$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa File: 295b255d-f316-3c00-8ce6-433c9ed6a599.roa (raw, json) Hash identifier: 0MydPNCaVTCDV2GgsGIAmoRZ0RJwzOILXmr7i/Ugni4= Subject key identifier: 01:45:61:3E:C9:EB:52:EE:40:CD:A4:F2:D1:28:4F:72:72:E3:91:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4185B058C30A0259C500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397218 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:41:85:b0:58:c3:0a:02:59:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=606d932b-1c9a-425d-9408-fc6ac59ae47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:56:e1:d1:4c:18:48:a8:1d:1d:e5:e7:5f: f2:71:ed:94:2d:77:57:46:55:ef:10:b9:ca:1d:e5: 65:fc:c2:44:68:f6:fe:7a:93:f5:e4:a4:05:64:85: e6:05:44:26:80:92:f2:72:c5:69:27:ba:e9:86:14: 19:33:6f:88:30:52:ad:6c:99:dc:8b:30:8d:c9:a9: da:f0:08:fc:37:b7:63:fa:28:7f:7e:c9:aa:7a:f3: 78:f3:eb:14:28:0f:12:5f:dc:89:07:80:2f:9e:76: 1e:c4:75:bc:e4:9b:ee:54:5f:1f:9f:8c:3d:72:e9: af:a9:fd:b6:3b:75:b8:22:b2:9e:ab:a1:b7:ff:2f: fb:4d:7c:1b:03:fd:21:0b:cc:b6:47:af:01:42:7b: b4:5a:d2:94:30:42:e0:64:b0:78:3b:91:a0:2c:60: 30:93:28:bd:59:72:4f:83:b1:b1:30:21:a5:5d:63: 71:b0:0e:b4:78:36:dd:df:b8:e3:ea:0e:70:76:32: 6e:45:72:52:83:78:91:d4:35:dd:b4:a1:e5:f8:06: 34:5b:46:68:e3:03:c6:e1:5e:5d:2c:8a:20:bb:6c: 98:a5:91:66:a0:9d:91:27:11:8e:72:4e:0e:aa:ac: b8:72:3a:11:8d:b0:fc:47:40:b8:ae:45:ec:72:de: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:45:61:3E:C9:EB:52:EE:40:CD:A4:F2:D1:28:4F:72:72:E3:91:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/295b255d-f316-3c00-8ce6-433c9ed6a599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b3:ce:a5:bf:ca:ff:3f:5f:0d:26:77:89:9d:bf:9c:f6:cf: 41:68:a9:4e:a1:0c:84:d9:92:36:1e:4e:d1:f3:30:b0:6a:b2: 0c:8f:05:52:57:dc:04:6e:a7:41:d5:76:e8:42:ea:62:96:01: af:a2:6f:22:aa:29:f3:d8:ad:02:67:37:4d:27:fe:87:8d:7c: 1e:b4:cc:3e:36:2d:d6:14:1d:46:00:cf:96:ca:6f:13:96:c7: b6:b7:38:e2:98:73:15:17:ac:9b:33:93:a7:b9:7b:6c:61:dc: 4c:6b:e2:d4:fc:4b:12:3a:70:ff:34:38:0e:c2:b3:85:98:cb: 65:dc:68:24:4a:45:c6:a0:17:18:04:4d:bf:a1:fe:63:08:2f: a2:68:8e:03:5a:3e:d8:27:c3:92:98:19:39:0f:43:07:c0:f5: 32:f4:a1:5a:57:97:81:58:b2:f6:3a:9c:31:8b:4e:9f:ed:02: b8:c1:f4:dd:28:87:0a:b0:17:f7:c8:85:d5:43:22:7b:54:ad: 81:d4:51:1b:bb:ad:fb:f5:8b:35:60:c1:44:33:30:06:4f:c7: 70:ea:77:a5:59:b6:b0:10:8b:56:b7:c9:80:d2:35:bc:a4:15: cc:2e:4e:6b:04:a6:3a:cf:a5:42:fd:38:2d:75:4e:e6:10:e3: ff:86:1d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkGFsFjDCgJZxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NjA2ZDkzMmItMWM5YS00MjVkLTk0MDgtZmM2YWM1OWFlNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3hW4dFMGEioHR3l51/yce2ULXdXRlXvELnK HeVl/MJEaPb+epP15KQFZIXmBUQmgJLycsVpJ7rphhQZM2+IMFKtbJncizCNyana 8Aj8N7dj+ih/fsmqevN48+sUKA8SX9yJB4AvnnYexHW85JvuVF8fn4w9cumvqf22 O3W4IrKeq6G3/y/7TXwbA/0hC8y2R68BQnu0WtKUMELgZLB4O5GgLGAwkyi9WXJP g7GxMCGlXWNxsA60eDbd37jj6g5wdjJuRXJSg3iR1DXdtKHl+AY0W0Zo4wPG4V5d LIogu2yYpZFmoJ2RJxGOck4Oqqy4cjoRjbD8R0C4rkXsct6lhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFFYT7J61LuQM2k8tEoT3Jy45EKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjk1YjI1NWQtZjMxNi0z YzAwLThjZTYtNDMzYzllZDZhNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSzzqW/yv8/Xw0md4mdv5z2z0FoqU6hDITZkjYeTtHzMLBqsgyPBVJX 3ARup0HVduhC6mKWAa+ibyKqKfPYrQJnN00n/oeNfB60zD42LdYUHUYAz5bKbxOW x7a3OOKYcxUXrJszk6e5e2xh3Exr4tT8SxI6cP80OA7Cs4WYy2XcaCRKRcagFxgE Tb+h/mMIL6JojgNaPtgnw5KYGTkPQwfA9TL0oVpXl4FYsvY6nDGLTp/tArjB9N0o hwqwF/fIhdVDIntUrYHUURu7rfv1izVgwUQzMAZPx3Dqd6VZtrAQi1a3yYDSNbyk FcwuTmsEpjrPpUL9OC11TuYQ4/+GHRc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:16 2026 by rpki-client