$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa File: 488a029c-3be8-3091-8fd0-4d745297d4db.roa (raw, json) Hash identifier: WayyqfeeUjMESShZZXOtrxui0zBMmHgpK8RAy68vuwU= Subject key identifier: 15:71:AE:50:2B:85:77:D7:15:F7:E0:55:5D:04:AD:57:EB:77:AC:3C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4B40A4FA80DFBF4818C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397237 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4b:40:a4:fa:80:df:bf:48:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d4f6c3dc-4c36-49be-b0b8-ac30d4cc44c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:45:25:40:06:4d:73:80:8a:1f:8f:cf:fc: 5a:d6:97:0c:b2:42:86:c1:0d:05:74:08:67:d1:4c: 2a:ef:26:6e:76:2b:41:f0:5d:fe:64:da:67:50:dd: 60:25:e4:fd:61:f5:5a:7c:85:f2:5c:07:92:62:1b: ba:3a:c6:14:5a:3c:b1:c3:24:23:45:2f:7b:d0:78: e1:89:26:a5:a1:ec:1e:e6:0e:39:bb:16:0e:ae:ad: 0d:fc:b9:40:3d:29:69:2f:fc:96:28:cb:6f:8c:6f: 4f:22:32:97:da:0d:28:a7:32:a4:7b:1d:6e:08:07: 20:20:1b:84:45:3d:ed:8c:99:4b:b4:9d:a0:c0:4c: 62:5c:c1:6e:de:bf:51:48:d9:94:c6:de:76:54:a9: f2:03:28:a9:6a:5f:fa:67:98:61:82:a2:51:db:be: 47:15:e2:0c:c4:56:dd:8d:7e:ef:6e:d1:a0:37:7c: 07:b3:a1:96:42:38:b7:b5:c9:cb:4d:cc:da:89:ac: ae:b7:bb:a5:e1:33:90:b8:62:10:f1:c0:44:11:fc: 64:b7:d5:45:df:07:d1:a2:bb:35:9c:8c:76:11:ae: d6:10:4e:dd:ad:d6:e0:59:31:29:6b:45:6f:45:12: 24:d6:f1:76:8e:c5:71:3e:96:37:5e:e0:35:bc:b8: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:AE:50:2B:85:77:D7:15:F7:E0:55:5D:04:AD:57:EB:77:AC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/488a029c-3be8-3091-8fd0-4d745297d4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9c:46:a9:39:89:47:18:c9:a5:dd:a8:e4:87:25:7b:38:fd: 00:ff:4b:00:21:99:d1:ca:44:57:97:73:38:05:9a:f0:9e:9d: 53:a9:31:66:88:3c:cc:8e:27:05:d5:66:26:36:76:bd:59:c6: 0c:04:ea:a4:e4:4b:d1:ad:cf:df:2d:b0:96:2a:80:29:37:a4: 93:3d:2d:0b:57:26:3b:b3:cc:a4:b8:2a:f5:c5:f4:e3:0b:17: 6d:ae:f4:93:61:ca:c7:27:cf:11:43:65:21:bb:4d:5e:da:e6: 1f:c7:da:69:14:a3:31:36:8c:20:14:5d:52:46:c3:c3:c6:e5: ad:6d:df:06:b8:32:a3:2a:84:2d:5e:7e:8a:30:67:fb:09:89: 43:66:1d:f6:6c:e4:76:85:a1:03:f8:df:f5:2b:5e:bd:d0:f9: 30:89:0e:ef:ba:76:d1:d9:6a:74:9e:72:4a:35:18:48:3f:e7: 98:01:e3:de:fa:64:c1:98:6d:3f:43:51:10:9c:09:8e:ba:b8: 3d:bc:d7:73:c5:33:18:ae:27:e6:c2:17:fe:ff:58:61:03:f2: 42:97:83:69:56:5a:e0:7f:de:45:4f:e3:99:8d:94:b8:e8:4f: 05:0b:c8:c0:ee:44:93:ed:70:a3:8b:5e:85:9f:56:4e:b6:d7: 2c:60:58:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGktApPqA379IGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDRmNmMzZGMtNGMzNi00OWJlLWIwYjgtYWMzMGQ0Y2M0NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi1FJUAGTXOAih+Pz/xa1pcMskKGwQ0FdAhn 0Uwq7yZuditB8F3+ZNpnUN1gJeT9YfVafIXyXAeSYhu6OsYUWjyxwyQjRS970Hjh iSaloewe5g45uxYOrq0N/LlAPSlpL/yWKMtvjG9PIjKX2g0opzKkex1uCAcgIBuE RT3tjJlLtJ2gwExiXMFu3r9RSNmUxt52VKnyAyipal/6Z5hhgqJR275HFeIMxFbd jX7vbtGgN3wHs6GWQji3tcnLTczaiayut7ul4TOQuGIQ8cBEEfxkt9VF3wfRors1 nIx2Ea7WEE7drdbgWTEpa0VvRRIk1vF2jsVxPpY3XuA1vLgFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVxrlArhXfXFffgVV0ErVfrd6w8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDg4YTAyOWMtM2JlOC0z MDkxLThmZDAtNGQ3NDUyOTdkNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6cRqk5iUcYyaXdqOSHJXs4/QD/SwAhmdHKRFeXczgFmvCenVOpMWaI PMyOJwXVZiY2dr1ZxgwE6qTkS9Gtz98tsJYqgCk3pJM9LQtXJjuzzKS4KvXF9OML F22u9JNhyscnzxFDZSG7TV7a5h/H2mkUozE2jCAUXVJGw8PG5a1t3wa4MqMqhC1e foowZ/sJiUNmHfZs5HaFoQP43/UrXr3Q+TCJDu+6dtHZanSecko1GEg/55gB4976 ZMGYbT9DURCcCY66uD2813PFMxiuJ+bCF/7/WGED8kKXg2lWWuB/3kVP45mNlLjo TwULyMDuRJPtcKOLXoWfVk621yxgWGI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:03 2026 by rpki-client