$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa File: 2fc374b3-e0bd-3554-9c0e-8066532d105d.roa (raw, json) Hash identifier: N3DHpKPpnzTvRlEsGuzuHkd8Znc+RVgSpBOo4UPKqr0= Subject key identifier: 55:F6:1A:5C:06:AE:DD:E4:DA:CA:E7:DD:CA:E0:6B:00:FB:59:97:45 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4511BFB4A3E0AD16AF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397240 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:45:11:bf:b4:a3:e0:ad:16:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4df5de52-3bb3-4a07-a1e9-1af0a1a05386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:31:86:a6:55:52:7d:81:c3:78:16:bd:9e: c0:8b:ff:e2:77:c6:b2:5d:2e:27:81:0d:91:9c:3c: 0a:ff:a8:d2:75:1e:99:6a:f4:3f:1a:16:90:a1:61: 60:95:75:d8:1d:78:1e:35:54:f5:3f:73:04:60:1d: 62:34:0e:27:a3:4d:63:02:5a:d2:e9:db:4c:b3:d1: c7:90:58:d6:bc:ce:8d:ec:ac:ba:96:c0:5e:1a:d8: d5:f6:66:dd:f0:63:fe:dd:d9:3d:04:53:6a:b3:86: fe:ab:c4:d4:ab:e4:a5:ea:d5:ba:30:79:50:8d:4d: 75:fc:5b:52:c0:42:c6:4f:97:7f:e9:98:e7:80:2c: 77:4f:80:21:50:14:68:46:b7:2d:59:7b:6e:4f:99: 4c:89:fe:b2:d7:4c:5b:47:7c:1d:02:0a:2b:4c:88: e0:29:71:c5:54:4f:b8:f7:01:0f:8e:0b:a8:ba:a5: f8:da:9a:4b:f0:f5:f1:fb:df:04:4f:a0:31:e4:c6: 5d:69:24:f4:38:ad:32:3a:97:4b:6e:55:3f:e6:ae: 67:73:27:6d:ac:40:5b:e0:ee:cb:86:12:30:7a:87: 88:10:f0:bd:8f:34:b2:91:42:d2:8a:1d:31:53:a9: 3b:af:32:a1:2f:77:47:ae:19:8d:e6:6a:4e:75:ca: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:1A:5C:06:AE:DD:E4:DA:CA:E7:DD:CA:E0:6B:00:FB:59:97:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fc374b3-e0bd-3554-9c0e-8066532d105d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bb:72:30:ab:8f:82:71:86:3e:09:1a:58:8f:94:cd:44:5a: 92:4a:bb:98:f3:e4:44:00:94:8c:6f:08:b8:49:d9:a3:e7:c6: ca:7c:50:35:f4:c5:3b:38:8c:6a:9f:1c:c5:87:ef:a7:62:db: 3b:12:c5:80:e4:25:65:b2:9a:60:9c:10:f8:9d:81:12:98:89: 0b:6b:e9:a5:5f:d6:b5:0e:11:37:6e:11:55:5f:6c:4d:17:61: e3:b1:fd:fc:4a:d9:88:3a:6a:9c:63:49:77:eb:aa:c9:36:c3: 01:33:9c:f7:71:f3:62:93:6e:67:fd:5a:3e:31:89:e3:39:51: 42:20:42:dd:2e:05:f1:fc:b8:9b:74:a6:98:f7:a9:da:7e:52: fb:2c:1f:8e:8e:c4:fe:63:0f:40:f3:59:9d:6f:cd:7d:a9:9e: 63:28:d7:71:fc:fc:93:58:b3:59:81:fb:3c:4e:c8:6d:16:6e: e9:db:7f:02:ef:14:5b:f4:e6:e0:f6:21:40:b2:88:c5:96:0e: 28:7e:eb:7e:16:cc:6b:1a:47:89:cf:49:7d:37:4c:a5:0b:fd: 8f:a9:d1:8b:5d:34:94:cb:ce:f2:ea:ec:5b:a4:5e:2c:06:da: 1d:12:83:64:97:f4:e1:24:af:3d:b7:a2:b3:55:47:8f:f2:6c: da:a0:f6:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkURv7Sj4K0WrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGRmNWRlNTItM2JiMy00YTA3LWExZTktMWFmMGExYTA1Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui0xhqZVUn2Bw3gWvZ7Ai//id8ayXS4ngQ2R nDwK/6jSdR6ZavQ/GhaQoWFglXXYHXgeNVT1P3MEYB1iNA4no01jAlrS6dtMs9HH kFjWvM6N7Ky6lsBeGtjV9mbd8GP+3dk9BFNqs4b+q8TUq+Sl6tW6MHlQjU11/FtS wELGT5d/6ZjngCx3T4AhUBRoRrctWXtuT5lMif6y10xbR3wdAgorTIjgKXHFVE+4 9wEPjguouqX42ppL8PXx+98ET6Ax5MZdaST0OK0yOpdLblU/5q5ncydtrEBb4O7L hhIweoeIEPC9jzSykULSih0xU6k7rzKhL3dHrhmN5mpOdcqQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX2GlwGrt3k2srn3crgawD7WZdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmZjMzc0YjMtZTBiZC0z NTU0LTljMGUtODA2NjUzMmQxMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy7cjCrj4Jxhj4JGliPlM1EWpJKu5jz5EQAlIxvCLhJ2aPnxsp8UDX0 xTs4jGqfHMWH76di2zsSxYDkJWWymmCcEPidgRKYiQtr6aVf1rUOETduEVVfbE0X YeOx/fxK2Yg6apxjSXfrqsk2wwEznPdx82KTbmf9Wj4xieM5UUIgQt0uBfH8uJt0 ppj3qdp+UvssH46OxP5jD0DzWZ1vzX2pnmMo13H8/JNYs1mB+zxOyG0WbunbfwLv FFv05uD2IUCyiMWWDih+634WzGsaR4nPSX03TKUL/Y+p0YtdNJTLzvLq7FukXiwG 2h0Sg2SX9OEkrz23orNVR4/ybNqg9pc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:44 2026 by rpki-client