
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa
File: fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa (raw, json)
Hash identifier: UDbG8SlILzESuhI8j8kgmPocL+oqoXwDPZcYcSkEqLc=
Subject key identifier: BA:AE:B3:AA:49:6B:84:87:B4:1A:F3:5C:C0:05:8B:B6:BF:7A:6A:55
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584F497DC72AFE044147B1D06500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 397241
IP address blocks: 156.154.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7d:c7:2a:fe:04:41:47:b1:d0:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=d237ac84-c863-423a-a6a1-8eaa9fd2d762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:a4:ed:ef:03:a7:8b:3c:58:3c:12:de:c5:
83:6e:50:d5:89:81:b5:4c:3f:04:de:ff:e4:b7:4c:
5f:d6:1a:ba:31:8d:cc:2f:f6:cd:11:4f:af:eb:f7:
88:f4:be:88:4e:42:33:fb:46:64:9d:3e:8c:50:29:
e9:bf:c6:cd:ba:03:c5:55:5f:19:09:da:a1:d7:ae:
f3:70:6c:78:53:f0:07:8c:bf:90:49:8a:70:71:3b:
64:ed:db:81:9c:57:28:5d:1e:a5:eb:24:6f:2c:97:
38:63:58:a0:2c:05:6d:f9:e6:e4:43:9d:9f:3f:0f:
6a:ac:21:7d:83:52:48:da:8c:ce:eb:65:82:8b:5d:
05:14:0f:74:6c:9a:f5:97:ca:cc:73:26:fc:07:c6:
38:80:8d:5d:01:e9:d8:c9:57:ef:65:35:71:6a:00:
d4:ae:55:a6:b9:3b:11:15:7a:41:04:e6:4e:a8:2e:
0f:15:8b:e3:90:69:93:9a:82:6d:26:ee:18:9c:a1:
d1:54:cd:52:21:24:31:90:86:74:96:01:90:08:7e:
fa:15:2b:15:e7:a6:18:50:7a:03:69:99:9a:61:26:
e4:30:b5:53:1c:0a:ca:f2:92:f3:44:11:a5:96:cd:
c3:48:b4:d7:38:c6:62:f0:de:4e:d4:ff:55:ec:2e:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:B3:AA:49:6B:84:87:B4:1A:F3:5C:C0:05:8B:B6:BF:7A:6A:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e3:cb:33:86:78:6b:4d:d2:38:c6:d5:0a:17:fb:bd:ed:36:
33:08:67:d8:c4:dd:41:98:2e:cf:a5:8b:30:5b:1e:47:8f:b5:
57:6e:0b:ab:1b:23:fa:af:13:3e:47:1e:dd:2c:87:64:69:42:
49:fc:1b:65:47:40:29:e3:39:c0:34:20:a1:ca:c9:b1:60:74:
f5:85:37:e3:6f:55:00:21:21:50:f7:00:ca:a7:48:63:a7:5b:
d7:ac:61:a6:6f:30:73:1c:7f:6d:14:45:78:d2:e8:98:0c:f2:
7c:25:f7:0c:81:7f:eb:31:d5:06:dc:97:1a:db:dc:d8:09:a1:
43:be:2e:6c:83:79:de:64:3f:ba:37:a1:b6:52:ce:f9:19:70:
98:e9:f3:95:8f:c1:fa:53:a7:19:4c:7b:00:6f:1e:36:88:6c:
65:e5:23:86:af:e3:7f:74:f4:8c:9d:0d:38:af:b3:b9:b6:45:
73:cd:9e:c6:70:c6:99:5c:dd:34:ad:60:44:75:cc:fd:14:56:
94:bf:22:54:4a:7b:30:14:04:1d:cf:94:73:e7:af:10:be:43:
23:e9:7f:3e:4b:f3:59:b7:a9:5e:d0:54:da:68:f1:a3:20:85:
0a:36:01:be:80:97:09:67:94:9b:d0:14:ca:2f:0b:7b:cc:87:
5d:6c:f7:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfccq/gRBR7HQZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDIzN2FjODQtYzg2My00MjNhLWE2YTEtOGVhYTlmZDJkNzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnek7e8Dp4s8WDwS3sWDblDViYG1TD8E3v/k
t0xf1hq6MY3ML/bNEU+v6/eI9L6ITkIz+0ZknT6MUCnpv8bNugPFVV8ZCdqh167z
cGx4U/AHjL+QSYpwcTtk7duBnFcoXR6l6yRvLJc4Y1igLAVt+ebkQ52fPw9qrCF9
g1JI2ozO62WCi10FFA90bJr1l8rMcyb8B8Y4gI1dAenYyVfvZTVxagDUrlWmuTsR
FXpBBOZOqC4PFYvjkGmTmoJtJu4YnKHRVM1SISQxkIZ0lgGQCH76FSsV56YYUHoD
aZmaYSbkMLVTHArK8pLzRBGlls3DSLTXOMZi8N5O1P9V7C7/MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqus6pJa4SHtBrzXMAFi7a/empVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQ4OWFhMGMtMDNmOS0z
NmZiLWJjMTYtYzYxODBkZWQ3OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbjyzOGeGtN0jjG1QoX+73tNjMIZ9jE3UGYLs+lizBbHkePtVduC6sb
I/qvEz5HHt0sh2RpQkn8G2VHQCnjOcA0IKHKybFgdPWFN+NvVQAhIVD3AMqnSGOn
W9esYaZvMHMcf20URXjS6JgM8nwl9wyBf+sx1Qbclxrb3NgJoUO+LmyDed5kP7o3
obZSzvkZcJjp85WPwfpTpxlMewBvHjaIbGXlI4av43909IydDTivs7m2RXPNnsZw
xplc3TStYER1zP0UVpS/IlRKezAUBB3PlHPnrxC+QyPpfz5L81m3qV7QVNpo8aMg
hQo2Ab6AlwlnlJvQFMovC3vMh11s99Y=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:49:47 2026 by rpki-client