$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa File: 9ca7c0a2-8323-348e-a74f-00007d00bfae.roa (raw, json) Hash identifier: S+r4zAhygRY4yNzLalkOs6T0t48pfYFWtZz7pW3YYnM= Subject key identifier: 67:5B:B8:B4:8F:61:A5:30:36:C8:9D:DD:86:E8:0E:5D:67:5A:FA:35 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A3F775940EF86DB68C580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397217 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:3f:77:59:40:ef:86:db:68:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=914ec5f8-f61c-45e3-b9a1-7ff55527f6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:cc:dc:31:c4:51:8d:95:a5:c4:b2:2f:f2: d9:a0:41:a4:eb:44:4b:c2:bc:14:24:6f:5b:04:51: bd:bd:86:28:4d:62:bd:da:2e:3a:6e:17:4f:40:ad: 6b:3a:5a:75:bd:eb:98:91:67:b7:ba:6e:3e:55:24: df:53:7b:3a:09:a7:cc:25:c0:5c:22:fe:ad:d2:3e: 27:72:56:85:a1:04:1b:6c:9b:be:dd:19:b6:c7:23: 9d:d1:c0:44:8f:08:a4:3d:d3:c8:12:f5:db:61:34: 69:d0:bb:bf:a4:50:65:bb:63:bd:8d:c5:9d:27:41: 10:e7:c2:32:8b:a8:5f:d6:ee:a9:4a:f5:cc:d9:1e: 2d:a3:ac:32:1e:a6:f1:33:98:7a:9c:32:66:74:43: 3d:f0:ac:5e:d5:a4:23:e3:b2:ab:70:fe:0b:94:75: b3:60:76:ee:ab:05:8d:ed:a1:3e:8f:c7:5c:a6:2e: aa:20:c3:84:94:57:ad:78:82:94:17:cb:00:50:96: 9d:cc:86:57:0f:6f:29:d3:81:8f:da:fb:91:c2:d8: c1:38:e8:fd:e5:22:09:86:26:93:c7:4e:17:a1:61: 9e:db:c2:3d:53:ab:33:d3:b7:8c:cd:c7:d6:e1:8e: 15:85:9e:d4:73:07:d2:81:8d:0f:8a:cc:49:c0:21: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5B:B8:B4:8F:61:A5:30:36:C8:9D:DD:86:E8:0E:5D:67:5A:FA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ca7c0a2-8323-348e-a74f-00007d00bfae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e4:95:1a:5f:54:49:97:e8:c0:dd:9e:d5:6d:ac:f4:52:04: e5:7d:3a:e2:0a:01:84:12:96:e4:f6:cc:00:29:83:1e:00:46: cc:59:9c:ba:21:91:5b:7b:eb:f7:0d:3c:ab:fa:da:80:75:d7: b4:6e:72:50:ff:bb:16:cb:2d:7f:d5:24:a5:82:0b:1b:21:3f: 2d:21:16:be:f7:09:b0:d9:41:d6:1d:d0:b8:b2:e3:ee:57:06: 07:84:a9:3e:4d:0a:79:e2:0c:21:04:c1:28:f7:05:bc:a9:14: 27:c6:52:d9:24:d7:7d:3e:97:7f:e3:51:96:ce:f3:c2:1b:dd: 23:f0:03:64:11:b6:f8:54:da:83:cb:73:28:6f:d1:cb:ec:a5: f8:6a:d2:f7:3c:2e:3f:48:1c:40:e9:d8:79:88:5a:97:70:c7: a2:28:a2:f9:27:d4:7a:b5:3b:41:7c:68:3f:3e:75:37:96:cc: 12:1b:62:8f:60:94:87:2a:cf:15:7d:8a:4d:98:a4:cc:64:8f: eb:c1:ae:83:eb:2a:5b:9f:22:95:94:07:f7:91:49:49:5b:6d: 83:a9:34:25:43:21:46:18:a2:83:79:8c:2a:e1:d6:d9:8a:c8: a1:de:0a:71:2b:6d:00:b2:21:af:c5:94:9b:62:98:a4:24:02: f9:1a:ce:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGj93WUDvhttoxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTE0ZWM1ZjgtZjYxYy00NWUzLWI5YTEtN2ZmNTU1MjdmNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB7M3DHEUY2VpcSyL/LZoEGk60RLwrwUJG9b BFG9vYYoTWK92i46bhdPQK1rOlp1veuYkWe3um4+VSTfU3s6CafMJcBcIv6t0j4n claFoQQbbJu+3Rm2xyOd0cBEjwikPdPIEvXbYTRp0Lu/pFBlu2O9jcWdJ0EQ58Iy i6hf1u6pSvXM2R4to6wyHqbxM5h6nDJmdEM98Kxe1aQj47KrcP4LlHWzYHbuqwWN 7aE+j8dcpi6qIMOElFeteIKUF8sAUJadzIZXD28p04GP2vuRwtjBOOj95SIJhiaT x04XoWGe28I9U6sz07eMzcfW4Y4VhZ7UcwfSgY0PisxJwCFuPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdbuLSPYaUwNsid3YboDl1nWvo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWNhN2MwYTItODMyMy0z NDhlLWE3NGYtMDAwMDdkMDBiZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrklRpfVEmX6MDdntVtrPRSBOV9OuIKAYQSluT2zAApgx4ARsxZnLoh kVt76/cNPKv62oB117RuclD/uxbLLX/VJKWCCxshPy0hFr73CbDZQdYd0Liy4+5X BgeEqT5NCnniDCEEwSj3BbypFCfGUtkk130+l3/jUZbO88Ib3SPwA2QRtvhU2oPL cyhv0cvspfhq0vc8Lj9IHEDp2HmIWpdwx6Ioovkn1Hq1O0F8aD8+dTeWzBIbYo9g lIcqzxV9ik2YpMxkj+vBroPrKlufIpWUB/eRSUlbbYOpNCVDIUYYooN5jCrh1tmK yKHeCnErbQCyIa/FlJtimKQkAvkaziE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:36 2026 by rpki-client