$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa File: 9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa (raw, json) Hash identifier: 1IR7XvTh3wigecuFE0aoxvtbgDkqNZVVBuRvHW+vxvI= Subject key identifier: 44:45:18:B4:CA:23:59:D2:90:30:BA:93:6F:37:D3:6F:D2:ED:D9:23 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912995DD8FB42D5B6E87880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397236 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:99:5d:d8:fb:42:d5:b6:e8:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=a89eb295-0c28-4a8b-b93c-da98030c2eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:36:c5:58:dc:d2:c0:02:ab:24:97:02:ed: 1d:6c:ef:65:e8:9b:d2:57:8b:12:99:8b:54:7a:c0: f5:ee:ec:d7:0c:96:cd:02:48:4e:28:31:d7:84:fb: 59:5b:33:59:2c:d2:a1:dd:b3:e6:f1:e4:b1:ab:f5: bc:e5:02:da:5d:0a:4e:1a:bb:bb:29:d2:3f:3a:b2: 0a:d0:a8:10:67:b6:1d:50:54:70:cf:83:1b:58:e4: 60:2f:e0:91:c9:ca:4b:22:f2:d7:a0:f4:9a:6e:f0: 76:cd:cd:5c:28:16:0e:f8:c1:12:2a:13:6a:00:83: 42:11:fa:61:f8:6e:70:51:b0:33:2c:36:b9:ff:5c: a9:3a:f5:09:d3:30:1e:62:b1:b7:a5:1c:0b:ee:1e: 7c:10:92:6b:7a:9e:eb:5c:98:44:6a:b1:1d:27:fb: bb:4c:f5:e4:80:eb:eb:e5:6f:b0:7f:73:db:e6:d0: 8c:ea:2e:0e:7f:20:9f:29:e0:97:49:ef:e5:ed:f3: af:ee:b3:69:e0:60:dd:f4:eb:7b:52:c7:29:7c:de: 62:bf:b6:1d:6b:a8:f9:58:1a:d9:f6:09:67:65:9d: 6d:4f:ed:b4:06:a3:77:f9:04:2f:0a:73:0a:3c:20: b1:32:fc:cf:7a:22:09:c5:ef:d6:67:b8:1d:f7:7b: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:18:B4:CA:23:59:D2:90:30:BA:93:6F:37:D3:6F:D2:ED:D9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:eb:59:8b:3b:f2:e8:81:0d:fc:f4:61:0d:aa:5d:af:66:4c: c2:61:fd:30:cc:5e:8f:c4:9b:86:e4:73:71:cd:64:2d:f2:70: 28:b8:58:9d:6e:bc:4e:c9:59:4f:fc:bd:66:f8:49:72:1a:d6: c1:a7:fd:4a:f2:47:56:46:d5:5f:79:8f:3c:b2:a0:7c:a8:c0: 9f:e8:c3:87:dd:ce:8f:fa:8e:c7:2f:c8:22:13:97:69:bb:6b: e9:51:6e:1f:a4:52:f3:5b:0a:f6:5e:f5:57:71:de:31:57:23: 42:31:4b:fd:e6:5d:65:01:b3:68:b3:85:e0:42:32:87:6a:20: c6:a6:29:bd:55:1b:41:a7:67:56:f9:96:bf:60:7e:bd:7c:6b: 65:97:04:6e:dd:10:46:e6:8a:f0:70:65:40:d5:e4:c3:12:52: f6:c6:ce:31:1f:c2:8d:33:3f:0f:7c:0e:92:78:3d:d5:92:e5: 71:43:0e:aa:b4:30:e5:59:6a:25:a0:18:e3:1f:6c:c7:8c:fd: 0f:e3:b6:07:d0:ed:aa:4f:8c:c3:cd:3f:cd:56:be:40:64:cd: cb:64:93:f1:80:12:24:70:ea:1f:f2:30:f9:ca:da:80:dc:9a: 15:00:14:b9:e7:97:3d:66:09:9b:38:7c:70:d3:35:db:f9:6a: 39:6d:78:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpld2PtC1bboeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTg5ZWIyOTUtMGMyOC00YThiLWI5M2MtZGE5ODAzMGMyZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbc2xVjc0sACqySXAu0dbO9l6JvSV4sSmYtU esD17uzXDJbNAkhOKDHXhPtZWzNZLNKh3bPm8eSxq/W85QLaXQpOGru7KdI/OrIK 0KgQZ7YdUFRwz4MbWORgL+CRycpLIvLXoPSabvB2zc1cKBYO+MESKhNqAINCEfph +G5wUbAzLDa5/1ypOvUJ0zAeYrG3pRwL7h58EJJrep7rXJhEarEdJ/u7TPXkgOvr 5W+wf3Pb5tCM6i4OfyCfKeCXSe/l7fOv7rNp4GDd9Ot7UscpfN5iv7Yda6j5WBrZ 9glnZZ1tT+20BqN3+QQvCnMKPCCxMvzPeiIJxe/WZ7gd93vf4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERFGLTKI1nSkDC6k28302/S7dkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEyYmY4ZjQtZjlkNC0z OTQ5LThhYTUtMzhlOGU4NWJmNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbrWYs78uiBDfz0YQ2qXa9mTMJh/TDMXo/Em4bkc3HNZC3ycCi4WJ1u vE7JWU/8vWb4SXIa1sGn/UryR1ZG1V95jzyyoHyowJ/ow4fdzo/6jscvyCITl2m7 a+lRbh+kUvNbCvZe9Vdx3jFXI0IxS/3mXWUBs2izheBCModqIMamKb1VG0GnZ1b5 lr9gfr18a2WXBG7dEEbmivBwZUDV5MMSUvbGzjEfwo0zPw98DpJ4PdWS5XFDDqq0 MOVZaiWgGOMfbMeM/Q/jtgfQ7apPjMPNP81WvkBkzctkk/GAEiRw6h/yMPnK2oDc mhUAFLnnlz1mCZs4fHDTNdv5ajlteGc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:36 2026 by rpki-client