
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
File: ea85d689-f412-3ca9-8467-a0a4c846db6e.roa (raw, json)
Hash identifier: 1wmr8v0a8RLuRVq3LUyd9CicX/TPKzEK3ZrFZEOKlz0=
Subject key identifier: 01:4D:1B:8A:87:E5:F4:18:D1:90:BA:29:67:DF:61:3D:91:2C:46:CC
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F497EB002D0C3BD319C729A00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397237
IP address blocks: 156.154.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7e:b0:02:d0:c3:bd:31:9c:72:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=eca5e023-1e79-4032-a7f7-0ccd322d8b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:aa:78:21:87:12:43:a4:63:66:fc:c9:e1:
10:4e:4d:07:f3:ec:86:12:57:1c:53:3a:bd:27:d2:
0d:1b:7d:57:e5:05:ac:32:c9:00:4d:4c:58:8b:24:
48:c9:d9:81:06:2f:26:8a:d0:1c:87:25:4c:2f:11:
a5:1b:00:8f:68:20:a1:04:fa:0c:e4:66:fd:3e:1e:
66:5e:52:66:05:15:8c:ac:7f:e8:69:1f:43:3b:b4:
c3:94:da:54:5d:14:54:5d:36:8c:b5:83:54:67:bd:
01:0f:9a:7a:e0:89:2c:7e:c3:67:30:b4:ea:b4:a8:
85:ce:d0:ac:3d:da:51:9d:8d:ac:8d:02:bb:e1:a7:
be:0a:34:87:05:c7:02:a0:b6:2e:ba:96:24:98:a9:
18:aa:fc:e0:8d:d6:ae:c1:c1:4c:f6:9e:98:b1:66:
2d:28:c9:5c:61:75:71:c4:17:e0:ad:03:e9:4f:b2:
5a:69:62:00:6d:18:78:36:28:ac:a3:b2:12:5a:9e:
b0:c9:89:87:58:64:8b:4f:30:5d:37:23:5a:34:42:
dd:92:24:38:44:2e:e1:b7:2c:06:29:16:d0:e9:ce:
24:3e:25:ab:50:b3:b3:46:f1:ef:2c:6f:28:aa:df:
92:01:85:2e:6b:44:08:8d:9c:e6:81:ff:58:34:77:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:1B:8A:87:E5:F4:18:D1:90:BA:29:67:DF:61:3D:91:2C:46:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e3:6c:7d:64:81:70:36:78:a4:34:3b:a4:e0:e4:ad:5e:e3:
44:c3:ed:1f:be:ae:75:f4:df:74:b5:3a:6c:d1:de:51:d8:b4:
4d:75:17:95:79:4d:ac:12:11:93:49:88:5c:9c:ce:7e:7d:d9:
86:f8:14:42:52:20:ff:8b:92:7b:ef:44:40:b7:cd:81:6e:1d:
b4:b8:cc:7d:85:3d:aa:88:9c:cb:a5:6c:b8:f6:6d:61:17:ce:
33:e8:89:64:54:35:c6:26:2a:50:78:0c:5e:06:e4:1c:fd:c5:
60:c4:d5:8a:d4:45:31:63:bb:e7:71:48:85:f2:47:21:a9:c1:
42:cc:09:36:b2:bf:f4:e6:1a:3e:ac:f1:c5:e2:df:88:2a:82:
b2:eb:f9:0d:c8:d0:93:a5:3d:d5:80:a5:cf:f4:a3:66:1f:fc:
d5:05:7e:3b:54:ad:42:d9:9b:a4:77:64:d2:1e:08:19:e0:37:
ce:4d:8a:13:71:a1:58:45:e6:8f:22:89:a7:90:25:db:f0:a1:
e1:be:ca:91:5b:86:6c:0f:25:92:ca:71:26:65:f4:30:be:05:
cd:1f:b7:5b:4b:d0:10:6c:c8:a3:84:77:42:39:30:a7:4b:a4:
e4:6c:94:4f:9f:55:41:d6:ef:a7:39:42:2c:77:19:6c:5b:53:
bf:33:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:04:01 2026 by rpki-client