$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa File: 842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa (raw, json) Hash identifier: 1Xp0c/SY8ZUMb8YJQnltGDxe4y8hxcuHN0F8U/7nY3I= Subject key identifier: 61:F1:24:60:FA:4D:D5:9E:B7:37:75:F0:0E:1C:4D:4B:6E:2C:9E:3A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09127BD52FD7A7E1C04FCD00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397227 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:7b:d5:2f:d7:a7:e1:c0:4f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=3ef8e5a9-6680-4e8c-9ca3-3beb9e99ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:ca:84:b1:6d:f6:38:56:9f:31:7c:6e:09: 14:f6:79:72:06:2d:66:b1:f3:53:52:71:25:23:47: 4b:de:18:fd:8c:7c:09:cb:5f:60:ff:fe:18:4e:9f: c1:b2:51:d6:38:b3:68:1c:39:6d:3f:24:b9:2e:8e: 6b:4b:de:4c:70:a3:c1:72:4e:00:28:c0:f1:70:2a: e3:76:df:ec:2d:0b:81:28:e7:ca:49:f5:61:4a:00: 28:41:2b:d9:04:7d:9e:90:df:ae:2a:74:f7:fc:72: ce:20:d8:89:e8:34:0d:a3:f4:95:d7:9a:a3:6f:71: aa:17:0a:08:5f:e7:15:61:d8:a1:8f:5a:b3:bb:eb: 7a:c1:29:9e:e8:f5:e6:6f:7c:99:80:9b:4c:fc:ca: 89:8a:d4:bb:19:ef:a9:da:d2:db:ed:8a:5b:c1:f6: e1:7c:b8:51:48:3a:87:f5:97:ef:13:3a:bd:00:fc: 4a:58:4e:a2:78:2f:8f:f8:4b:7d:5e:48:19:85:37: 91:aa:d1:9c:c3:d3:30:48:ce:7e:35:69:28:70:f3: d0:4e:63:7a:df:c3:9d:59:85:f6:1f:78:4d:58:d3: 31:f1:a8:c6:a3:75:85:fe:82:c1:58:34:31:68:1a: 33:13:7f:ec:b4:21:ee:85:08:81:19:24:44:ea:0e: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F1:24:60:FA:4D:D5:9E:B7:37:75:F0:0E:1C:4D:4B:6E:2C:9E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:29:87:2b:7a:19:de:4a:d8:b0:bb:5a:d7:92:89:55:13:20: fc:aa:ba:5b:b9:0b:e2:11:72:5d:8f:d2:08:41:a7:cf:56:8c: ab:0a:5c:cd:41:a7:25:bf:1a:e8:fc:71:18:ff:45:f6:47:a1: a3:50:e0:ab:fd:2e:fd:42:a7:06:97:91:a1:c4:20:91:e8:d3: cf:83:13:33:e0:29:0a:bb:d1:a8:92:e7:bf:49:9b:84:62:94: 00:76:34:b8:a0:5b:28:55:08:64:f4:18:f6:c0:d8:c0:0d:34: 85:de:bc:52:ef:60:8d:35:6f:30:62:aa:b8:7d:96:c0:af:9f: e0:55:3f:7a:b3:d8:a7:24:e9:29:49:6b:57:a5:50:90:3e:89: 8f:8e:ae:af:b9:a4:f4:2a:e7:06:a8:4a:2a:a5:be:91:ba:8d: aa:7e:15:db:84:07:7f:bc:99:be:6c:85:30:84:82:1b:7f:5d: 67:aa:ce:6a:e1:91:07:f1:6c:d4:e9:a3:9d:a8:19:83:f9:d2: c9:d4:45:05:24:f6:6b:b1:01:1d:11:b2:02:39:04:f0:2d:a7: 48:c9:1a:88:dd:da:22:ba:9f:26:60:59:13:c6:92:40:aa:21: 49:b4:64:1c:b9:25:05:4d:f7:e9:3a:0d:5a:aa:59:56:39:7a: c8:8b:09:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEnvVL9en4cBPzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk M2VmOGU1YTktNjY4MC00ZThjLTljYTMtM2JlYjllOTllZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNfKhLFt9jhWnzF8bgkU9nlyBi1msfNTUnEl I0dL3hj9jHwJy19g//4YTp/BslHWOLNoHDltPyS5Lo5rS95McKPBck4AKMDxcCrj dt/sLQuBKOfKSfVhSgAoQSvZBH2ekN+uKnT3/HLOINiJ6DQNo/SV15qjb3GqFwoI X+cVYdihj1qzu+t6wSme6PXmb3yZgJtM/MqJitS7Ge+p2tLb7YpbwfbhfLhRSDqH 9ZfvEzq9APxKWE6ieC+P+Et9XkgZhTeRqtGcw9MwSM5+NWkocPPQTmN638OdWYX2 H3hNWNMx8ajGo3WF/oLBWDQxaBozE3/stCHuhQiBGSRE6g7skwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHxJGD6TdWetzd18A4cTUtuLJ46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODQyY2U0MmUtMjNjMi0z YzRjLWE0YjctN2E2MzE0YmU0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAphyt6Gd5K2LC7WteSiVUTIPyqulu5C+IRcl2P0ghBp89WjKsKXM1B pyW/Guj8cRj/RfZHoaNQ4Kv9Lv1CpwaXkaHEIJHo08+DEzPgKQq70aiS579Jm4Ri lAB2NLigWyhVCGT0GPbA2MANNIXevFLvYI01bzBiqrh9lsCvn+BVP3qz2Kck6SlJ a1elUJA+iY+Orq+5pPQq5waoSiqlvpG6jap+FduEB3+8mb5shTCEght/XWeqzmrh kQfxbNTpo52oGYP50snURQUk9muxAR0RsgI5BPAtp0jJGojd2iK6nyZgWRPGkkCq IUm0ZBy5JQVN9+k6DVqqWVY5esiLCYg= -----END CERTIFICATE-----Generated at Thu Mar 26 05:50:59 2026 by rpki-client