$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa File: 21c0517f-9487-3a11-9f93-dc69b7379b5d.roa (raw, json) Hash identifier: iZ1pT0btLxXQBQ+p2fzK5o4p0M5JtjQSFTDLN0rirwA= Subject key identifier: D8:86:DF:7E:B1:DB:FB:7A:57:44:77:95:29:DE:93:C3:7F:CC:6B:E2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4D8F00FB0B4CFC23CD40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397239 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4d:8f:00:fb:0b:4c:fc:23:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=f77586f8-7f39-4348-8fb8-891a363ec2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:7d:8c:b0:6e:1d:4b:87:20:fd:36:bc:f2: 16:cd:bb:eb:08:d2:fa:a1:9c:24:46:b0:ef:ba:fd: 62:1f:64:bb:6f:55:ad:87:cc:87:fe:7e:d8:d1:0f: 2e:b5:c0:7b:f9:b8:26:a7:24:db:cc:c5:05:2e:04: d4:4e:82:5c:32:fd:81:58:49:2a:6b:16:e9:9f:f4: d8:24:69:08:8b:77:13:32:d4:ca:62:a3:92:81:7a: 7d:c5:71:9a:b8:09:de:fc:63:8f:4d:89:c3:f9:9c: f6:f0:79:31:56:aa:71:a3:54:dd:fa:70:d2:24:a7: 00:78:19:7c:23:a5:15:ce:1f:78:f4:ac:10:38:da: 22:5d:17:a5:4a:29:9b:a8:16:7e:ff:dd:df:dd:be: aa:f3:7a:6e:52:27:2b:b0:7f:31:1a:01:a7:ff:f1: ea:90:c0:73:b8:78:4e:ae:8d:6c:62:2f:fb:78:fb: 71:f7:01:18:8e:f1:3c:ab:a1:04:70:19:de:26:31: f1:03:38:99:b3:ee:9d:a4:d2:bc:3a:97:bc:34:c4: 8b:77:50:6b:b1:e9:06:ce:f0:62:8b:3c:84:79:20: 2e:9a:f0:c7:57:59:73:b1:39:d8:02:40:db:b0:39: 80:ec:bf:b9:0e:22:75:65:e6:30:aa:2c:d4:4e:8b: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:DF:7E:B1:DB:FB:7A:57:44:77:95:29:DE:93:C3:7F:CC:6B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21c0517f-9487-3a11-9f93-dc69b7379b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:70:e9:c7:eb:89:5b:2b:5c:e4:6f:09:f3:59:a1:01:bb:e7: 25:41:77:79:5e:c1:5b:57:36:4b:c6:8e:8b:19:cc:27:cf:a5: aa:b7:7a:45:a4:2e:bb:b7:95:29:4d:61:33:67:55:3d:41:57: 92:3e:92:e4:c5:51:5b:15:ec:dc:46:ec:6d:8a:11:54:e0:4d: 4e:e6:3c:ee:66:eb:28:5a:dd:4c:56:f0:40:04:ad:a4:b2:5c: f0:9e:65:24:09:a8:ae:c8:fb:11:cd:53:e0:f1:e9:9a:f7:26: cd:54:62:f4:7d:9f:bb:ce:14:66:1c:f9:81:0b:a5:6e:80:ea: 07:15:e3:2f:39:5a:e4:39:67:12:56:21:08:2d:ec:ce:d5:81: 49:30:37:25:28:1b:9f:f1:be:1f:bb:8c:fa:60:2c:56:0b:68: d4:17:77:ec:54:4e:94:a0:16:85:5d:4a:6e:75:65:9f:0f:3d: 9c:1b:6f:1d:c3:16:99:4d:01:6e:17:bc:bc:f8:68:1a:1f:02: 86:33:73:f5:39:18:8b:f0:d1:9e:67:ec:bd:d7:32:43:b5:fa: 15:01:c7:22:fa:59:00:2e:aa:a8:6d:f5:fd:6e:e4:b8:a4:8f: 43:6d:b6:f2:06:4a:82:a1:5b:f1:d2:8d:90:78:18:38:2f:c1: 4c:cc:c9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGk2PAPsLTPwjzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Zjc3NTg2ZjgtN2YzOS00MzQ4LThmYjgtODkxYTM2M2VjMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcN9jLBuHUuHIP02vPIWzbvrCNL6oZwkRrDv uv1iH2S7b1Wth8yH/n7Y0Q8utcB7+bgmpyTbzMUFLgTUToJcMv2BWEkqaxbpn/TY JGkIi3cTMtTKYqOSgXp9xXGauAne/GOPTYnD+Zz28HkxVqpxo1Td+nDSJKcAeBl8 I6UVzh949KwQONoiXRelSimbqBZ+/93f3b6q83puUicrsH8xGgGn//HqkMBzuHhO ro1sYi/7ePtx9wEYjvE8q6EEcBneJjHxAziZs+6dpNK8Ope8NMSLd1BrsekGzvBi izyEeSAumvDHV1lzsTnYAkDbsDmA7L+5DiJ1ZeYwqizUTovjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiG336x2/t6V0R3lSnek8N/zGviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFjMDUxN2YtOTQ4Ny0z YTExLTlmOTMtZGM2OWI3Mzc5YjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlw6cfriVsrXORvCfNZoQG75yVBd3lewVtXNkvGjosZzCfPpaq3ekWk Lru3lSlNYTNnVT1BV5I+kuTFUVsV7NxG7G2KEVTgTU7mPO5m6yha3UxW8EAEraSy XPCeZSQJqK7I+xHNU+Dx6Zr3Js1UYvR9n7vOFGYc+YELpW6A6gcV4y85WuQ5ZxJW IQgt7M7VgUkwNyUoG5/xvh+7jPpgLFYLaNQXd+xUTpSgFoVdSm51ZZ8PPZwbbx3D FplNAW4XvLz4aBofAoYzc/U5GIvw0Z5n7L3XMkO1+hUBxyL6WQAuqqht9f1u5Lik j0NttvIGSoKhW/HSjZB4GDgvwUzMyZ0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:40 2026 by rpki-client