$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa File: 14e13490-7b59-32da-be38-c9fcf408a3e2.roa (raw, json) Hash identifier: u6LpgGHR+Z434VjSlKkjjzAesySz2sTHBSS+reJonwg= Subject key identifier: 23:41:12:BA:46:00:5D:02:DA:07:D4:0C:45:C4:B6:17:03:C8:36:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4F40B0CD073974E114C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397231 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4f:40:b0:cd:07:39:74:e1:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=27e47ed4-3f2d-4eb2-8870-62ea0f930bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:a9:a0:c8:89:43:e3:6d:39:75:0d:47:21: 07:e2:60:38:00:9a:4e:08:17:fb:05:68:b2:47:a3: 24:9e:c1:cd:f8:5d:51:44:fd:90:01:57:4f:88:71: c6:a4:ff:a4:fd:16:51:ea:2f:11:74:5b:af:f7:66: 3a:2d:bd:a2:42:2f:1d:4b:cf:47:0f:08:09:b5:2d: 00:c7:91:da:63:9a:3f:b8:c0:57:7a:99:9e:74:59: ee:4f:c0:03:93:fe:1b:c0:56:c7:16:0f:7c:0a:ca: bb:2a:54:aa:1f:9a:f2:01:0c:3b:06:91:67:55:70: cf:03:82:d1:ab:e4:e3:dc:49:81:8f:72:7a:e9:dc: 76:f5:c4:c0:1a:ba:8f:0b:15:ed:5c:3d:70:be:ee: a1:3b:2a:cd:f8:5e:58:76:70:91:76:6b:1b:fe:83: 98:24:13:28:55:a1:f2:fc:0e:63:fc:de:66:f1:0a: dd:4a:83:87:a9:bf:9c:00:c0:52:c2:26:10:3f:35: 56:05:18:d3:18:60:e5:ef:06:de:77:a6:bf:82:09: 35:4e:f6:a8:87:4d:92:38:cc:8c:e4:35:d8:c1:77: b0:19:68:51:49:9e:54:9d:d1:b6:3f:12:3c:d8:b0: 96:c4:1d:3f:19:d0:1e:97:c7:d3:f2:b0:12:bf:90: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:12:BA:46:00:5D:02:DA:07:D4:0C:45:C4:B6:17:03:C8:36:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14e13490-7b59-32da-be38-c9fcf408a3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c1:d0:7c:21:93:d3:8a:1c:71:98:bc:3c:3c:6d:66:5e:a8: e8:49:59:1b:98:f7:97:1b:d7:f8:ff:1a:5d:ff:66:7b:4b:ee: 48:2b:d3:fa:ca:1e:41:ae:b4:0b:de:cd:75:9a:94:ac:64:33: 42:d5:a1:33:dc:10:fe:68:b1:ec:64:a7:d3:d0:b8:13:a2:d5: ad:00:d8:2b:b9:21:4e:c2:ad:a2:51:f6:28:e5:9a:de:eb:49: 14:f9:52:f2:fd:b1:17:c9:60:ac:f9:fe:67:50:71:88:be:de: e8:52:b4:3e:67:2e:c2:cf:db:e2:bc:f1:f7:90:2e:a4:5d:44: fb:0a:6d:85:80:11:2d:40:74:de:99:f0:d4:19:4b:c7:df:fc: 77:d3:e1:51:28:7d:42:c6:bf:3a:73:58:e6:6c:41:0e:6f:7c: 70:c9:fe:ea:94:b5:32:db:8e:41:35:a4:5e:e3:0f:04:a2:5b: 94:25:08:08:bc:12:8a:6c:69:2e:7d:0a:98:93:fa:21:7a:0c: 82:72:15:27:4c:b4:93:e5:a3:c7:bd:3f:15:e7:a2:a5:b3:d3: 5c:e6:00:56:1b:59:32:66:0f:9e:8a:b8:6e:93:d8:e0:bf:27: 46:04:84:25:fc:75:02:9e:08:19:6b:94:15:c4:6b:6d:e5:a4: eb:b9:3d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGk9AsM0HOXThFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjdlNDdlZDQtM2YyZC00ZWIyLTg4NzAtNjJlYTBmOTMwYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUepoMiJQ+NtOXUNRyEH4mA4AJpOCBf7BWiy R6MknsHN+F1RRP2QAVdPiHHGpP+k/RZR6i8RdFuv92Y6Lb2iQi8dS89HDwgJtS0A x5HaY5o/uMBXepmedFnuT8ADk/4bwFbHFg98Csq7KlSqH5ryAQw7BpFnVXDPA4LR q+Tj3EmBj3J66dx29cTAGrqPCxXtXD1wvu6hOyrN+F5YdnCRdmsb/oOYJBMoVaHy /A5j/N5m8QrdSoOHqb+cAMBSwiYQPzVWBRjTGGDl7wbed6a/ggk1Tvaoh02SOMyM 5DXYwXewGWhRSZ5UndG2PxI82LCWxB0/GdAel8fT8rASv5AXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNBErpGAF0C2gfUDEXEthcDyDZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTRlMTM0OTAtN2I1OS0z MmRhLWJlMzgtYzlmY2Y0MDhhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPB0Hwhk9OKHHGYvDw8bWZeqOhJWRuY95cb1/j/Gl3/ZntL7kgr0/rK HkGutAvezXWalKxkM0LVoTPcEP5osexkp9PQuBOi1a0A2Cu5IU7CraJR9ijlmt7r SRT5UvL9sRfJYKz5/mdQcYi+3uhStD5nLsLP2+K88feQLqRdRPsKbYWAES1AdN6Z 8NQZS8ff/HfT4VEofULGvzpzWOZsQQ5vfHDJ/uqUtTLbjkE1pF7jDwSiW5QlCAi8 EopsaS59CpiT+iF6DIJyFSdMtJPlo8e9PxXnoqWz01zmAFYbWTJmD56KuG6T2OC/ J0YEhCX8dQKeCBlrlBXEa23lpOu5PbQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:24 2026 by rpki-client