$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa File: 3289348b-34f7-3508-afa1-db57e1e68ba1.roa (raw, json) Hash identifier: qS0iFloNRtOucubNVU+A8Rnd2jICB3Jjj/rR9W0uJZI= Subject key identifier: DA:C4:2E:32:88:82:B4:88:A4:F5:C9:95:B9:CF:1A:E8:1C:B0:45:EB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129FD70CFF200648F621C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397238 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:9f:d7:0c:ff:20:06:48:f6:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f59fe4a1-97ef-4a29-91a4-48a91b09832b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:8f:c9:b1:87:65:4a:d3:ed:ff:6d:d9:48: 1f:90:0e:3b:58:4a:4c:ce:d7:06:17:56:69:48:78: 9f:c3:de:19:8a:09:c2:7c:07:7d:a8:a8:31:72:2b: 6b:fc:6f:08:f2:a6:ec:0f:06:f1:f9:21:c6:c8:84: 4c:30:6f:1a:61:71:69:d2:9b:ac:2c:f3:2a:ea:1d: 8d:4a:b9:3d:69:ea:23:12:db:8c:96:a5:83:83:ed: 58:7a:45:14:3d:e4:48:ab:31:1f:47:1d:f6:04:be: fb:b6:38:6a:2e:ef:08:83:77:14:74:16:f8:bf:df: d1:2b:c9:51:8d:90:dc:0d:46:7e:a3:2f:6d:7a:75: 6f:a3:06:9e:15:d9:41:c1:92:40:3d:4b:58:77:60: fb:00:5d:25:f2:95:8b:18:8b:a2:9d:c9:8d:4c:28: b7:9a:8b:70:f7:eb:13:d6:7f:1e:7b:60:46:ec:80: 0f:c9:9e:26:b7:68:46:bb:6d:cd:1c:59:1a:02:58: 84:01:27:99:66:07:20:d3:7f:be:e3:47:c9:12:e1: 07:51:e3:19:46:c8:12:06:45:5d:38:00:57:0b:ed: 33:70:31:67:1b:99:a8:06:dc:d0:ea:d8:28:28:a9: e3:24:9f:c1:f2:1b:6a:40:95:29:dc:a3:d8:84:9b: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:2E:32:88:82:B4:88:A4:F5:C9:95:B9:CF:1A:E8:1C:B0:45:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3289348b-34f7-3508-afa1-db57e1e68ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c3:fa:27:7d:6c:ae:23:98:71:1f:1c:cb:a2:1f:65:22:73: 3a:e3:ae:21:83:16:5a:6c:34:c9:63:36:1c:5d:bc:a6:36:62: 99:8d:4c:71:ce:8c:a3:3f:1c:3e:47:ef:9a:0f:8f:0f:2c:56: 1b:af:35:02:49:2b:ad:97:1b:c8:49:56:5f:7d:6b:f3:ec:dc: 74:5e:75:a1:83:ab:4f:14:b6:9d:76:c3:eb:25:0f:b4:07:b0: 7f:61:32:a9:ae:28:f2:13:4f:67:35:3f:dd:da:f2:2d:e9:be: 47:67:92:cb:10:9a:d3:a6:8d:cc:fe:ea:42:d3:02:57:8d:67: 34:c8:0f:f1:97:15:21:30:75:13:1d:69:14:e7:15:11:d2:5f: 3d:b7:c4:f8:03:30:10:9c:94:4e:05:eb:4a:47:f1:95:34:6e: 18:4c:84:20:1a:e3:0d:e1:11:92:25:62:1d:ae:9c:f5:82:12: ce:04:1a:6e:03:d9:f5:44:17:06:c8:0a:38:3f:89:8e:79:ec: 17:9c:3e:67:a8:b6:96:82:52:3d:7d:63:60:9e:b2:81:94:90: 3f:b8:47:d0:02:f2:63:28:44:01:3c:2a:ca:51:af:0b:e4:3c: aa:b5:16:74:f2:ef:da:4c:99:6c:eb:7b:06:f7:0d:7a:30:76: 13:ee:b1:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEp/XDP8gBkj2IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjU5ZmU0YTEtOTdlZi00YTI5LTkxYTQtNDhhOTFiMDk4MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGPybGHZUrT7f9t2UgfkA47WEpMztcGF1Zp SHifw94ZignCfAd9qKgxcitr/G8I8qbsDwbx+SHGyIRMMG8aYXFp0pusLPMq6h2N Srk9aeojEtuMlqWDg+1YekUUPeRIqzEfRx32BL77tjhqLu8Ig3cUdBb4v9/RK8lR jZDcDUZ+oy9tenVvowaeFdlBwZJAPUtYd2D7AF0l8pWLGIuincmNTCi3motw9+sT 1n8ee2BG7IAPyZ4mt2hGu23NHFkaAliEASeZZgcg03++40fJEuEHUeMZRsgSBkVd OABXC+0zcDFnG5moBtzQ6tgoKKnjJJ/B8htqQJUp3KPYhJug2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrELjKIgrSIpPXJlbnPGugcsEXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzI4OTM0OGItMzRmNy0z NTA4LWFmYTEtZGI1N2UxZTY4YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfD+id9bK4jmHEfHMuiH2UiczrjriGDFlpsNMljNhxdvKY2YpmNTHHO jKM/HD5H75oPjw8sVhuvNQJJK62XG8hJVl99a/Ps3HRedaGDq08Utp12w+slD7QH sH9hMqmuKPITT2c1P93a8i3pvkdnkssQmtOmjcz+6kLTAleNZzTID/GXFSEwdRMd aRTnFRHSXz23xPgDMBCclE4F60pH8ZU0bhhMhCAa4w3hEZIlYh2unPWCEs4EGm4D 2fVEFwbICjg/iY557BecPmeotpaCUj19Y2CesoGUkD+4R9AC8mMoRAE8KspRrwvk PKq1FnTy79pMmWzrewb3DXowdhPusYE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:47 2026 by rpki-client