$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa File: 2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa (raw, json) Hash identifier: EGC6f0DrlmYF4tr1Jr+ZdiSG5aSYu+tJcbmq/NvN6Qc= Subject key identifier: BA:4B:BE:E4:B5:C1:83:DD:97:08:7B:B2:55:62:AA:9E:C3:15:98:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912A029FD9CAD6E32BB4310 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397243 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:a0:29:fd:9c:ad:6e:32:bb:43:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=72d38634-4a5a-4185-bd9e-9a1758150752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:95:e5:f1:f9:c6:ee:fd:46:e9:30:59:01: 05:47:db:52:13:87:48:0b:a1:e7:f6:8a:65:a6:e9: 6c:af:77:49:97:ba:e5:93:e2:ff:0e:bf:13:f1:c1: 95:a0:e8:17:ef:22:ef:39:04:f0:e5:53:8d:6f:d8: ee:8d:5c:3c:10:f2:dc:df:db:77:5f:98:18:97:bc: 9f:0d:8e:dc:70:51:d4:e6:ed:79:04:99:fd:72:07: 2e:99:24:e3:be:53:25:fc:7a:44:cd:20:bc:67:57: a9:3e:df:43:cd:0c:59:f8:29:62:6b:1a:f9:b0:e6: 57:29:5c:5f:bb:0f:a8:04:6f:75:17:9a:89:c3:80: d6:7d:e6:b2:41:a0:de:0f:b9:82:aa:4a:d4:30:4e: 1f:60:68:c2:b4:2c:02:f4:8a:a5:7b:69:cd:16:47: 25:77:65:dc:a2:4e:12:4e:38:b6:db:35:82:d7:c1: 19:78:88:88:38:33:b1:c0:e9:6e:12:2a:72:60:c3: bc:58:5f:f2:e3:45:b9:16:60:b8:ee:a1:36:17:be: b4:9c:bd:4b:d9:ad:5d:a1:ec:df:c9:6b:ac:0a:97: 14:df:69:0a:4b:57:e6:be:46:9c:87:38:f6:01:4e: e7:14:c6:da:85:6d:af:34:be:cc:5c:6d:2a:86:e9: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4B:BE:E4:B5:C1:83:DD:97:08:7B:B2:55:62:AA:9E:C3:15:98:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4f:8c:fa:1f:6a:00:ef:93:cd:4a:d0:a9:a5:61:2e:59:4e: e8:7b:29:64:79:3a:2b:a9:1f:d5:a6:4c:a7:d4:be:42:f5:1e: 45:8b:b4:2e:0d:c0:63:73:92:d7:37:c0:45:a2:98:e3:41:75: 84:f1:0a:99:99:d0:71:fa:a1:7f:25:08:8d:7b:79:2c:f8:53: 5f:66:36:cf:a8:ff:b0:ec:69:5d:49:13:63:f5:0e:c2:9a:55: 59:3e:24:12:6e:3f:a8:e4:1b:3c:dd:7c:e6:fa:e1:a4:0c:17: f8:ed:7a:31:88:63:b2:88:d8:89:dc:e5:81:e2:20:77:52:bf: 48:4e:e8:05:ca:2c:8a:26:bb:f5:85:59:09:6e:da:08:49:3d: 11:d1:11:1f:08:de:ed:1f:a7:b6:ab:e3:78:ad:e5:ee:9a:ae: f6:69:ec:39:e5:d5:fa:77:ce:b5:27:df:5a:6e:71:97:75:1d: 4a:b9:64:2b:2d:d2:80:7b:33:78:bc:31:e9:07:39:95:97:95: ec:8d:6d:cf:61:7d:00:96:ad:8b:8a:a9:8e:0c:5d:be:a3:a8: 8a:6b:31:68:0b:bb:eb:ab:6c:f0:f7:7e:49:ee:13:4d:56:e5: 8c:5b:f3:87:84:b8:d1:52:0a:f7:a4:2d:7a:3a:8a:f9:f0:b9: fc:01:ca:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEqAp/ZytbjK7QxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzJkMzg2MzQtNGE1YS00MTg1LWJkOWUtOWExNzU4MTUwNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwuV5fH5xu79RukwWQEFR9tSE4dIC6Hn9opl pulsr3dJl7rlk+L/Dr8T8cGVoOgX7yLvOQTw5VONb9jujVw8EPLc39t3X5gYl7yf DY7ccFHU5u15BJn9cgcumSTjvlMl/HpEzSC8Z1epPt9DzQxZ+Cliaxr5sOZXKVxf uw+oBG91F5qJw4DWfeayQaDeD7mCqkrUME4fYGjCtCwC9Iqle2nNFkcld2Xcok4S Tji22zWC18EZeIiIODOxwOluEipyYMO8WF/y40W5FmC47qE2F760nL1L2a1doezf yWusCpcU32kKS1fmvkachzj2AU7nFMbahW2vNL7MXG0qhumITwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpLvuS1wYPdlwh7slViqp7DFZgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI3NzExYzctNjJiMS0z MDQzLTlkZDgtMTFiMjVhMWJmNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5PjPofagDvk81K0KmlYS5ZTuh7KWR5OiupH9WmTKfUvkL1HkWLtC4N wGNzktc3wEWimONBdYTxCpmZ0HH6oX8lCI17eSz4U19mNs+o/7DsaV1JE2P1DsKa VVk+JBJuP6jkGzzdfOb64aQMF/jtejGIY7KI2Inc5YHiIHdSv0hO6AXKLIomu/WF WQlu2ghJPRHRER8I3u0fp7ar43it5e6arvZp7Dnl1fp3zrUn31pucZd1HUq5ZCst 0oB7M3i8MekHOZWXleyNbc9hfQCWrYuKqY4MXb6jqIprMWgLu+urbPD3fknuE01W 5Yxb84eEuNFSCvekLXo6ivnwufwBynI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:56 2026 by rpki-client