$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa File: 43a92f13-1adc-3b24-b6bd-9276923de4c5.roa (raw, json) Hash identifier: usCAd66cquLShlpJ0h/nWqudnWOsAHGrgURQVXoil/Q= Subject key identifier: 5C:E5:63:C9:13:97:93:D4:9D:4D:92:78:BF:6D:F9:D7:C8:54:83:01 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D091298EB7C32E7A29862F7C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397229 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:98:eb:7c:32:e7:a2:98:62:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4a87e137-fea4-43e0-bed1-4e5b84c4447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:c3:d5:66:c2:b5:0a:3f:89:3a:f5:56:71: 34:65:a3:f1:1c:94:a3:10:72:2a:60:49:03:a0:aa: 96:5d:3e:78:7d:ac:d2:63:51:de:99:e6:75:9f:7d: e3:12:cb:b7:31:43:65:28:ef:2b:af:1c:12:b7:3e: 47:ca:1a:5b:8e:5f:88:e7:b2:56:5d:da:01:a9:86: e2:39:ed:c8:87:41:05:dd:b4:9a:76:6e:e7:fb:11: ad:6c:51:5f:f3:b7:2a:a2:8c:6e:cf:2b:36:59:92: de:b8:dc:a3:31:8d:b6:fb:3b:61:6f:85:0c:bf:1f: 86:4a:ab:a9:ad:8f:29:13:16:92:a4:11:18:6f:35: bc:3f:64:df:73:14:bd:12:34:f9:d1:4f:4a:e9:51: b5:93:1d:3b:94:07:05:50:60:93:48:85:84:e6:28: d9:f0:45:7b:5c:91:1c:1e:d7:a3:96:38:3c:69:5e: d4:d8:34:de:12:0f:7b:49:42:ac:69:cd:48:d7:d9: 34:2b:9b:36:af:71:62:2a:81:32:11:d8:76:3c:bf: e1:df:52:7a:76:75:8d:1a:64:87:75:b5:4c:a9:bb: 25:57:a0:f1:c6:15:18:2e:3d:97:ca:34:3d:fb:8e: 39:86:d9:33:ff:48:c6:80:be:19:d9:e3:17:70:07: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:63:C9:13:97:93:D4:9D:4D:92:78:BF:6D:F9:D7:C8:54:83:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43a92f13-1adc-3b24-b6bd-9276923de4c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:82:e2:2f:5b:7c:12:6e:99:dd:93:84:87:9c:fa:65:5a:78: 53:f9:c0:26:3c:13:d1:0d:72:38:65:bf:16:3b:59:0b:a9:a2: f8:6e:ff:5d:12:42:93:89:bb:26:c6:16:37:93:60:d3:cf:2b: 3c:87:d3:e5:55:04:de:56:20:ce:b8:b0:cc:50:c2:7d:13:a0: 0b:fc:30:be:eb:95:80:65:23:71:5c:b9:39:ff:96:0e:55:fe: 15:e2:14:cb:e0:83:d8:3d:9c:2e:8b:cc:9c:48:fe:41:26:1a: af:db:c4:1b:cf:b7:72:a7:bb:ea:b5:de:05:d8:05:1e:f4:a7: bd:47:75:a5:1d:0f:78:e5:7a:b7:7d:1c:ea:b8:56:a2:eb:2a: d4:ae:f1:f5:95:46:96:ca:48:b3:14:4f:3c:f7:d6:f2:66:eb: 1d:e3:65:59:dd:4a:9c:29:4c:b2:aa:02:ff:66:b4:4c:18:86: d8:8a:be:7c:6c:a7:96:0a:f9:14:f1:48:cf:5e:f9:17:08:07: 67:d9:5e:aa:63:48:66:c1:14:f8:ed:a1:ee:c0:89:62:ef:ce: 96:64:17:f4:5f:27:b9:90:a4:18:f5:3a:50:48:2a:a6:db:dc: d9:e3:c2:26:cc:4b:04:fc:f4:b1:bc:c8:cd:56:81:a0:69:51: 54:cd:ad:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpjrfDLnophi98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGE4N2UxMzctZmVhNC00M2UwLWJlZDEtNGU1Yjg0YzQ0NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgvD1WbCtQo/iTr1VnE0ZaPxHJSjEHIqYEkD oKqWXT54fazSY1HemeZ1n33jEsu3MUNlKO8rrxwStz5Hyhpbjl+I57JWXdoBqYbi Oe3Ih0EF3bSadm7n+xGtbFFf87cqooxuzys2WZLeuNyjMY22+zthb4UMvx+GSqup rY8pExaSpBEYbzW8P2TfcxS9EjT50U9K6VG1kx07lAcFUGCTSIWE5ijZ8EV7XJEc Htejljg8aV7U2DTeEg97SUKsac1I19k0K5s2r3FiKoEyEdh2PL/h31J6dnWNGmSH dbVMqbslV6DxxhUYLj2XyjQ9+445htkz/0jGgL4Z2eMXcAcvyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzlY8kTl5PUnU2SeL9t+dfIVIMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNhOTJmMTMtMWFkYy0z YjI0LWI2YmQtOTI3NjkyM2RlNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaC4i9bfBJumd2ThIec+mVaeFP5wCY8E9ENcjhlvxY7WQupovhu/10S QpOJuybGFjeTYNPPKzyH0+VVBN5WIM64sMxQwn0ToAv8ML7rlYBlI3FcuTn/lg5V /hXiFMvgg9g9nC6LzJxI/kEmGq/bxBvPt3Knu+q13gXYBR70p71HdaUdD3jlerd9 HOq4VqLrKtSu8fWVRpbKSLMUTzz31vJm6x3jZVndSpwpTLKqAv9mtEwYhtiKvnxs p5YK+RTxSM9e+RcIB2fZXqpjSGbBFPjtoe7AiWLvzpZkF/RfJ7mQpBj1OlBIKqbb 3NnjwibMSwT89LG8yM1WgaBpUVTNrdU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:05:47 2026 by rpki-client