$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64749428-4c1e-3368-9565-d92a4a9594ef.roa File: 64749428-4c1e-3368-9565-d92a4a9594ef.roa (raw, json) Hash identifier: tI3fKOCokuyjrLKUtoB4yQ8UEp1ab6vWUjZQwqr1nRA= Subject key identifier: 2E:DB:6E:C8:B2:00:22:A2:4B:F0:D3:78:89:68:4E:3F:60:9E:2C:3C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A41287C55260BF18DA080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64749428-4c1e-3368-9565-d92a4a9594ef.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:41:28:7c:55:26:0b:f1:8d:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=94e00fa6-d49d-4e5e-9edf-4eff87005b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:a3:46:93:97:0e:52:8d:c0:26:3e:25:ca: 16:7a:23:a3:09:91:28:2f:ae:ee:1d:c6:89:9b:05: ee:0d:42:0a:30:97:36:04:2c:cd:61:43:35:49:a2: 5b:01:64:1c:fb:d2:79:39:19:1e:53:72:94:01:7e: 83:91:71:d5:b8:48:1d:41:58:a9:f2:2e:0b:0b:f1: d7:06:2c:87:68:b5:53:49:b3:1d:2a:a8:79:e6:a1: 42:7c:7a:df:01:2a:aa:60:5e:67:8b:73:5e:a2:67: 58:6e:f0:36:83:73:7b:ae:ff:9b:17:ac:02:c3:00: ab:07:2c:5d:a4:ea:0e:f0:b3:f5:d0:0c:09:60:8d: bb:76:a4:37:f6:f5:f1:34:47:bb:97:70:05:9d:9f: ac:b6:c2:e9:ee:2c:89:81:15:ed:bb:c1:09:ca:81: 70:da:06:8b:c8:08:1d:df:8e:8a:1d:9b:68:3e:11: 46:e6:64:dc:44:9a:d0:73:88:1e:d0:97:a9:97:d3: fb:fb:c1:58:f5:b7:53:10:64:0d:92:18:d9:3c:3c: c2:fe:47:4f:e8:37:48:20:6a:08:2b:71:fa:2a:4b: d4:bd:d0:0f:85:ba:21:78:8c:65:cc:5e:c7:b9:72: 78:cc:e8:d1:a2:b2:46:69:af:58:1a:0a:04:19:d7: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:6E:C8:B2:00:22:A2:4B:F0:D3:78:89:68:4E:3F:60:9E:2C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64749428-4c1e-3368-9565-d92a4a9594ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a6:ce:ff:2a:69:f7:d9:a4:6e:83:f3:2a:37:c4:ed:57:be: c0:b7:3b:60:6d:90:83:1f:18:7b:e2:5f:d6:ee:a1:37:a9:57: b7:55:af:db:59:bb:a8:b0:50:4a:e6:e1:99:db:30:d0:89:0f: 3c:f0:3e:8f:9f:28:4d:3e:18:79:07:ce:74:91:45:cd:1a:94: bb:b5:c1:a2:dd:77:0a:1d:91:79:c1:34:8c:bb:76:f1:c3:71: 48:7c:5a:6c:f7:1e:5e:1e:32:a0:da:44:ae:87:78:70:1d:92: 12:8e:f6:37:3d:4f:3e:6e:fb:73:0b:9d:71:a1:2c:53:e7:a2: c8:8e:d7:fd:a1:c5:cf:c0:e7:91:54:f2:98:40:23:3b:07:dc: 53:3c:7b:2e:95:c1:e2:9e:69:8b:7e:c6:10:55:7a:3f:5e:c8: 8c:0c:9d:e4:5a:94:96:13:91:42:93:29:e4:83:58:e0:14:f4: 71:af:77:90:12:19:de:94:8f:1f:a9:42:c8:b9:17:b9:1a:6c: 40:19:4c:e9:4e:c3:3d:0a:03:a9:bb:3a:4b:9e:34:93:e1:4b: a5:76:cd:6e:6f:b0:fe:65:d4:35:c1:e5:89:71:ce:d9:45:91: 8d:eb:33:06:59:87:f4:b9:cc:3c:c6:12:aa:5a:27:51:52:2b: 6d:13:4f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkEofFUmC/GNoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTRlMDBmYTYtZDQ5ZC00ZTVlLTllZGYtNGVmZjg3MDA1YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ujRpOXDlKNwCY+JcoWeiOjCZEoL67uHcaJ mwXuDUIKMJc2BCzNYUM1SaJbAWQc+9J5ORkeU3KUAX6DkXHVuEgdQVip8i4LC/HX BiyHaLVTSbMdKqh55qFCfHrfASqqYF5ni3NeomdYbvA2g3N7rv+bF6wCwwCrByxd pOoO8LP10AwJYI27dqQ39vXxNEe7l3AFnZ+stsLp7iyJgRXtu8EJyoFw2gaLyAgd 346KHZtoPhFG5mTcRJrQc4ge0Jepl9P7+8FY9bdTEGQNkhjZPDzC/kdP6DdIIGoI K3H6KkvUvdAPhboheIxlzF7HuXJ4zOjRorJGaa9YGgoEGddJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7bbsiyACKiS/DTeIloTj9gniw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjQ3NDk0MjgtNGMxZS0z MzY4LTk1NjUtZDkyYTRhOTU5NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWmzv8qaffZpG6D8yo3xO1XvsC3O2BtkIMfGHviX9buoTepV7dVr9tZ u6iwUErm4ZnbMNCJDzzwPo+fKE0+GHkHznSRRc0alLu1waLddwodkXnBNIy7dvHD cUh8Wmz3Hl4eMqDaRK6HeHAdkhKO9jc9Tz5u+3MLnXGhLFPnosiO1/2hxc/A55FU 8phAIzsH3FM8ey6VweKeaYt+xhBVej9eyIwMneRalJYTkUKTKeSDWOAU9HGvd5AS Gd6Ujx+pQsi5F7kabEAZTOlOwz0KA6m7OkueNJPhS6V2zW5vsP5l1DXB5YlxztlF kY3rMwZZh/S5zDzGEqpaJ1FSK20TTzk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:15 2026 by rpki-client