$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4693fd5a-29db-3d30-8133-7c5f7d287566.roa File: 4693fd5a-29db-3d30-8133-7c5f7d287566.roa (raw, json) Hash identifier: JKgmpAC+o6lyPjd/nKyURMvmWm1udjEv3HNWQFGqmP0= Subject key identifier: A8:4E:AE:E8:34:EE:33:21:D1:B3:70:06:C8:C5:AF:15:60:22:AA:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A51702980016238835580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4693fd5a-29db-3d30-8133-7c5f7d287566.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397231 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:51:70:29:80:01:62:38:83:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=7be28220-4a2b-4284-a689-a94d9ff9dc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:c9:13:be:00:89:5a:6e:2c:ff:f8:c6:cc: 0d:50:34:fd:b4:4c:e0:90:d8:fa:4c:62:79:b8:ea: 3e:36:19:40:38:f4:b1:3b:9b:b8:8c:86:1c:f5:3c: a2:d2:ef:a0:9a:f9:df:4c:b5:4c:8a:74:33:7d:34: 81:fb:16:47:4d:ad:17:e2:88:62:61:29:39:fe:e4: 96:99:a9:c7:94:16:df:2f:a6:60:ad:ca:23:bc:85: 4b:2e:8b:c4:e1:a3:02:fe:80:1a:c3:71:6f:28:4d: 60:78:df:b0:5a:34:45:a1:3a:9f:f3:02:98:29:a7: 67:b4:dc:8e:bb:9e:41:7d:83:b5:54:a6:73:9e:7c: 83:b1:29:9c:70:be:e5:01:8d:95:45:c5:50:4e:8e: a1:18:a8:af:4e:e1:9f:16:dc:3f:0b:08:95:56:95: b9:32:26:b9:91:3a:f5:9c:ef:4f:82:e1:2f:b6:bc: 89:5d:ab:2d:c5:fb:70:c8:4a:fa:00:64:11:8a:3b: 73:f5:77:fe:d9:6a:45:53:e2:11:95:48:75:0f:97: 4b:9a:2f:3b:43:39:27:57:42:10:6a:ad:e3:70:b9: 02:3e:e3:9f:e9:f7:f8:46:58:ad:e3:d4:d8:0c:ce: 55:68:57:c5:71:8a:82:28:84:68:c8:ca:e6:3f:7f: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:AE:E8:34:EE:33:21:D1:B3:70:06:C8:C5:AF:15:60:22:AA:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4693fd5a-29db-3d30-8133-7c5f7d287566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:04:ac:9f:af:ab:14:a5:dc:d3:e8:df:77:01:de:00:3a:cd: d8:ee:2f:e2:84:59:ea:06:d0:19:c9:c6:dd:7a:35:49:d5:21: 17:fe:35:4f:9d:bf:bd:32:4d:7b:38:30:62:81:1f:6a:66:fd: d8:e0:b3:60:c6:ba:3f:4a:67:05:d9:7e:06:2d:a0:d9:71:3a: e4:a4:4d:a0:69:9b:24:70:21:b7:51:c5:8b:38:c6:be:4c:85: 31:44:6f:dd:b1:da:eb:59:89:47:c0:64:a9:ad:0a:a3:3d:e7: b8:a3:60:0b:0e:53:eb:e9:fc:28:b4:55:43:20:ae:8d:19:61: d4:6b:d2:2a:ff:be:28:43:0a:d0:e5:1a:53:a2:d9:aa:fd:c8: aa:81:32:2d:01:f1:fe:60:d5:f4:c4:d6:9a:6b:36:4d:cc:4a: 08:66:a0:7b:b9:33:66:09:92:e7:d8:d9:1e:bb:22:f1:ed:17: f9:e7:6e:64:88:de:23:3f:cc:5f:55:90:9f:94:f8:39:bf:fa: 6a:60:e2:d8:65:24:54:62:7a:c4:2d:85:2b:88:7e:85:b2:c8: eb:0f:57:db:30:4b:8e:03:41:02:ba:58:c7:70:2b:05:0d:f9: 2d:48:f9:4f:ec:34:3d:5a:62:68:fb:eb:62:d9:b2:9c:77:67: dc:db:0c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlFwKYABYjiDVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk N2JlMjgyMjAtNGEyYi00Mjg0LWE2ODktYTk0ZDlmZjlkYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfJE74AiVpuLP/4xswNUDT9tEzgkNj6TGJ5 uOo+NhlAOPSxO5u4jIYc9Tyi0u+gmvnfTLVMinQzfTSB+xZHTa0X4ohiYSk5/uSW manHlBbfL6ZgrcojvIVLLovE4aMC/oAaw3FvKE1geN+wWjRFoTqf8wKYKadntNyO u55BfYO1VKZznnyDsSmccL7lAY2VRcVQTo6hGKivTuGfFtw/CwiVVpW5Mia5kTr1 nO9PguEvtryJXastxftwyEr6AGQRijtz9Xf+2WpFU+IRlUh1D5dLmi87QzknV0IQ aq3jcLkCPuOf6ff4Rlit49TYDM5VaFfFcYqCKIRoyMrmP3+h2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhOrug07jMh0bNwBsjFrxVgIqo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDY5M2ZkNWEtMjlkYi0z ZDMwLTgxMzMtN2M1ZjdkMjg3NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMErJ+vqxSl3NPo33cB3gA6zdjuL+KEWeoG0BnJxt16NUnVIRf+NU+d v70yTXs4MGKBH2pm/djgs2DGuj9KZwXZfgYtoNlxOuSkTaBpmyRwIbdRxYs4xr5M hTFEb92x2utZiUfAZKmtCqM957ijYAsOU+vp/Ci0VUMgro0ZYdRr0ir/vihDCtDl GlOi2ar9yKqBMi0B8f5g1fTE1pprNk3MSghmoHu5M2YJkufY2R67IvHtF/nnbmSI 3iM/zF9VkJ+U+Dm/+mpg4thlJFRiesQthSuIfoWyyOsPV9swS44DQQK6WMdwKwUN +S1I+U/sND1aYmj762LZspx3Z9zbDEc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:22:09 2026 by rpki-client