$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa File: 9b8de757-738a-3a39-a4b0-e09174c4d533.roa (raw, json) Hash identifier: SQ8VpfYl/2k4gMKAavx+rvg8/0Ka+TZEa+9f4o7Gjug= Subject key identifier: A9:7E:1E:85:57:D5:59:7E:2B:E4:8B:51:AD:47:A5:BC:C3:1F:16:69 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912973005635EF76EDBD628 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397236 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:97:30:05:63:5e:f7:6e:db:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=0a38d1e8-4397-457d-831b-34b3a093e5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:b7:75:7a:55:24:f5:60:c9:83:eb:59:64: 16:cd:95:80:cf:9c:41:49:22:59:2e:8b:23:94:3e: 09:43:11:82:b1:9a:e9:a3:21:f8:8f:4e:70:4a:0a: a0:02:31:11:cc:17:50:a5:18:51:a5:1d:61:2f:70: 6d:e6:fe:16:8a:d0:5e:fa:a9:57:98:20:9e:1d:56: 6b:7f:67:db:ad:a3:29:e1:90:12:57:05:26:0e:cd: e8:44:3c:dc:8f:e4:fe:99:8b:8f:42:a4:c0:33:03: 4b:bc:fc:22:68:89:f4:22:2f:0b:12:6a:a8:94:75: 74:ec:df:49:f0:21:84:27:36:30:d0:97:d0:df:c5: 65:54:88:9a:61:c9:1f:18:c7:0d:1b:8a:a1:d5:a2: dd:39:10:66:2b:1f:e9:eb:af:18:0f:4c:59:6e:f9: 60:69:ae:9a:7a:2c:c6:43:5c:0e:23:92:af:fc:61: ce:6d:56:4c:8e:2f:d6:0e:cb:35:05:b2:79:46:3e: dd:cd:98:6f:6c:d1:7f:ca:2c:72:70:71:8c:f4:de: c7:fc:48:11:df:b0:b9:16:c2:c6:8b:25:db:78:d9: 78:3e:b2:79:5f:a2:08:e3:cd:7c:59:83:fd:aa:73: b9:a2:74:04:5a:dd:e1:c6:4f:4e:26:ae:01:3a:4c: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:1E:85:57:D5:59:7E:2B:E4:8B:51:AD:47:A5:BC:C3:1F:16:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9b8de757-738a-3a39-a4b0-e09174c4d533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:01:14:1a:d8:14:b2:d5:6c:ef:ab:14:fc:1e:d7:d9:7e:3a: 84:8a:87:e3:75:a2:05:c5:57:03:1c:49:9c:a6:18:f4:bd:09: 29:c7:20:b6:fe:e0:f6:f2:a3:fb:7a:a0:be:c3:5c:46:d8:01: 0d:7a:e3:d8:39:a5:f6:92:aa:d7:cd:0a:71:30:a5:05:cb:f3: 90:66:30:41:92:ac:48:8b:b1:cf:e3:75:bd:e4:40:f5:c9:5d: a6:04:e5:d6:16:13:30:2a:2e:5e:14:cf:93:d2:89:17:46:b0: 02:1a:24:02:c8:93:16:ea:3b:50:25:a7:51:71:69:0d:e1:e5: 25:52:60:16:e9:7d:57:2f:2e:d5:67:c2:13:a3:8b:3b:cd:c7: b6:ec:28:a3:46:ce:7c:ec:5c:33:38:36:d4:80:77:2b:34:71: 31:7f:4c:ce:dd:bd:a6:c9:12:f6:1f:03:cf:92:49:00:18:19: 09:05:80:16:b7:47:82:a9:d1:3f:de:dd:f1:2a:10:ca:93:f9: d2:da:d3:c7:f2:06:d1:ce:d2:fe:80:b4:35:7a:55:ca:be:04: 6b:66:42:74:2c:e9:f4:c7:97:83:5e:3f:cd:a5:37:4a:88:c6: 94:8f:2b:78:85:c1:45:c0:53:7b:08:3d:f2:87:d5:9f:bd:f3: a5:d1:cf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpcwBWNe927b1igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MGEzOGQxZTgtNDM5Ny00NTdkLTgzMWItMzRiM2EwOTNlNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAq3dXpVJPVgyYPrWWQWzZWAz5xBSSJZLosj lD4JQxGCsZrpoyH4j05wSgqgAjERzBdQpRhRpR1hL3Bt5v4WitBe+qlXmCCeHVZr f2fbraMp4ZASVwUmDs3oRDzcj+T+mYuPQqTAMwNLvPwiaIn0Ii8LEmqolHV07N9J 8CGEJzYw0JfQ38VlVIiaYckfGMcNG4qh1aLdORBmKx/p668YD0xZbvlgaa6aeizG Q1wOI5Kv/GHObVZMji/WDss1BbJ5Rj7dzZhvbNF/yixycHGM9N7H/EgR37C5FsLG iyXbeNl4PrJ5X6II4818WYP9qnO5onQEWt3hxk9OJq4BOkz7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl+HoVX1Vl+K+SLUa1HpbzDHxZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWI4ZGU3NTctNzM4YS0z YTM5LWE0YjAtZTA5MTc0YzRkNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0BFBrYFLLVbO+rFPwe19l+OoSKh+N1ogXFVwMcSZymGPS9CSnHILb+ 4Pbyo/t6oL7DXEbYAQ1649g5pfaSqtfNCnEwpQXL85BmMEGSrEiLsc/jdb3kQPXJ XaYE5dYWEzAqLl4Uz5PSiRdGsAIaJALIkxbqO1Alp1FxaQ3h5SVSYBbpfVcvLtVn whOjizvNx7bsKKNGznzsXDM4NtSAdys0cTF/TM7dvabJEvYfA8+SSQAYGQkFgBa3 R4Kp0T/e3fEqEMqT+dLa08fyBtHO0v6AtDV6Vcq+BGtmQnQs6fTHl4NeP82lN0qI xpSPK3iFwUXAU3sIPfKH1Z+986XRz0A= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:12 2026 by rpki-client