$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8de71516-d953-3604-a101-6d972ea19efe.roa File: 8de71516-d953-3604-a101-6d972ea19efe.roa (raw, json) Hash identifier: DaQ88fPwcYfJhBSq3+B7+uw97/yPID5aN747l5z9G7c= Subject key identifier: 90:1D:F4:93:7F:CA:99:17:15:38:E4:B6:A8:A1:B6:C9:09:4C:08:42 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A3FD401985B9FE99F2400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8de71516-d953-3604-a101-6d972ea19efe.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397223 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:3f:d4:01:98:5b:9f:e9:9f:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=bf546a60-fcce-4436-a422-9489c93e0c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:22:2f:7e:67:e9:ba:f7:66:57:de:11:24: 2a:f1:f5:ce:51:82:e6:6d:32:bd:93:45:a7:32:f4: 0e:82:b5:bf:18:9a:0e:59:a5:28:21:ed:27:0b:95: 36:2e:34:ff:9d:39:d9:72:cf:ca:15:32:47:24:b1: 85:65:55:15:8f:fa:6d:81:40:38:ff:27:28:85:8d: 86:d6:95:18:6f:53:a6:51:d4:de:7b:72:2a:8b:83: 05:aa:8b:c2:cd:d4:bb:54:d0:9d:23:92:83:8b:e8: ff:46:da:ca:34:61:6d:f2:4d:ed:48:b1:6c:a7:e8: 47:55:b8:40:92:97:cc:77:04:1b:8c:81:a6:dd:89: 21:3a:0f:9a:1f:cf:f0:22:5d:ea:cc:35:25:49:24: 8a:79:d6:e2:26:1b:ea:99:2e:87:3c:cf:ff:70:4e: c4:1f:54:37:5d:40:53:1d:ce:87:b7:bd:d2:b1:4b: e3:37:8d:08:8a:85:dd:3e:b9:fc:80:68:0f:ac:ea: 88:fa:18:0d:79:53:c9:f0:19:e2:21:aa:f7:71:fd: 9f:c9:4e:d9:d5:5e:98:68:28:ca:7d:d8:21:eb:d4: d9:c5:c7:e0:90:7c:1f:8e:09:fb:65:5e:02:dc:e1: 1b:0f:6a:13:c3:e6:78:83:3d:56:f5:20:2b:ea:51: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1D:F4:93:7F:CA:99:17:15:38:E4:B6:A8:A1:B6:C9:09:4C:08:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8de71516-d953-3604-a101-6d972ea19efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f7:af:23:7f:bf:2a:4b:49:20:fc:75:24:d0:b5:3f:72:e2: 2f:14:e0:6e:d3:9e:5c:b5:f6:42:4c:d9:0a:41:ab:8d:ac:21: a9:a9:48:aa:95:db:7f:8c:a6:ac:f5:cb:89:7c:eb:62:9d:2c: 12:23:03:92:6e:22:11:c6:19:9f:50:d8:72:68:77:cb:cf:75: 62:51:5e:fb:8e:bb:b6:ee:d4:2d:8e:d5:fa:e7:c0:f7:96:d8: 68:33:3a:72:7b:79:c3:86:20:7c:f4:68:cd:c4:2b:df:07:28: 88:1f:20:7d:41:98:f6:8b:6d:8f:6f:c9:37:50:ea:d2:f4:f9: c0:66:34:bd:9f:40:60:e1:36:29:b6:db:78:bb:d4:7e:92:e3: 53:82:16:33:b6:24:93:c1:77:32:cf:c8:1c:22:b4:47:15:4f: f3:40:55:36:03:a7:fe:33:1f:41:f8:71:8b:1c:5c:ed:34:81: ba:54:35:55:72:88:07:0b:ac:2c:79:db:29:65:9d:61:cd:c3: a4:a1:6b:c5:d7:67:fe:c5:d9:eb:b3:21:40:af:b1:1a:d7:01: be:55:4f:60:94:1e:33:53:fb:d7:f5:a4:71:64:24:78:46:48: 41:06:88:f4:a8:e6:22:e6:ff:64:c2:f8:5f:c6:9e:c2:ad:4b: 72:32:40:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGj/UAZhbn+mfJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YmY1NDZhNjAtZmNjZS00NDM2LWE0MjItOTQ4OWM5M2UwYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSAiL35n6br3ZlfeESQq8fXOUYLmbTK9k0Wn MvQOgrW/GJoOWaUoIe0nC5U2LjT/nTnZcs/KFTJHJLGFZVUVj/ptgUA4/ycohY2G 1pUYb1OmUdTee3Iqi4MFqovCzdS7VNCdI5KDi+j/RtrKNGFt8k3tSLFsp+hHVbhA kpfMdwQbjIGm3YkhOg+aH8/wIl3qzDUlSSSKedbiJhvqmS6HPM//cE7EH1Q3XUBT Hc6Ht73SsUvjN40IioXdPrn8gGgPrOqI+hgNeVPJ8BniIar3cf2fyU7Z1V6YaCjK fdgh69TZxcfgkHwfjgn7ZV4C3OEbD2oTw+Z4gz1W9SAr6lE4GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAd9JN/ypkXFTjktqihtskJTAhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGRlNzE1MTYtZDk1My0z NjA0LWExMDEtNmQ5NzJlYTE5ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/3ryN/vypLSSD8dSTQtT9y4i8U4G7Tnly19kJM2QpBq42sIampSKqV 23+Mpqz1y4l862KdLBIjA5JuIhHGGZ9Q2HJod8vPdWJRXvuOu7bu1C2O1frnwPeW 2GgzOnJ7ecOGIHz0aM3EK98HKIgfIH1BmPaLbY9vyTdQ6tL0+cBmNL2fQGDhNim2 23i71H6S41OCFjO2JJPBdzLPyBwitEcVT/NAVTYDp/4zH0H4cYscXO00gbpUNVVy iAcLrCx52yllnWHNw6Sha8XXZ/7F2euzIUCvsRrXAb5VT2CUHjNT+9f1pHFkJHhG SEEGiPSo5iLm/2TC+F/GnsKtS3IyQIA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:22 2026 by rpki-client