
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
File: fa9231de-b6f0-3b35-96d4-ec826dd73191.roa (raw, json)
Hash identifier: 97jkA4AvKAGYjm8WVorjXnAVnnMnssmFkh4Gopx7cn0=
Subject key identifier: 41:69:70:F8:48:1E:EB:F9:FB:F9:96:98:14:3F:45:55:7E:B0:16:02
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584B99D7B27035272DA968FCC380
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
Signing time: Wed 22 Oct 2025 01:00:31 +0000
ROA not before: Wed 22 Oct 2025 01:00:31 +0000
ROA not after: Tue 20 Jan 2026 02:00:31 +0000
asID: 397238
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:d7:b2:70:35:27:2d:a9:68:fc:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Oct 22 01:00:31 2025 GMT
Not After : Jan 20 02:00:31 2026 GMT
Subject: CN=48976818-f73a-42dd-ba5f-d5da2267368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:a6:19:3d:fb:8e:8e:61:e0:3d:3d:db:0c:
52:db:d4:55:7f:f7:ad:9e:5e:e8:e9:6f:20:7c:b1:
e7:e8:95:e8:62:8b:81:58:19:9a:be:46:90:87:6b:
d1:90:bc:be:8f:57:95:20:17:02:6b:65:f1:da:da:
96:3c:10:37:d3:12:98:a8:45:38:08:42:76:03:e4:
10:4b:6a:56:60:0c:3f:13:3a:e7:b0:c7:ac:dc:f0:
6c:a6:a2:59:8f:8e:22:3a:02:0a:bb:22:32:33:23:
5a:65:15:d4:70:ab:c9:97:50:7d:fd:03:df:8f:dc:
7d:1a:cb:a8:73:f9:fc:37:bc:6a:1b:e8:e3:ca:11:
08:4d:f5:48:96:b4:57:85:9c:61:8f:08:a8:a2:94:
75:6a:eb:ef:66:ca:2c:9f:6c:95:52:c5:e3:18:1d:
cd:24:0f:9f:81:ca:20:30:3f:3f:ec:80:9d:53:e4:
3c:1d:29:1a:4e:88:ca:2f:a2:f8:e8:1a:37:6b:b8:
27:03:7d:25:f7:84:91:6a:30:85:29:ec:fb:02:f1:
7d:21:38:93:8e:84:d2:30:4f:1c:b8:cc:33:31:d1:
08:ab:30:d2:c7:31:53:0f:c7:14:ea:ee:72:11:3f:
59:88:37:15:a0:17:a1:2f:3e:f6:e9:4c:bd:1f:2a:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:70:F8:48:1E:EB:F9:FB:F9:96:98:14:3F:45:55:7E:B0:16:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa9231de-b6f0-3b35-96d4-ec826dd73191.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:4a:d2:7f:6e:f0:d6:15:80:3f:c7:82:6c:0e:2f:bf:59:8b:
89:e3:69:06:ac:bb:28:8c:77:c3:15:c7:10:44:d3:8b:46:64:
79:a0:cf:70:ef:cb:a7:cd:a7:a0:78:ba:38:af:c6:78:f9:be:
08:3b:91:72:17:08:84:56:02:c1:e3:3f:46:2b:28:dc:ef:cc:
b2:2d:2b:b2:cc:74:ea:a3:46:5c:2d:cd:4a:da:72:b9:7b:f8:
b4:bc:89:6c:92:39:94:d1:be:44:6a:0a:d9:f5:cf:33:6d:68:
47:b1:c4:d3:33:51:cb:27:4f:90:ee:ce:1b:13:2c:e5:ad:8e:
af:bf:6c:99:9f:ac:8c:08:c5:b8:7f:d9:3a:da:bb:7e:f6:e1:
9d:43:d8:c3:d3:4c:26:9a:b7:87:bc:a8:e2:ef:95:2e:53:b8:
3c:11:e2:ec:08:92:02:3e:d2:84:53:b5:f3:45:a6:1c:70:79:
81:40:b4:d8:96:ba:e3:76:78:1f:74:66:fb:ad:9c:db:5d:7d:
78:06:8d:34:6d:62:bd:1e:75:a4:0e:e2:c2:a8:47:1f:1e:ef:
0d:bc:b7:6f:dd:bd:f3:e6:90:42:e4:13:32:85:61:d4:15:6f:
20:65:c6:4f:9e:4d:29:58:ea:c2:7d:a3:08:21:10:7c:26:b5:
da:10:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:05:30 2025 by rpki-client