$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa File: 51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa (raw, json) Hash identifier: 4YEvV7BnfwlUrk8kYOKHTfiADIiTp+MmoGdXPb0KzOI= Subject key identifier: B3:94:01:9E:81:9F:1C:9E:CE:95:2D:64:88:49:79:E7:2D:8D:33:EC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A513D308545F80F1F8400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397228 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:51:3d:30:85:45:f8:0f:1f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=b3420e91-bd09-4d61-ae8c-d580733ff30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:21:d2:f1:20:b7:e1:6b:22:c9:49:df:ba: 50:3f:27:5e:8a:aa:36:ea:3c:dd:c7:3a:a9:21:2b: 69:de:5c:8e:60:31:ec:bd:5a:20:2f:ac:e5:af:a2: c4:2f:d7:4a:02:b5:f4:47:38:d8:43:41:d5:df:39: 12:dd:36:f7:b2:53:b5:46:e8:b5:7e:15:69:db:6b: 83:40:d1:ab:3b:93:ef:31:ff:2a:6b:08:48:83:7e: 1d:d7:bb:63:75:c8:1d:88:76:50:fb:55:4f:19:45: d8:5e:47:ef:db:1e:ed:cd:45:d8:e0:f3:b7:9e:9b: 11:2b:07:3c:3b:7a:fa:a7:76:7f:0b:b9:24:58:0e: 1c:50:34:e0:2f:2e:71:d8:52:2d:e0:e4:9f:93:39: e6:84:49:a6:7a:eb:be:0d:cb:32:22:25:fe:b3:bb: 73:b4:ab:db:0c:5e:f9:f6:d9:cd:48:b4:31:39:e4: c2:6c:84:70:98:ed:63:27:95:6a:fd:a0:65:52:20: 53:83:d2:50:ae:0d:59:dc:ba:30:03:73:6a:83:4d: 31:2b:99:86:55:d1:25:b6:86:df:0b:e8:2a:5a:93: 74:67:4f:92:40:2a:a5:d4:11:24:35:c0:b9:98:78: 2b:51:85:76:2e:4e:b3:aa:29:2a:ec:70:d7:2e:ad: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:94:01:9E:81:9F:1C:9E:CE:95:2D:64:88:49:79:E7:2D:8D:33:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/51ca9c78-4a7a-31eb-9efa-1461a3d375b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3b:cc:ad:9f:8e:b0:0f:81:50:38:8a:9a:bb:3c:fa:b3:c6: 95:ad:4a:aa:47:b0:4b:32:8c:f9:7b:94:1e:8a:ca:cd:06:b5: d3:23:5c:da:0f:c2:e8:5b:e7:ac:0b:4b:5b:51:24:2b:59:aa: 7a:9d:21:fa:48:5d:cf:98:7b:07:1e:58:0f:25:4a:75:ca:ca: a6:d4:12:eb:68:48:f7:da:20:82:98:14:33:06:44:9f:57:c8: 82:f3:56:14:31:c3:90:27:61:98:ee:6d:ce:2b:7b:2e:01:1d: b4:73:15:69:32:94:f8:7c:5f:c0:e1:3d:6d:ac:e5:8a:e0:20: e6:4e:b7:7a:f9:e9:f6:3a:7f:b2:a0:7f:23:fc:7f:77:31:70: 5e:4c:0a:2b:a4:5c:ed:2e:da:a2:70:07:8b:8d:c1:f0:09:5a: e9:e7:3f:92:b0:41:55:34:a9:83:b8:e1:c3:10:65:46:3f:ab: 10:02:63:e7:8d:dd:f8:21:b7:9b:c7:46:bd:e5:e0:bf:d5:13: 13:2f:a7:e6:a1:da:ec:bc:68:c2:8f:af:1b:88:52:d4:9a:d4: 7d:15:5d:a9:2d:8d:54:93:fe:a2:1e:68:8e:4f:89:23:0f:f1: 9a:41:0f:d0:d2:3a:eb:f3:82:21:59:d2:33:c2:9c:bd:4f:36: ca:db:11:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGlE9MIVF+A8fhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YjM0MjBlOTEtYmQwOS00ZDYxLWFlOGMtZDU4MDczM2ZmMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoh0vEgt+FrIslJ37pQPydeiqo26jzdxzqp IStp3lyOYDHsvVogL6zlr6LEL9dKArX0RzjYQ0HV3zkS3Tb3slO1Rui1fhVp22uD QNGrO5PvMf8qawhIg34d17tjdcgdiHZQ+1VPGUXYXkfv2x7tzUXY4PO3npsRKwc8 O3r6p3Z/C7kkWA4cUDTgLy5x2FIt4OSfkznmhEmmeuu+DcsyIiX+s7tztKvbDF75 9tnNSLQxOeTCbIRwmO1jJ5Vq/aBlUiBTg9JQrg1Z3LowA3Nqg00xK5mGVdEltobf C+gqWpN0Z0+SQCql1BEkNcC5mHgrUYV2Lk6zqikq7HDXLq05BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOUAZ6BnxyezpUtZIhJeectjTPsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTFjYTljNzgtNGE3YS0z MWViLTllZmEtMTQ2MWEzZDM3NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC07zK2fjrAPgVA4ipq7PPqzxpWtSqpHsEsyjPl7lB6Kys0GtdMjXNoP wuhb56wLS1tRJCtZqnqdIfpIXc+YewceWA8lSnXKyqbUEutoSPfaIIKYFDMGRJ9X yILzVhQxw5AnYZjubc4rey4BHbRzFWkylPh8X8DhPW2s5YrgIOZOt3r56fY6f7Kg fyP8f3cxcF5MCiukXO0u2qJwB4uNwfAJWunnP5KwQVU0qYO44cMQZUY/qxACY+eN 3fght5vHRr3l4L/VExMvp+ah2uy8aMKPrxuIUtSa1H0VXaktjVST/qIeaI5PiSMP 8ZpBD9DSOuvzgiFZ0jPCnL1PNsrbEfw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:50:42 2026 by rpki-client