$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa File: 3d119bd5-f956-38ab-aef2-6f905afa72f4.roa (raw, json) Hash identifier: kaACZeLQwORRuMsHp9C0dmI8S+K2mhOhXJwKNsTqDoI= Subject key identifier: DE:F4:0F:B5:5B:2D:41:A3:8E:E4:47:AB:11:60:EE:EE:0D:90:59:2C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129B6CCDEA0D78263CCF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397235 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:9b:6c:cd:ea:0d:78:26:3c:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=055a965c-af22-4d57-8f0c-ae5928ca8df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:c8:c3:60:0a:ca:09:df:f4:f0:a1:ed:2c: ba:1d:a3:4b:37:09:5c:9c:6d:5d:86:c5:d6:48:2b: 60:aa:5f:c3:2d:c7:32:b5:13:e4:41:63:27:d6:dc: 2f:b7:ba:76:d9:e7:6c:98:ea:12:bd:fa:8d:f4:69: 1c:7c:3f:61:c3:82:8e:38:ce:f5:27:3b:57:41:d5: 02:27:a4:d2:00:83:8e:ff:1c:f5:cd:41:a8:93:ab: 22:bd:07:52:65:19:c1:08:4a:3b:b3:94:9a:4a:6b: 9c:35:bf:2a:d2:c3:00:2f:94:80:3c:8c:40:3f:0a: 61:54:90:d7:04:3a:af:3b:77:6d:40:56:d0:ee:d5: 3d:8a:fd:7c:e9:35:55:99:1d:88:a6:4f:37:3a:7a: 1a:62:0b:22:16:b2:0f:a8:50:81:c8:8d:6e:c0:4c: 46:2b:b0:07:ed:f6:26:20:87:bd:dd:4d:6d:4a:4e: e9:9a:21:c0:e1:3d:2e:87:76:8b:3e:b7:00:de:9b: 99:2d:56:6b:8d:d7:f8:48:72:a9:ae:f0:51:d4:ea: ca:5d:66:dd:c9:83:97:ba:8e:95:d1:95:aa:d9:87: 07:23:49:ef:ee:55:48:34:ce:03:56:35:84:05:6b: 97:a3:b0:64:4c:ce:92:04:ef:8c:f2:b0:c8:69:a1: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F4:0F:B5:5B:2D:41:A3:8E:E4:47:AB:11:60:EE:EE:0D:90:59:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d119bd5-f956-38ab-aef2-6f905afa72f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:69:eb:72:ea:ae:ac:f2:a1:0e:43:1a:df:70:90:f2:83:eb: 56:ba:a7:84:6d:07:60:ca:9f:dc:7f:21:a1:ac:40:13:9f:53: 5a:35:c7:98:ac:79:b3:12:8b:60:82:32:30:06:ae:f6:59:bb: 8f:2b:43:79:5b:e4:eb:ab:45:8b:79:2b:37:0d:53:e4:ab:05: 81:3b:bb:79:3c:11:8a:cd:25:29:88:b4:e0:8b:2b:28:9d:b1: 8f:9a:ee:c4:ca:fd:e9:9c:df:d0:38:aa:b4:7f:29:8a:de:2b: ca:c5:88:da:a2:52:a2:80:de:73:cc:9c:cd:3f:3d:79:24:a9: 92:ed:96:a3:fb:91:23:2a:a6:45:7a:b9:e1:1f:2d:a5:78:26: ef:99:59:5d:c2:c4:4a:06:be:a0:af:2c:0b:90:ce:67:d2:68: ef:3c:63:9e:47:1c:ce:21:d4:5d:83:f4:4c:d1:fc:92:f5:a8: de:2d:47:33:36:7f:ff:bd:ca:53:bb:68:cd:26:90:96:0c:8b: 60:e6:01:37:4a:2f:99:5d:ca:b1:18:45:e5:3c:43:89:3d:03: 95:ec:8a:ca:21:bb:ca:ee:73:b8:c1:5d:cb:18:f7:df:e4:d2: 87:27:28:26:d1:55:10:cd:a3:12:ff:2b:8a:a0:11:1f:5d:76: fb:3e:eb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEptszeoNeCY8zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDU1YTk2NWMtYWYyMi00ZDU3LThmMGMtYWU1OTI4Y2E4ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU3Iw2AKygnf9PCh7Sy6HaNLNwlcnG1dhsXW SCtgql/DLccytRPkQWMn1twvt7p22edsmOoSvfqN9GkcfD9hw4KOOM71JztXQdUC J6TSAIOO/xz1zUGok6sivQdSZRnBCEo7s5SaSmucNb8q0sMAL5SAPIxAPwphVJDX BDqvO3dtQFbQ7tU9iv186TVVmR2Ipk83OnoaYgsiFrIPqFCByI1uwExGK7AH7fYm IIe93U1tSk7pmiHA4T0uh3aLPrcA3puZLVZrjdf4SHKprvBR1OrKXWbdyYOXuo6V 0ZWq2YcHI0nv7lVINM4DVjWEBWuXo7BkTM6SBO+M8rDIaaEY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN70D7VbLUGjjuRHqxFg7u4NkFksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2QxMTliZDUtZjk1Ni0z OGFiLWFlZjItNmY5MDVhZmE3MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdp63LqrqzyoQ5DGt9wkPKD61a6p4RtB2DKn9x/IaGsQBOfU1o1x5is ebMSi2CCMjAGrvZZu48rQ3lb5OurRYt5KzcNU+SrBYE7u3k8EYrNJSmItOCLKyid sY+a7sTK/emc39A4qrR/KYreK8rFiNqiUqKA3nPMnM0/PXkkqZLtlqP7kSMqpkV6 ueEfLaV4Ju+ZWV3CxEoGvqCvLAuQzmfSaO88Y55HHM4h1F2D9EzR/JL1qN4tRzM2 f/+9ylO7aM0mkJYMi2DmATdKL5ldyrEYReU8Q4k9A5Xsisohu8ruc7jBXcsY99/k 0ocnKCbRVRDNoxL/K4qgER9ddvs+60Q= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:30 2026 by rpki-client