
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8764f4da-dfd6-3adc-a9ea-b6ac183719fb.roa
File: 8764f4da-dfd6-3adc-a9ea-b6ac183719fb.roa (raw, json)
Hash identifier: O1+AuWNr10EbFcXbsWKQ0WfalnFTnjzZGnqRyRM6/OY=
Subject key identifier: 5E:F6:07:9B:9B:12:7D:94:8E:0E:2E:8B:C6:A0:41:03:45:B4:35:72
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F3FAD5C038BAD8A717043BD00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8764f4da-dfd6-3adc-a9ea-b6ac183719fb.roa
Signing time: Mon 21 Sep 2026 13:00:12 +0000
ROA not before: Mon 21 Sep 2026 13:00:12 +0000
ROA not after: Sun 20 Dec 2026 14:00:12 +0000
asID: 397243
IP address blocks: 156.154.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ad:5c:03:8b:ad:8a:71:70:43:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Dec 20 14:00:12 2026 GMT
Subject: CN=a897e322-ad05-4f1a-93a9-0f2be2f3b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:99:ce:09:ba:e7:d9:69:c2:7d:4a:4b:4f:
23:a4:d3:42:98:c0:cf:b1:2c:70:36:16:c5:13:24:
75:51:37:f7:55:be:46:69:36:ed:87:7a:38:d2:03:
91:19:2f:b9:ef:24:34:f0:1a:dd:90:33:df:f8:30:
d3:fd:a8:a5:1c:3e:67:24:c0:9d:4e:05:2b:40:f5:
43:d4:95:cf:c0:d7:c2:80:6f:2f:8f:43:b4:50:2d:
0c:93:c4:d4:d3:a9:23:28:d8:1d:ed:a3:56:01:d4:
b1:f3:87:2b:c4:71:4e:65:38:f6:57:a6:90:d4:e7:
94:ff:57:01:0b:9e:69:31:db:fa:02:83:3a:c2:e1:
48:02:71:ea:5a:dc:44:80:09:54:c8:84:16:5a:67:
ab:00:8b:2f:b6:be:5c:f6:f2:cb:f0:38:e3:46:14:
d5:39:5f:0d:01:0a:1b:63:95:26:db:e4:71:ea:b6:
0d:e1:2d:a8:6e:fa:08:6d:bd:25:96:3f:e7:74:6f:
cc:02:3a:7d:90:9e:11:1c:46:c9:dd:97:d4:1f:af:
0a:9a:8b:a8:fe:43:80:a0:49:b0:4c:27:e6:3a:ab:
e3:08:99:cd:44:51:02:8b:e5:a1:1e:15:2f:41:b2:
c1:89:98:90:25:48:ba:7e:4e:7a:dd:ca:8c:e6:cf:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:07:9B:9B:12:7D:94:8E:0E:2E:8B:C6:A0:41:03:45:B4:35:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8764f4da-dfd6-3adc-a9ea-b6ac183719fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:52:99:bd:02:89:72:aa:76:c4:52:e1:06:26:e7:a8:3d:e5:
96:d9:66:bf:a8:b9:9e:df:5c:b3:db:97:94:a0:07:8d:6b:09:
39:6a:37:eb:1f:a3:97:42:97:f5:69:7e:da:f2:95:40:68:a1:
b4:2a:9d:6a:27:a7:08:52:10:66:34:83:55:68:03:34:01:81:
fa:65:5a:94:fe:25:54:5f:50:8d:ae:e5:cd:d9:3d:84:fd:10:
8f:6c:7f:1e:a5:74:4a:75:58:71:0b:c4:74:90:02:dc:97:9b:
bf:a3:b5:39:d3:37:a1:c7:fd:fe:c6:57:11:8e:31:4d:11:b2:
f2:de:a1:4b:3e:dc:7d:27:2a:2f:8b:94:02:04:39:49:df:76:
4d:8c:e0:5e:df:3a:83:33:84:30:1a:15:88:4d:2f:49:c3:63:
b1:52:7d:67:60:e2:df:f6:46:4c:c8:ba:2c:2a:90:ea:7e:fb:
36:8d:13:f6:8c:f4:56:d6:d2:31:da:7a:95:64:82:1e:b0:2d:
70:b4:72:e6:74:49:81:d8:ed:cb:21:7a:49:58:bf:9b:ef:b0:
4d:7a:76:5b:91:52:79:48:56:3c:81:ea:83:0e:85:51:5c:d8:
b2:d2:94:44:cf:0c:cc:4d:17:8a:7b:07:07:77:1b:9a:8e:fe:
8c:40:22:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:00:49 2026 by rpki-client