$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa File: 1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa (raw, json) Hash identifier: oTVj3XALG0a6ZXx6hQYSIfz3nqyL4k6qsmYS6nyJQS4= Subject key identifier: 4F:81:D9:B6:74:A7:9A:83:2B:44:01:6B:63:C2:F7:91:A7:74:4E:35 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A2ECD8B2DACDC74027300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397240 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:2e:cd:8b:2d:ac:dc:74:02:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=7941fbbd-2b04-4d33-b240-50227206bde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:12:24:a4:f5:8b:52:33:ed:d2:19:e3:28: 5d:64:ae:22:86:f7:da:46:75:cf:ef:00:ce:a1:fe: 70:cd:8b:1d:3e:1b:8d:47:1d:22:f6:39:ce:c4:17: 51:1b:a8:0e:2b:ec:54:58:67:3b:27:7a:c8:89:d4: 83:8a:20:b4:af:3f:7a:a5:80:06:84:3c:aa:73:70: da:61:b3:40:d9:34:73:f7:11:42:85:24:ea:e5:a9: 04:25:45:97:a7:b9:18:5c:53:4a:06:cd:a4:87:80: 5d:5a:54:e9:c6:97:b6:f4:4e:fd:54:5b:ee:65:07: da:a4:b2:9a:32:ff:cb:73:95:50:af:f6:4c:cd:f6: 7e:cb:06:0f:b6:6f:51:ee:01:5e:fb:15:b8:ec:4d: 2c:9c:5a:b7:47:1a:0c:e9:24:a3:aa:7b:46:e1:4b: 3d:fb:a2:53:95:6f:b3:28:bc:28:86:58:80:a9:26: 1e:3f:22:91:d3:95:b7:51:f7:f5:d2:8f:5f:5d:86: 6f:90:20:40:4b:92:04:d0:1c:b8:09:e8:b9:06:a6: 9a:39:0d:af:49:73:a4:37:b4:4f:74:1d:61:b2:14: 70:7c:5d:06:ce:79:af:ac:a6:fd:cd:aa:3e:c9:a8: dc:09:73:5c:eb:41:2f:47:b1:c8:7f:fa:75:1d:70: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:D9:B6:74:A7:9A:83:2B:44:01:6B:63:C2:F7:91:A7:74:4E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ef16400-e2c5-3ed8-b2e2-ce86cff7143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:44:75:87:7e:15:59:2e:be:a9:4d:b1:b6:5f:de:f6:4f:94: df:f7:54:54:4c:ce:31:4e:17:27:69:e5:8c:36:ab:7c:79:ff: d9:78:85:9a:02:c8:4e:c8:eb:cb:72:4f:f5:20:23:2e:f6:89: 7d:6a:4e:01:ef:5d:da:65:e4:6d:93:1d:fb:d0:2e:32:4c:51: 9c:cc:5f:a4:62:2b:71:ed:89:d2:97:23:0a:4b:8f:c1:d8:7c: 93:6c:e9:fe:95:79:6e:24:cc:01:ee:95:7c:80:7b:79:cc:3a: 07:31:f0:8b:4b:da:fd:c5:c3:36:6d:0f:09:48:3e:5f:e4:14: 90:7e:81:e0:12:95:74:94:10:2b:3d:67:31:a9:d4:ab:b3:64: 48:ba:52:87:54:18:7a:f9:04:c8:46:10:5c:5e:7b:8b:29:d3: 15:a2:e5:8f:8b:75:f9:ec:82:22:d4:78:1f:81:81:f4:d4:ae: 73:91:5f:d1:29:ff:ba:a9:f5:67:0f:b3:11:c4:49:a9:cb:86: 9b:8b:8f:b2:0c:1d:67:67:c4:c3:e3:4f:3b:66:57:76:d8:e9: 36:af:80:50:fd:6c:7e:a4:4c:2a:24:61:c8:3f:a6:61:60:89: ab:da:f1:00:1d:e4:bd:6f:24:ca:62:1c:8f:ca:da:89:6a:fc: 7a:2d:d1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGi7Niy2s3HQCcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Nzk0MWZiYmQtMmIwNC00ZDMzLWIyNDAtNTAyMjcyMDZiZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuESJKT1i1Iz7dIZ4yhdZK4ihvfaRnXP7wDO of5wzYsdPhuNRx0i9jnOxBdRG6gOK+xUWGc7J3rIidSDiiC0rz96pYAGhDyqc3Da YbNA2TRz9xFChSTq5akEJUWXp7kYXFNKBs2kh4BdWlTpxpe29E79VFvuZQfapLKa Mv/Lc5VQr/ZMzfZ+ywYPtm9R7gFe+xW47E0snFq3RxoM6SSjqntG4Us9+6JTlW+z KLwohliAqSYePyKR05W3Uff10o9fXYZvkCBAS5IE0By4Cei5BqaaOQ2vSXOkN7RP dB1hshRwfF0GznmvrKb9zao+yajcCXNc60EvR7HIf/p1HXC1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+B2bZ0p5qDK0QBa2PC95GndE41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWVmMTY0MDAtZTJjNS0z ZWQ4LWIyZTItY2U4NmNmZjcxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEREdYd+FVkuvqlNsbZf3vZPlN/3VFRMzjFOFydp5Yw2q3x5/9l4hZoC yE7I68tyT/UgIy72iX1qTgHvXdpl5G2THfvQLjJMUZzMX6RiK3HtidKXIwpLj8HY fJNs6f6VeW4kzAHulXyAe3nMOgcx8ItL2v3FwzZtDwlIPl/kFJB+geASlXSUECs9 ZzGp1KuzZEi6UodUGHr5BMhGEFxee4sp0xWi5Y+LdfnsgiLUeB+BgfTUrnORX9Ep /7qp9WcPsxHESanLhpuLj7IMHWdnxMPjTztmV3bY6TavgFD9bH6kTCokYcg/pmFg iava8QAd5L1vJMpiHI/K2olq/Hot0QI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:17 2026 by rpki-client