$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa File: 9857cae2-4739-3d30-88c9-a5e631859a2a.roa (raw, json) Hash identifier: SENciP5AAhLZPsSQCN+vUPpH2IoBc2NrbwZvNw4wW2s= Subject key identifier: FC:C2:23:55:90:6D:70:E6:09:CA:7E:E6:69:F1:C1:80:81:BA:CF:28 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DBD05C64F4ACB2B07D8DA7600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 397220 IP address blocks: 156.154.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:c6:4f:4a:cb:2b:07:d8:da:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=fa8b3d2b-4173-41ff-b8a8-aa1ba7604ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b4:60:f9:ca:a1:c2:9c:f6:df:07:ed:c0:46: 30:4c:be:c3:a3:3e:bd:ec:f8:10:eb:55:83:aa:ba: 4d:f7:67:bf:f9:02:5d:5e:35:f0:32:8b:10:53:09: 7e:f5:bf:4d:33:e2:4b:db:b8:ec:1f:29:60:c6:5a: bf:e2:19:f4:d1:97:3f:2e:98:cb:48:a4:83:bf:de: 40:c7:ac:21:0b:99:b1:3f:de:f8:55:1f:e7:e5:a8: bd:3f:fa:21:03:0a:72:8b:7e:74:9f:1b:3c:ea:dd: 06:60:06:d9:52:12:77:5d:82:53:aa:07:f4:a3:29: 93:4c:ca:ec:35:eb:54:56:f1:00:d2:98:e5:c9:a4: 85:e8:4d:ac:0e:47:06:30:51:1b:4d:25:8d:32:d2: 2c:8b:ef:1b:d0:64:9d:ff:99:c0:af:42:f2:df:85: c2:b6:f1:f2:d5:32:da:83:07:95:3a:da:f3:00:e4: 9d:8a:49:02:49:41:85:17:57:dd:a8:8f:b1:c1:c6: 71:eb:ff:0e:49:3c:c3:6d:86:65:30:2f:75:24:ee: 8f:d3:81:33:e4:69:9c:88:ab:58:b7:5f:d7:77:9a: 87:44:14:0f:66:f3:d3:71:ba:9e:c4:7b:0e:1f:bd: ba:e4:3d:85:40:6b:4b:2c:68:79:d9:7b:33:72:37: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:23:55:90:6D:70:E6:09:CA:7E:E6:69:F1:C1:80:81:BA:CF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:47:12:bc:9e:b2:0a:25:43:26:b5:6e:b9:1c:e4:58:54:24: c6:34:a8:e5:4e:ef:75:09:e2:e8:c9:e3:60:79:10:f7:21:a4: b4:7c:9c:5a:34:2b:6a:ea:73:ab:7a:20:de:2a:84:37:b1:f9: 8f:24:e6:86:ca:bc:0c:e1:26:89:84:88:b1:d6:17:ee:29:71: b4:9d:98:0a:3a:05:27:31:64:c4:64:ba:00:a6:c1:f6:c1:5b: 9c:27:2c:ed:3d:0e:10:d6:9c:72:82:30:b2:61:e0:2c:71:26: 4f:a3:34:55:81:ce:52:67:9d:db:e5:47:d5:6f:8c:61:f2:6e: d5:25:95:72:5d:6f:48:d3:47:4e:9a:0b:67:fc:a9:d2:bb:61: 40:d5:e3:7f:00:10:54:a2:b2:76:e8:07:e8:a9:22:21:41:6c: 48:fa:20:50:24:96:3f:75:d1:71:a9:a9:b9:6b:4d:97:6b:d7: 59:cb:86:9f:ae:c8:48:f9:da:cf:7a:f4:fa:49:44:d6:dd:e2: b5:12:9b:3f:84:0d:89:76:53:6b:e9:55:92:e3:ac:ba:0b:4a: d2:2b:5e:1a:43:ff:33:83:3a:45:8e:4c:fa:1d:74:97:25:f9: 77:19:f8:da:23:bb:50:bb:db:fd:37:9a:50:42:23:b4:85:27: d2:a3:1f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BcZPSssrB9jadgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmE4YjNkMmItNDE3My00MWZmLWI4YTgtYWExYmE3NjA0Y2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrRg+cqhwpz23wftwEYwTL7Doz697PgQ61WD qrpN92e/+QJdXjXwMosQUwl+9b9NM+JL27jsHylgxlq/4hn00Zc/LpjLSKSDv95A x6whC5mxP974VR/n5ai9P/ohAwpyi350nxs86t0GYAbZUhJ3XYJTqgf0oymTTMrs NetUVvEA0pjlyaSF6E2sDkcGMFEbTSWNMtIsi+8b0GSd/5nAr0Ly34XCtvHy1TLa gweVOtrzAOSdikkCSUGFF1fdqI+xwcZx6/8OSTzDbYZlMC91JO6P04Ez5GmciKtY t1/Xd5qHRBQPZvPTcbqexHsOH7265D2FQGtLLGh52XszcjedmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzCI1WQbXDmCcp+5mnxwYCBus8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTg1N2NhZTItNDczOS0z ZDMwLTg4YzktYTVlNjMxODU5YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpHEryesgolQya1brkc5FhUJMY0qOVO73UJ4ujJ42B5EPchpLR8nFo0 K2rqc6t6IN4qhDex+Y8k5obKvAzhJomEiLHWF+4pcbSdmAo6BScxZMRkugCmwfbB W5wnLO09DhDWnHKCMLJh4CxxJk+jNFWBzlJnndvlR9VvjGHybtUllXJdb0jTR06a C2f8qdK7YUDV438AEFSisnboB+ipIiFBbEj6IFAklj910XGpqblrTZdr11nLhp+u yEj52s969PpJRNbd4rUSmz+EDYl2U2vpVZLjrLoLStIrXhpD/zODOkWOTPoddJcl +XcZ+Noju1C72/03mlBCI7SFJ9KjHzw= -----END CERTIFICATE-----Generated at Wed May 13 15:38:31 2026 by rpki-client