
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68353dfc-e6ff-3051-8a77-2b1ea59136c5.roa
File: 68353dfc-e6ff-3051-8a77-2b1ea59136c5.roa (raw, json)
Hash identifier: 1hyp+w8NJlDGnk6Pd1MkIHUv+3e1ORxTcMyCqYP14J4=
Subject key identifier: BE:4E:49:FB:96:39:37:4D:4C:25:32:75:91:D0:63:07:C3:28:BC:81
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D746FF9753C6DB0120F0A8F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68353dfc-e6ff-3051-8a77-2b1ea59136c5.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397230
IP address blocks: 156.154.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:f9:75:3c:6d:b0:12:0f:0a:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=6174bcd0-bc4d-4c2d-b72d-fe7a7f18a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:7a:c9:ca:29:d4:51:c5:96:04:ed:6c:c4:
21:c8:1e:82:92:da:bc:40:aa:e0:a8:99:20:e8:bd:
fe:a8:d2:e9:9e:33:bc:2a:f2:30:60:4f:da:d8:a9:
a8:33:f8:7f:d7:e6:b9:19:03:a9:7b:8f:dc:6e:ac:
9f:15:71:58:45:d0:a3:f5:90:46:99:4b:dc:a9:c8:
6f:b7:16:c1:70:c2:b1:86:af:a4:d4:49:30:88:7e:
2b:e9:b9:8f:3c:f5:8c:fc:80:d0:3f:18:f1:7e:63:
63:1c:aa:83:a9:25:92:a4:28:0a:2b:17:1d:fa:8a:
29:7f:2b:0b:5b:77:86:2e:e6:84:42:ad:6b:a8:9b:
10:cd:34:e5:52:aa:22:b0:b9:e9:5c:fd:ed:de:6c:
82:26:c5:30:8e:02:f4:9c:ca:0a:3d:65:1f:12:3e:
cd:2c:1b:62:c0:c9:ed:f6:9f:7a:0c:d2:1c:89:33:
e6:5f:b8:6b:ec:ea:20:5b:0b:37:70:2f:7b:d8:df:
94:2f:0f:eb:56:23:04:6d:42:95:02:f3:d2:51:7e:
65:3b:6f:07:a4:1f:b4:67:a8:a0:9f:66:92:14:76:
f3:b0:01:11:3a:33:6f:28:71:96:c6:b3:21:5d:5e:
21:bf:0e:18:c8:a6:83:a8:b8:75:64:57:a3:f0:ef:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:49:FB:96:39:37:4D:4C:25:32:75:91:D0:63:07:C3:28:BC:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/68353dfc-e6ff-3051-8a77-2b1ea59136c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:8f:01:01:0c:6e:1a:d5:28:91:5e:11:52:5d:66:51:56:9f:
30:4e:16:98:b4:47:6e:2a:7f:58:49:1b:24:a7:77:80:6c:ba:
6b:b0:17:80:70:09:63:fb:d3:e4:2e:9e:51:d5:b3:ac:ca:19:
50:5b:08:5c:34:c6:83:14:82:9b:a6:1d:96:5d:47:69:d3:ee:
dd:2e:7d:7b:64:75:08:60:b3:fa:a0:06:9b:ab:e9:37:5a:c8:
fb:ee:a9:bb:1a:0c:81:a1:9a:9d:1e:e6:ac:96:dd:b6:51:0b:
cb:11:44:cb:4a:28:76:5f:1a:90:b2:46:61:64:ca:d1:29:89:
1c:71:07:ae:2b:27:06:89:b1:f9:9d:4d:2c:31:ef:dd:7f:3e:
12:26:d5:5d:18:f8:4b:94:a8:ea:20:c5:59:57:1a:04:fd:6b:
08:af:7a:34:f9:f2:49:f6:db:34:3f:9a:47:52:f9:2e:cd:f3:
d6:e8:6e:20:6e:34:4f:c6:34:66:6e:95:db:ae:9a:f9:81:47:
e7:68:79:dd:8f:93:a3:01:c3:57:43:8c:03:c8:a1:58:56:ae:
67:0a:4f:7c:e5:cd:16:1b:95:f0:14:49:0d:f1:63:86:79:13:
15:2c:ef:ff:7f:d2:4b:de:98:12:39:49:b8:ef:55:b4:4d:cb:
80:e4:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:42 2026 by rpki-client