1A:B0:37:2C:1D:49:EF:79:5D:82:4C:43:79:85:1F:62:EA:EB:1C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F497E73CDC7ACC8ACE6DDD480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397238
IP address blocks: 156.154.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7e:73:cd:c7:ac:c8:ac:e6:dd:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2922b0b4-1c7e-4248-a2a3-4032e90588b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:33:50:71:1a:65:a2:41:b7:5e:a6:9d:f1:
2d:be:2e:c3:31:0b:ed:4f:35:dd:2a:b5:4c:7a:8d:
41:44:15:97:30:7e:7d:a6:8b:8c:1d:db:c8:cb:68:
8c:9a:97:be:9c:f4:1a:b9:ba:7f:dd:1d:d2:d9:3c:
79:ec:fd:35:2a:0e:3c:5c:25:cc:2c:07:13:b8:eb:
b0:b3:10:b8:35:3c:60:b2:d4:91:62:11:ca:f6:4c:
b9:72:db:7e:01:78:ae:f0:21:00:5d:55:85:30:3f:
4c:a0:7e:a4:33:f0:05:eb:84:d6:a4:c4:5a:b9:63:
3e:db:8e:8d:53:f5:a6:32:c3:6a:10:e2:0d:90:d5:
44:ff:89:27:24:65:ca:cd:e8:a0:29:0a:ba:11:6a:
7a:68:d7:00:9f:15:b6:a4:c8:74:e4:f0:9e:40:1b:
80:fe:3d:7c:2a:3d:0a:d7:77:4c:ee:d6:3f:ba:b4:
1c:3f:75:ef:8a:95:6d:c5:f6:d6:2d:e6:fd:a1:52:
a8:89:29:af:46:db:74:a5:be:23:e3:d1:2d:0a:9b:
57:67:42:21:dd:ab:8b:2c:ce:28:9f:8e:83:f9:c4:
cd:c5:fe:a6:d2:17:5d:39:ae:f2:de:e1:a4:40:8e:
9d:93:6f:7b:ab:67:4d:c2:9f:c5:d2:60:39:ed:a8:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:B0:37:2C:1D:49:EF:79:5D:82:4C:43:79:85:1F:62:EA:EB:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b555e68-4c51-3752-a450-b18f92e0d2fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:06:0a:44:42:0c:94:bf:49:fa:b3:73:25:7f:ce:3c:5b:07:
e0:4b:c8:48:ac:80:fb:4f:b4:94:d8:48:d7:75:89:2d:a0:3b:
44:34:77:21:d9:51:cd:8f:e4:25:0a:29:5c:c2:3f:00:6d:c5:
00:c6:06:9b:b2:e3:45:9a:b8:5c:7e:69:cc:cc:99:fb:51:56:
24:f1:3b:8e:ad:4a:ad:a5:18:2c:6c:9b:ae:7d:c4:5f:ef:ce:
2f:67:e0:64:58:eb:7e:a9:6f:be:8b:56:64:eb:ee:0e:1e:61:
31:de:16:da:5f:87:38:92:f4:90:15:db:e5:3e:8c:b0:eb:81:
21:0c:2c:d5:0a:19:3c:4a:1d:8b:ad:90:16:19:8c:49:07:a5:
9d:4e:0b:3a:68:d0:51:40:8e:f8:f2:e6:31:4e:11:bb:81:0b:
b5:01:4c:35:09:08:04:34:de:d4:0c:75:48:c6:21:ad:10:9b:
b5:71:3e:ed:70:9e:b8:f8:fb:1e:02:da:04:3e:62:21:7c:f8:
66:35:bd:b9:25:e0:b8:4b:3f:3a:b7:31:ec:29:6d:81:b2:47:
61:98:1f:05:49:b2:df:99:28:99:8c:22:b7:b6:d6:6f:c2:05:
6b:8d:d9:23:92:9b:3f:c0:b1:c2:5c:18:d5:7f:8b:3d:ca:ad:
75:f0:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:49:30 2026 by rpki-client