
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa
File: d5399463-70a6-30f2-a6e1-8ace69b6d019.roa (raw, json)
Hash identifier: CLV2mBJg5a8atbKVx2aUuZJxEQ9DC5quyPnPbKRJ22Q=
Subject key identifier: DF:0E:BF:4B:14:91:74:53:D6:99:0A:12:74:77:FB:32:CF:35:94:49
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584EA792A67FEDC48F0DC9307040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397238
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:92:a6:7f:ed:c4:8f:0d:c9:30:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8b709982-77d5-49f3-a1c1-347ad3304c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:c6:24:63:f3:88:9f:c2:35:6e:19:67:0a:
21:4d:81:30:de:fc:13:4c:f5:25:5f:a4:68:61:1c:
31:44:b9:14:ae:63:d5:b4:6e:b7:b4:c7:fb:cf:05:
d4:ab:a7:55:c5:06:89:8c:ef:9c:42:b7:21:7c:3b:
69:2e:14:16:38:0a:a8:93:31:72:0f:4b:1a:63:f0:
eb:1f:1d:01:76:7d:15:6e:a4:01:c4:a6:08:48:18:
b2:cc:64:6d:c9:92:8d:6e:ae:a8:72:c4:cf:d0:30:
31:15:aa:fe:e7:fd:f0:82:f8:b1:41:83:c4:83:84:
34:47:61:d0:9f:f7:58:d5:54:31:c1:ea:39:2d:3f:
4c:ee:69:b0:c7:02:ad:3a:16:01:b1:1f:06:41:e3:
8d:e6:17:8c:fb:a0:17:dd:6d:c7:54:88:67:d9:92:
ef:18:ce:5e:f2:86:ae:f0:5b:b4:e2:d9:61:d0:5a:
3f:b1:1a:55:c9:44:4f:44:fc:00:dd:1a:3b:16:c6:
c1:5d:db:ea:43:21:b9:71:39:d5:20:81:b4:5a:46:
b8:95:d4:47:ca:e9:69:73:da:6a:f3:18:88:6e:00:
02:bc:74:09:29:c8:f0:c3:cd:29:91:ab:8d:39:e5:
cc:cb:b4:c8:a9:26:03:c7:07:e7:08:78:ab:ac:98:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:BF:4B:14:91:74:53:D6:99:0A:12:74:77:FB:32:CF:35:94:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:c0:56:df:9b:37:ba:43:86:ee:14:7a:d7:28:ef:d8:8c:99:
f3:ec:4f:76:90:04:96:73:54:96:97:0e:fe:02:26:df:18:db:
dd:53:d3:66:cf:bd:7c:51:60:8c:69:0f:3e:92:77:e5:33:cb:
a1:28:60:7c:76:04:21:97:5f:91:f4:01:6d:80:8f:66:cb:cf:
e1:9d:32:0f:2b:51:1c:4b:b2:0c:7e:c5:39:40:f6:fd:ad:1e:
ba:be:4c:76:fb:3a:66:d6:93:13:59:58:94:18:af:8f:94:29:
a9:71:0d:c8:f8:32:bc:69:de:35:61:c1:ac:71:6a:65:30:77:
a8:26:2f:14:26:dc:2f:64:75:4c:a3:bb:30:f7:fd:70:bd:e8:
c8:59:01:36:bb:43:11:ad:c2:f3:0a:28:be:22:bc:b0:60:a3:
4b:c2:23:0b:6b:f8:b4:0e:82:2d:26:63:1c:95:78:fa:e6:13:
55:72:43:04:14:9f:7d:9a:bc:22:98:5b:4b:ae:aa:4e:84:be:
e6:77:5c:3f:8a:d4:bb:6b:68:85:b1:cb:42:35:c3:2a:3e:d8:
14:56:d5:c8:45:1d:a4:21:42:e4:cb:42:5a:d7:7d:4e:be:34:
55:aa:20:6f:c0:5a:d4:dc:bc:a1:84:af:40:fe:b1:34:cb:40:
80:ea:42:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkqZ/7cSPDckwcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGI3MDk5ODItNzdkNS00OWYzLWExYzEtMzQ3YWQzMzA0YzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTXGJGPziJ/CNW4ZZwohTYEw3vwTTPUlX6Ro
YRwxRLkUrmPVtG63tMf7zwXUq6dVxQaJjO+cQrchfDtpLhQWOAqokzFyD0saY/Dr
Hx0Bdn0VbqQBxKYISBiyzGRtyZKNbq6ocsTP0DAxFar+5/3wgvixQYPEg4Q0R2HQ
n/dY1VQxweo5LT9M7mmwxwKtOhYBsR8GQeON5heM+6AX3W3HVIhn2ZLvGM5e8oau
8Fu04tlh0Fo/sRpVyURPRPwA3Ro7FsbBXdvqQyG5cTnVIIG0Wka4ldRHyulpc9pq
8xiIbgACvHQJKcjww80pkauNOeXMy7TIqSYDxwfnCHirrJjnfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8Ov0sUkXRT1pkKEnR3+zLPNZRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDUzOTk0NjMtNzBhNi0z
MGYyLWE2ZTEtOGFjZTY5YjZkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjAVt+bN7pDhu4Uetco79iMmfPsT3aQBJZzVJaXDv4CJt8Y291T02bP
vXxRYIxpDz6Sd+Uzy6EoYHx2BCGXX5H0AW2Aj2bLz+GdMg8rURxLsgx+xTlA9v2t
Hrq+THb7OmbWkxNZWJQYr4+UKalxDcj4Mrxp3jVhwaxxamUwd6gmLxQm3C9kdUyj
uzD3/XC96MhZATa7QxGtwvMKKL4ivLBgo0vCIwtr+LQOgi0mYxyVePrmE1VyQwQU
n32avCKYW0uuqk6EvuZ3XD+K1LtraIWxy0I1wyo+2BRW1chFHaQhQuTLQlrXfU6+
NFWqIG/AWtTcvKGEr0D+sTTLQIDqQkE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:01:19 2026 by rpki-client