
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd5d277f-b40c-3d7b-bd60-66aefe9247bf.roa
File: cd5d277f-b40c-3d7b-bd60-66aefe9247bf.roa (raw, json)
Hash identifier: Uo/3AVA7C6LD6UF8PBfB134XrXe8qKROiO+DOBa1BAQ=
Subject key identifier: 26:45:1F:62:34:D4:D1:78:61:32:41:EB:A3:21:99:F4:CF:62:4B:CB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584D746FF38F7AD7D2E3905FDC80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd5d277f-b40c-3d7b-bd60-66aefe9247bf.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 397234
IP address blocks: 156.154.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:f3:8f:7a:d7:d2:e3:90:5f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=7d607b83-2840-46ce-86c9-6f647a104122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:d8:33:8e:6f:bb:49:db:87:dc:09:b0:8a:
06:c7:79:4e:f5:92:2e:ea:99:e9:26:db:1a:57:4d:
7a:b9:4f:26:07:28:68:fa:a0:00:f6:48:b1:fa:80:
ed:c7:d1:3a:69:6a:a8:ed:fb:9c:0e:ef:7c:ae:90:
bf:4b:e2:df:c0:20:0d:b4:4e:2b:1d:7b:05:f1:e8:
b8:4b:a2:24:cd:9c:75:20:00:62:a0:85:2b:b2:78:
2d:c3:df:cf:fe:b4:e2:b5:4c:5b:41:5c:66:6d:27:
c9:1b:d5:fd:3d:d2:16:ce:bb:eb:49:c3:df:30:c4:
cb:6b:a0:4d:78:35:1f:df:e8:a8:4f:14:8c:d7:49:
e3:8b:4f:47:84:15:03:78:e8:0b:f2:1e:29:db:99:
21:5e:b6:4f:e3:84:d9:f6:ec:fe:fe:44:84:cc:82:
7f:f5:2f:9e:37:fd:4e:06:bd:c7:85:ad:0b:1f:64:
e1:3e:c8:b4:5a:a3:c6:5b:df:57:52:d5:88:d2:73:
91:c6:60:9b:b5:62:cc:8b:96:3b:2e:b2:65:c5:c6:
a5:bd:d8:41:3e:05:c3:3b:87:f1:69:9a:ee:89:1e:
70:ed:0c:03:02:ec:bd:94:56:49:4a:c2:40:c0:2b:
fd:42:36:16:22:a7:78:3a:01:e2:d7:66:40:96:3a:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:1F:62:34:D4:D1:78:61:32:41:EB:A3:21:99:F4:CF:62:4B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cd5d277f-b40c-3d7b-bd60-66aefe9247bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:51:12:7f:1d:ae:b0:d5:95:dd:31:f0:7f:c5:1f:db:11:16:
88:d5:ab:e2:a2:be:6b:2e:ba:5e:95:b9:a2:46:d2:62:84:17:
6a:38:68:e5:16:a6:03:12:37:7e:7b:ba:c6:64:eb:fa:e3:e4:
8e:43:62:6a:e2:4e:b1:cf:fd:c9:3c:9c:82:a2:8c:66:f6:8a:
47:f8:01:49:81:f7:a7:63:4c:97:28:4e:b8:91:39:9b:c7:ab:
9d:74:e2:a8:fb:37:b5:b2:df:e2:26:c4:df:84:81:ce:34:e6:
f0:a6:c2:e3:44:2a:71:62:8c:b7:eb:02:c6:11:0c:39:ab:88:
0f:ee:82:0c:2e:c5:e0:08:1a:ec:b6:8a:ad:f1:d5:29:ee:a6:
43:09:e3:90:88:e5:49:6b:c8:61:a4:47:b4:45:aa:5d:a1:c6:
ea:21:ce:09:51:63:92:29:29:bd:f0:b7:1b:03:e8:fc:5b:1e:
af:3c:51:6d:2c:53:48:b0:fd:f9:23:af:e2:b9:a2:ef:22:94:
6d:45:04:56:1d:ce:fb:04:9c:a0:cf:fc:bc:d3:8c:df:66:3d:
1a:22:03:88:2d:2b:72:cd:03:ac:d7:f3:a1:a7:60:6f:fa:a1:
a7:47:04:5b:69:a1:78:63:78:3d:65:e1:12:28:10:44:cb:65:
20:7a:f3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:04 2026 by rpki-client