
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c8a9d2-5cee-3fbb-84e2-349bf4048168.roa
File: 42c8a9d2-5cee-3fbb-84e2-349bf4048168.roa (raw, json)
Hash identifier: 6HQasQ3WSsxq1UrnbGS27iTwSkl0qA4aAvap1ISOpcM=
Subject key identifier: 9E:44:1B:3E:E4:FB:06:38:71:F1:39:1F:19:4D:3C:77:9F:B1:F2:2D
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EDC9214ADBD0A3F631FFF0780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c8a9d2-5cee-3fbb-84e2-349bf4048168.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 397242
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:92:14:ad:bd:0a:3f:63:1f:ff:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=202a3e21-53dc-4d18-a803-be97cf686db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:4e:86:ce:a6:9f:16:d5:e4:52:d2:4f:db:
31:3c:e1:62:40:4a:32:01:7d:6c:2b:8b:8a:11:0c:
27:7e:52:94:37:6a:94:73:38:0f:09:2c:16:ec:bc:
53:1f:fb:5c:4f:9c:30:1f:6c:99:19:35:ce:5a:72:
0f:a9:b9:33:6d:d1:a6:5d:5c:2e:d0:e3:67:a4:e2:
6d:71:1b:5f:50:ae:f7:99:e7:4f:fa:d2:b6:18:92:
ab:80:29:93:1b:f5:c3:ee:5c:8d:db:f1:cf:06:5d:
8a:e6:3d:27:04:5a:f9:bd:e8:10:45:e2:05:6f:84:
37:f0:8c:ee:3c:99:7c:b4:42:87:a2:79:3d:fe:73:
94:14:77:c4:99:f3:92:de:c7:1e:49:94:67:54:05:
64:10:34:ef:1c:3e:30:dd:29:98:17:eb:20:5f:8e:
b8:47:13:33:0b:4a:d4:51:b4:3f:ab:78:e3:d5:62:
34:67:09:e1:44:7d:30:f8:1c:4e:c1:1e:0d:1b:f6:
4d:83:a4:ff:37:9a:14:93:85:4d:98:d9:2e:07:1a:
c6:09:e9:63:6a:a1:63:97:0f:64:d4:50:65:3f:a3:
31:43:90:eb:5b:d3:39:b0:d6:ae:da:90:1d:7c:ee:
5e:d8:2c:72:34:72:f5:9f:32:e5:91:34:78:c2:c9:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:1B:3E:E4:FB:06:38:71:F1:39:1F:19:4D:3C:77:9F:B1:F2:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42c8a9d2-5cee-3fbb-84e2-349bf4048168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:5a:25:e7:a6:63:cb:e0:7c:7a:f7:ca:c2:3c:79:c3:f4:83:
0c:a5:3d:49:5f:31:09:81:0b:35:64:10:4e:55:0d:10:88:22:
cf:91:44:96:be:5f:35:6b:07:00:17:05:fc:b9:5e:36:3f:ee:
09:6c:e8:93:d1:20:0a:a7:bd:25:01:19:e2:ca:09:ef:36:45:
18:34:a4:d8:05:ff:e5:55:38:c0:77:d8:39:5c:a0:f7:e6:3f:
1e:c0:7d:95:c0:8f:a8:d3:24:84:93:c2:cc:26:a4:20:e5:5b:
57:8c:47:57:c2:ca:da:62:44:1b:f4:a8:9d:b7:ab:bf:30:cc:
ec:3a:bf:db:cf:0f:91:49:e9:38:b6:68:59:ef:97:3a:7d:46:
4b:00:8f:ed:5a:6b:25:5e:d0:db:69:1a:b0:dc:08:ef:5a:be:
52:ac:e0:ff:32:c3:31:ed:91:dd:a5:57:ba:e8:27:7e:b0:3a:
b4:47:9f:f8:6e:12:dd:0d:3b:8f:3c:cf:0b:dc:ef:4f:42:19:
57:2b:0d:a0:6a:e7:7e:41:c3:dc:07:0d:eb:aa:56:a2:b9:ce:
8b:d8:4c:89:10:f5:02:f0:83:7e:07:b8:a7:46:81:c0:b2:cc:
dc:80:06:3a:d8:5b:fa:93:28:9a:65:13:7f:1a:37:a6:09:ec:
a4:1b:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:25 2026 by rpki-client