$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfa77b57-4143-3c58-a590-2afca535d693.roa File: bfa77b57-4143-3c58-a590-2afca535d693.roa (raw, json) Hash identifier: p5O6WlHUeo7s4OoDjMZrK48BWvUFwGeXOsnJtUr6rNQ= Subject key identifier: C5:1D:88:A6:D7:7A:B9:6A:B9:F1:40:CC:1E:BE:49:7D:39:B3:0A:58 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DD09067260AD70D78786E26A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfa77b57-4143-3c58-a590-2afca535d693.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 397230 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:67:26:0a:d7:0d:78:78:6e:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=cc37b94d-69b7-4e58-b028-7460ae4543c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:4e:5f:4c:9d:00:44:f7:f0:22:16:bc:59: c7:b7:9f:6f:f2:f0:61:7d:43:2b:62:89:8e:b4:5c: 1f:11:8d:d9:0f:bd:0a:f0:19:2d:a8:22:a3:bb:c5: 59:e4:52:68:12:52:c6:90:b1:d3:c1:3e:d1:d8:6f: 68:49:6c:77:6b:5c:8a:69:0c:58:19:a7:5a:83:98: c3:2d:71:2a:97:ec:ec:10:b2:0e:4f:3b:65:05:c2: 69:78:d3:9e:36:8b:e5:7a:df:50:bb:c6:72:1d:84: d4:9a:5d:dd:04:06:bd:f0:72:88:0c:12:70:47:a8: 67:72:48:04:46:3d:8e:90:df:c6:ac:5a:74:1c:50: d1:b2:b2:01:80:b3:d9:02:b4:18:6e:59:cc:f7:8f: 9c:2d:29:8d:59:5d:f1:67:2e:68:0e:fe:56:10:aa: a9:a2:dc:ed:19:b7:41:31:cd:f0:c4:ed:89:a8:18: 35:65:84:23:dc:ca:92:6a:59:e4:9d:0f:1b:c6:f4: f6:7e:2b:34:d6:1e:f4:35:d5:c3:39:ba:73:77:7a: b4:1d:01:56:66:aa:35:6e:80:b4:01:b1:28:48:1a: e6:b3:5d:85:0a:1b:c9:ad:90:0f:05:7d:18:b1:b2: cb:23:9f:70:73:50:45:7b:d5:33:a7:b6:f8:10:6d: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:88:A6:D7:7A:B9:6A:B9:F1:40:CC:1E:BE:49:7D:39:B3:0A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfa77b57-4143-3c58-a590-2afca535d693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b1:89:0a:8a:97:ff:0e:07:a8:cc:c4:cb:86:67:94:81:af: 77:fb:b9:99:42:af:27:c5:54:f0:2e:f6:24:ae:9a:99:12:42: da:6d:fa:b7:44:95:76:fe:8f:c1:82:d7:dc:a0:21:87:2d:96: c7:79:25:95:76:15:15:18:49:9e:25:52:cd:93:c7:17:2f:d6: 16:27:cd:48:06:bd:ef:cc:ef:a7:c0:6e:0f:33:b5:fb:15:61: 2d:97:d3:60:bd:e7:1a:96:53:81:42:a9:ac:72:bd:4e:c2:29: a6:14:df:98:81:8d:0a:b6:8b:f3:60:28:47:8c:c3:55:85:86: 80:ff:5c:66:3d:63:d0:50:ab:cf:39:43:e8:e8:20:ca:31:6c: 39:34:ba:3e:68:ac:37:65:10:78:2f:fa:c9:31:f5:e8:bb:64: ff:d6:2a:9b:20:ed:69:8d:bc:62:01:ee:4d:2f:4f:2f:94:4f: f3:92:8a:56:05:79:23:ce:07:75:fb:62:e3:bc:79:26:fa:76: 51:d9:8a:a1:4f:27:7b:05:74:b3:1f:d8:31:b7:1e:55:d6:ca: 10:1a:00:79:36:fb:7a:6b:13:94:b6:1f:fd:cf:05:ba:54:b5: a1:e6:99:65:17:dd:c3:69:22:21:02:0a:a9:51:de:bc:7a:21: 03:ac:d4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkGcmCtcNeHhuJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk Y2MzN2I5NGQtNjliNy00ZTU4LWIwMjgtNzQ2MGFlNDU0M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSlOX0ydAET38CIWvFnHt59v8vBhfUMrYomO tFwfEY3ZD70K8BktqCKju8VZ5FJoElLGkLHTwT7R2G9oSWx3a1yKaQxYGadag5jD LXEql+zsELIOTztlBcJpeNOeNovlet9Qu8ZyHYTUml3dBAa98HKIDBJwR6hnckgE Rj2OkN/GrFp0HFDRsrIBgLPZArQYblnM94+cLSmNWV3xZy5oDv5WEKqpotztGbdB Mc3wxO2JqBg1ZYQj3MqSalnknQ8bxvT2fis01h70NdXDObpzd3q0HQFWZqo1boC0 AbEoSBrms12FChvJrZAPBX0YsbLLI59wc1BFe9Uzp7b4EG39VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUdiKbXerlqufFAzB6+SX05swpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmZhNzdiNTctNDE0My0z YzU4LWE1OTAtMmFmY2E1MzVkNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmxiQqKl/8OB6jMxMuGZ5SBr3f7uZlCryfFVPAu9iSumpkSQtpt+rdE lXb+j8GC19ygIYctlsd5JZV2FRUYSZ4lUs2Txxcv1hYnzUgGve/M76fAbg8ztfsV YS2X02C95xqWU4FCqaxyvU7CKaYU35iBjQq2i/NgKEeMw1WFhoD/XGY9Y9BQq885 Q+joIMoxbDk0uj5orDdlEHgv+skx9ei7ZP/WKpsg7WmNvGIB7k0vTy+UT/OSilYF eSPOB3X7YuO8eSb6dlHZiqFPJ3sFdLMf2DG3HlXWyhAaAHk2+3prE5S2H/3PBbpU taHmmWUX3cNpIiECCqlR3rx6IQOs1MU= -----END CERTIFICATE-----Generated at Wed May 13 12:05:04 2026 by rpki-client