$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa File: 3707a045-3ba1-3801-a750-36fb54abfe7c.roa (raw, json) Hash identifier: V/eG0ZB5MVqA6xyb/gTjcgTM9Ng2UzLsybsETPoIHxA= Subject key identifier: FB:66:4E:D0:85:08:BF:A8:4C:99:C8:3C:6E:F5:6E:5A:D4:15:A2:9B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4ECC1D2C4863444E9BB0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397224 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4e:cc:1d:2c:48:63:44:4e:9b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=0ed0c9ab-f285-4830-9545-359da306e1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:e1:47:cf:fb:8a:98:ff:4c:41:c7:dd:80: f9:1f:09:a2:f5:2b:8f:1a:aa:2b:7f:b3:a2:6c:aa: 06:3b:65:9c:f1:ac:2f:7d:77:f6:fb:10:6e:8b:4c: 8a:ac:84:be:3d:28:2a:f4:2e:d0:84:53:12:70:70: cc:20:89:dd:6e:00:d9:82:d9:df:da:a9:39:b3:07: 31:11:d8:be:ee:bd:21:c1:29:67:e6:e7:46:37:49: 57:82:1a:4f:be:8e:c3:87:0a:b8:28:e8:2e:13:fa: 50:df:25:44:c6:dd:98:f9:8a:05:3a:a5:2b:f8:44: 7d:7b:0e:fd:54:2b:4b:69:7a:a9:24:6b:69:84:b9: cf:ff:ed:c3:f8:6b:64:68:fc:72:d6:fd:8c:d1:e8: 68:1e:25:13:f6:d5:32:e8:12:8d:49:1c:f6:4c:be: a4:8d:45:c2:1b:a2:51:ca:5c:48:a5:05:4f:97:73: 87:64:d2:e9:f4:e6:33:e6:aa:70:6a:9e:40:60:56: fc:5d:e1:a9:dd:50:fd:28:90:82:09:72:24:0e:92: 1f:2c:cb:c6:b7:2d:4c:78:79:ea:84:a9:d4:3e:3f: 1f:d5:46:18:56:26:bc:19:86:b9:ab:09:35:d8:5a: d8:14:2c:e2:dd:28:fe:92:5d:a1:61:62:96:72:71: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:66:4E:D0:85:08:BF:A8:4C:99:C8:3C:6E:F5:6E:5A:D4:15:A2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d0:ef:e9:a5:30:da:3f:dd:1e:ff:fb:3b:3b:2c:5e:61:1e: 16:ee:cb:d6:78:d3:a3:b4:2b:ac:27:c0:b0:0d:76:45:72:19: fc:b3:19:7d:ac:c7:ae:55:0d:5b:71:5a:f4:a4:35:05:cd:e8: 43:43:82:34:64:9a:6c:64:07:3f:d7:8b:0f:97:b7:cc:66:8a: 8d:ad:c6:9d:c9:13:79:6a:53:31:36:3a:c7:0c:f8:f2:a7:6c: 0a:ae:09:aa:46:f0:d1:56:9f:b4:98:2a:bb:58:74:6f:26:7a: a5:20:b8:c5:3e:18:f7:1e:62:34:eb:d5:36:86:6c:d3:36:59: de:61:69:1e:b3:28:54:36:45:74:75:70:2c:5b:3c:10:1b:f4: 70:bc:cf:0f:d3:7c:79:9c:dc:1d:08:be:ad:a5:5e:24:b4:23: b9:0d:83:41:4e:fd:e5:c4:dc:f4:bc:14:1f:4f:43:c1:7c:2f: 76:c0:0c:1c:f1:bc:2b:00:49:dd:62:b3:20:58:4e:fe:6e:a7: 91:3b:dd:48:2c:83:69:b2:7e:95:ef:c8:4a:d1:8f:78:a0:fd: 05:a3:81:0b:fe:67:6b:2c:e1:d4:7b:24:67:37:da:0c:a5:bc: eb:98:10:22:52:3e:4e:fc:29:ea:19:7b:cb:f9:ce:90:37:e3: 72:7f:1d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGk7MHSxIY0ROm7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MGVkMGM5YWItZjI4NS00ODMwLTk1NDUtMzU5ZGEzMDZlMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKThR8/7ipj/TEHH3YD5Hwmi9SuPGqorf7Oi bKoGO2Wc8awvfXf2+xBui0yKrIS+PSgq9C7QhFMScHDMIIndbgDZgtnf2qk5swcx Edi+7r0hwSln5udGN0lXghpPvo7Dhwq4KOguE/pQ3yVExt2Y+YoFOqUr+ER9ew79 VCtLaXqpJGtphLnP/+3D+GtkaPxy1v2M0ehoHiUT9tUy6BKNSRz2TL6kjUXCG6JR ylxIpQVPl3OHZNLp9OYz5qpwap5AYFb8XeGp3VD9KJCCCXIkDpIfLMvGty1MeHnq hKnUPj8f1UYYVia8GYa5qwk12FrYFCzi3Sj+kl2hYWKWcnF7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtmTtCFCL+oTJnIPG71blrUFaKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzcwN2EwNDUtM2JhMS0z ODAxLWE3NTAtMzZmYjU0YWJmZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXQ7+mlMNo/3R7/+zs7LF5hHhbuy9Z406O0K6wnwLANdkVyGfyzGX2s x65VDVtxWvSkNQXN6ENDgjRkmmxkBz/Xiw+Xt8xmio2txp3JE3lqUzE2OscM+PKn bAquCapG8NFWn7SYKrtYdG8meqUguMU+GPceYjTr1TaGbNM2Wd5haR6zKFQ2RXR1 cCxbPBAb9HC8zw/TfHmc3B0Ivq2lXiS0I7kNg0FO/eXE3PS8FB9PQ8F8L3bADBzx vCsASd1isyBYTv5up5E73Ugsg2myfpXvyErRj3ig/QWjgQv+Z2ss4dR7JGc32gyl vOuYECJSPk78KeoZe8v5zpA343J/HeY= -----END CERTIFICATE-----Generated at Thu Mar 26 06:29:38 2026 by rpki-client