$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa File: 20a1ef9a-507c-32e7-a417-2c2460c4b459.roa (raw, json) Hash identifier: 3D9nQi9XIvT643EdXrQcuo47FzQz5qjjLu5f5jgXirQ= Subject key identifier: 84:03:89:34:58:47:1E:AD:3D:CA:8B:EE:BF:E1:A4:BA:BB:C7:F2:97 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129ED8D2CAFE5E675BEB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397223 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:9e:d8:d2:ca:fe:5e:67:5b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=01bcde1b-8216-4815-a22d-93899a16d380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:54:c2:95:66:30:82:32:64:ab:2b:00:f4: 73:02:3a:06:9d:d8:03:c3:98:d3:dd:05:50:f0:19: 99:12:96:80:37:f8:46:ed:c4:52:30:62:cf:06:2d: f2:9c:f4:78:0d:ca:ad:a8:72:49:a6:63:df:19:b4: cc:fa:36:f5:e9:52:b0:71:7e:d2:68:9d:3e:df:58: 32:70:29:08:d3:59:61:49:d3:59:c7:ca:5b:76:9f: fe:51:98:3a:db:1f:11:9c:1c:c1:98:6a:0d:ad:7c: f8:62:6e:aa:3e:26:ef:70:4b:94:c8:3b:99:7a:a7: e9:5d:92:60:3d:66:bb:05:0b:6d:40:9c:e0:32:f7: 1f:fc:50:9e:b7:75:6c:0c:1b:e4:6d:fb:56:7d:12: fa:58:3b:fd:01:50:6a:f6:e5:fc:43:a8:19:18:7e: d2:13:e4:2e:54:91:26:a6:51:b3:b6:7c:d9:29:8b: fe:d8:2e:a2:ff:ab:73:75:ea:3c:bd:25:2e:c1:82: db:a9:f5:bb:4d:bb:a4:6e:c9:cc:00:0c:7c:8d:f9: a1:06:b3:21:93:52:b3:d1:38:59:a7:93:53:dc:7b: d8:19:8c:a1:f5:83:20:c4:27:58:3b:cf:12:fc:8b: 64:b8:f9:67:05:2e:57:12:34:9b:32:a9:c2:98:7d: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:89:34:58:47:1E:AD:3D:CA:8B:EE:BF:E1:A4:BA:BB:C7:F2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a7:d3:62:2b:a8:28:cd:78:7a:7f:52:66:be:ba:61:94:61: e4:d4:4a:47:9e:c5:7b:d9:40:5e:be:16:24:a7:8b:a4:71:2c: 69:76:72:c0:21:a5:61:19:e0:bb:33:4d:89:57:05:a8:a5:af: 9b:5e:bb:2a:24:11:26:58:b3:76:85:5e:5d:45:98:3b:ba:2e: 1e:1e:ba:5f:96:f8:a8:70:82:d8:36:c2:34:1e:7b:a6:d1:e2: 04:1c:48:67:ba:59:96:18:d3:f7:72:9a:b8:83:17:2f:96:9f: 3f:ca:96:78:39:dd:ad:f3:f1:88:d5:28:4f:0a:6b:03:f4:27: 30:52:05:e1:14:64:78:84:b1:35:75:18:e0:0f:1f:7b:65:78: 32:85:f6:8d:5b:6b:d6:36:0e:5d:eb:7b:b1:b3:6c:50:9e:27: 67:6d:90:75:73:5e:fa:fa:4f:34:ee:36:4f:10:19:74:30:e0: 50:63:a4:c7:12:47:8b:da:3b:9e:e0:9d:73:16:dd:9e:2d:f2: 86:22:ea:33:d4:33:5c:72:d7:67:80:c4:dd:66:ae:70:ac:14: 73:f9:0c:6f:61:50:7e:7a:e7:07:ba:97:84:01:b5:74:11:b2: 42:96:95:d0:16:68:66:d7:13:f4:9f:52:71:95:d0:b0:3e:89: 36:bc:fc:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEp7Y0sr+Xmdb60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDFiY2RlMWItODIxNi00ODE1LWEyMmQtOTM4OTlhMTZkMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64hUwpVmMIIyZKsrAPRzAjoGndgDw5jT3QVQ 8BmZEpaAN/hG7cRSMGLPBi3ynPR4DcqtqHJJpmPfGbTM+jb16VKwcX7SaJ0+31gy cCkI01lhSdNZx8pbdp/+UZg62x8RnBzBmGoNrXz4Ym6qPibvcEuUyDuZeqfpXZJg PWa7BQttQJzgMvcf/FCet3VsDBvkbftWfRL6WDv9AVBq9uX8Q6gZGH7SE+QuVJEm plGztnzZKYv+2C6i/6tzdeo8vSUuwYLbqfW7TbukbsnMAAx8jfmhBrMhk1Kz0ThZ p5NT3HvYGYyh9YMgxCdYO88S/ItkuPlnBS5XEjSbMqnCmH1NfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQDiTRYRx6tPcqL7r/hpLq7x/KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjBhMWVmOWEtNTA3Yy0z MmU3LWE0MTctMmMyNDYwYzRiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSn02IrqCjNeHp/Uma+umGUYeTUSkeexXvZQF6+FiSni6RxLGl2csAh pWEZ4LszTYlXBailr5teuyokESZYs3aFXl1FmDu6Lh4eul+W+Khwgtg2wjQee6bR 4gQcSGe6WZYY0/dymriDFy+Wnz/Klng53a3z8YjVKE8KawP0JzBSBeEUZHiEsTV1 GOAPH3tleDKF9o1ba9Y2Dl3re7GzbFCeJ2dtkHVzXvr6TzTuNk8QGXQw4FBjpMcS R4vaO57gnXMW3Z4t8oYi6jPUM1xy12eAxN1mrnCsFHP5DG9hUH565we6l4QBtXQR skKWldAWaGbXE/SfUnGV0LA+iTa8/EI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:27 2026 by rpki-client