
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
File: a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa (raw, json)
Hash identifier: GJQ9NAKfs8xcsuAf2GWhKO2zuSLwUc8Ftszrb9Wciq4=
Subject key identifier: 7C:F0:ED:0B:55:06:6E:DB:E8:94:8F:EE:45:18:BB:5F:5D:B2:45:4B
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EA79963FAD99EBAD7D62BEC20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397226
IP address blocks: 156.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:99:63:fa:d9:9e:ba:d7:d6:2b:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=977b83af-4ccc-4678-acc5-2d390ba834fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:0f:3c:90:ad:92:b2:4c:b8:fb:87:a8:f7:
fc:a1:cd:67:3d:29:6a:bb:5c:cc:3a:c1:a2:ae:d1:
e0:0c:97:ad:7b:46:e3:5c:20:e3:23:fd:ab:2b:38:
ec:91:0c:4d:47:3f:36:35:0c:1a:65:9c:1f:e8:a8:
6e:dd:a6:83:7e:fe:24:47:23:73:98:86:a2:a3:3b:
cc:8d:93:8c:48:75:78:ef:33:a7:0d:8b:d8:db:73:
d1:3e:71:bd:aa:ed:13:86:57:e0:83:58:64:56:99:
a3:88:18:ee:67:da:f1:e9:fe:b7:3c:4e:bb:57:b0:
d8:bf:83:67:7a:d9:fc:62:2c:e5:04:4e:f6:37:e1:
16:5a:2d:73:4b:28:72:86:17:d2:5f:30:46:eb:66:
13:8b:95:c2:8a:34:5e:5a:37:e2:23:74:35:5d:d5:
3b:29:0e:93:60:a0:3a:00:54:60:77:70:d2:fa:9b:
e8:f6:4b:f8:a4:be:eb:76:79:ce:4b:ba:d3:31:bb:
7e:da:49:91:57:bc:a1:49:6b:f6:52:38:8e:79:9e:
b9:61:29:df:8e:7a:48:0b:76:2c:86:34:8c:0e:95:
ba:38:87:25:bf:1e:88:51:72:91:c1:17:78:d8:da:
13:10:50:f7:a1:0c:49:d8:12:84:f9:48:03:f7:f7:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:ED:0B:55:06:6E:DB:E8:94:8F:EE:45:18:BB:5F:5D:B2:45:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1545e09-d9aa-3cd7-864d-cabc95c21f61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:21:37:33:42:27:75:d6:f8:54:9f:87:88:b8:97:9f:b8:77:
17:4f:4b:1b:c4:44:d7:ca:2c:d3:96:e4:a2:7b:1a:14:56:b4:
f4:8b:3c:53:da:7b:b6:60:51:f8:4e:86:e8:95:51:91:05:6a:
93:3b:86:59:66:bf:fe:e0:af:0b:67:77:b9:46:48:0c:49:93:
8b:93:74:2e:65:a4:80:91:7f:18:f5:88:ea:78:13:6d:20:c9:
31:91:e6:15:a0:71:76:cf:8b:6e:ed:e0:85:3d:06:51:a6:fc:
4a:67:87:e5:0d:7c:17:98:ef:66:a7:b3:5f:b6:df:73:11:d2:
05:4b:54:56:5a:89:42:d7:e6:27:90:a7:77:1d:c5:40:8e:f4:
ce:d8:7b:c4:1e:2b:56:a8:13:b6:42:44:d8:69:1b:04:3a:3b:
9e:bc:07:4c:6e:a5:8b:3b:24:68:07:97:23:24:aa:21:38:7e:
97:a6:13:51:8a:70:bc:9d:d0:ee:b7:77:37:b8:46:94:bc:0e:
57:4e:28:64:9e:c5:f1:5b:33:a6:47:52:33:09:20:95:e9:dd:
fa:23:67:c9:12:52:f9:66:b6:54:6e:45:03:97:d1:00:d4:c5:
0c:9d:77:e1:2e:a6:b2:6b:42:c6:1c:8c:bb:88:fa:91:db:33:
be:c1:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:27 2026 by rpki-client