$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bffa5603-71d0-3a68-a90d-e36a90506462.roa File: bffa5603-71d0-3a68-a90d-e36a90506462.roa (raw, json) Hash identifier: BQs6KtBXmXGjqZBnw8rbXetqyAE+D2Um9ETwX8skbNg= Subject key identifier: F3:AD:02:18:09:7D:C8:B2:8C:9F:EA:66:DB:E7:B5:62:ED:C2:46:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4026FE445A0159901300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bffa5603-71d0-3a68-a90d-e36a90506462.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397228 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:40:26:fe:44:5a:01:59:90:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=9616c5ff-560f-4e02-86da-8d3761035af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:05:9e:ac:26:fe:eb:ae:1d:2c:34:fc:3e: e8:78:79:34:6c:36:71:09:af:ad:89:c5:0c:68:f1: 2d:62:a3:74:fa:3f:ae:28:cd:2b:fb:ea:cf:a9:f5: b8:74:2e:7b:41:f9:68:71:e6:90:fe:bd:ab:98:f2: a6:02:3d:bf:ea:5a:f4:03:00:37:42:6b:16:fe:c2: da:8d:98:b9:4f:b9:cd:ec:51:6d:e5:d1:7e:54:a7: 71:2c:57:1d:e5:51:ab:5f:ff:60:ce:cb:d8:01:43: f9:17:af:a3:7e:71:7e:4d:a4:6e:3e:21:f8:54:63: 6b:93:f1:d4:7e:b8:be:2e:de:68:97:f7:5a:39:c5: c7:53:d7:cd:c3:3c:bc:cd:3d:98:d7:be:d8:82:a3: c0:0c:f8:65:f1:19:24:45:44:28:7f:3c:8e:44:6c: 21:50:e0:ac:87:9e:9a:3d:22:6c:7b:9e:35:3b:9a: ff:9d:ae:ac:36:b6:e1:f4:e3:37:25:af:24:9a:7f: dc:8a:c6:6f:b2:e6:15:8c:cf:bb:d6:79:04:37:47: 51:02:c9:62:0d:c4:7c:64:ca:9f:d2:b2:8a:f6:1f: 75:f5:fb:f0:d1:07:6a:a4:9f:b7:66:84:da:d6:0c: 92:3a:58:56:8a:5e:8e:65:97:09:66:e8:27:68:1f: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:02:18:09:7D:C8:B2:8C:9F:EA:66:DB:E7:B5:62:ED:C2:46:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bffa5603-71d0-3a68-a90d-e36a90506462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6f:79:65:d5:c5:f5:32:1c:c2:e9:ee:6f:db:33:ea:1a:9d: 43:66:e5:4c:86:6f:3f:d3:12:ad:e8:e3:32:45:ec:9e:98:67: bc:66:f6:a4:11:43:cf:29:d4:82:da:a8:58:35:c0:73:34:c1: c6:46:12:0d:2a:f2:52:de:b1:19:a3:98:79:77:ec:ab:84:91: 6f:83:c8:c8:c2:61:6d:26:a8:b6:f6:7e:0d:7e:07:58:3d:f9: ac:d6:1b:65:e5:58:4c:3b:a3:e7:bd:bd:ad:0b:6c:a5:ed:69: b8:90:03:4e:43:1b:60:ba:d8:3e:83:d3:15:0c:13:08:c3:a7: 51:19:57:14:7b:02:b5:93:1b:19:7d:c3:c9:bc:9e:57:0d:7a: a9:16:cc:41:fb:fe:c7:76:c8:ce:3b:61:05:76:54:17:cf:04: ba:c6:74:d0:6a:62:61:1b:50:0a:49:b5:9b:02:ff:7e:08:23: 70:a9:90:86:a1:19:a3:9c:9a:18:d6:03:62:ac:c4:75:8f:a7: eb:9f:1e:6a:f2:52:9a:22:d0:60:9e:f7:3f:df:40:81:25:b4: f5:77:a0:a8:0e:58:a3:01:f3:1b:88:2d:e5:b0:b5:f8:ac:ec: 72:2f:f4:9c:a8:eb:5f:1a:e4:bb:38:8e:92:9c:ff:6e:8f:4b: 6e:34:a4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkAm/kRaAVmQEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTYxNmM1ZmYtNTYwZi00ZTAyLTg2ZGEtOGQzNzYxMDM1YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk4Fnqwm/uuuHSw0/D7oeHk0bDZxCa+ticUM aPEtYqN0+j+uKM0r++rPqfW4dC57QfloceaQ/r2rmPKmAj2/6lr0AwA3QmsW/sLa jZi5T7nN7FFt5dF+VKdxLFcd5VGrX/9gzsvYAUP5F6+jfnF+TaRuPiH4VGNrk/HU fri+Lt5ol/daOcXHU9fNwzy8zT2Y177YgqPADPhl8RkkRUQofzyORGwhUOCsh56a PSJse541O5r/na6sNrbh9OM3Ja8kmn/cisZvsuYVjM+71nkEN0dRAsliDcR8ZMqf 0rKK9h919fvw0QdqpJ+3ZoTa1gySOlhWil6OZZcJZugnaB8+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOtAhgJfciyjJ/qZtvntWLtwkZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmZmYTU2MDMtNzFkMC0z YTY4LWE5MGQtZTM2YTkwNTA2NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVveWXVxfUyHMLp7m/bM+oanUNm5UyGbz/TEq3o4zJF7J6YZ7xm9qQR Q88p1ILaqFg1wHM0wcZGEg0q8lLesRmjmHl37KuEkW+DyMjCYW0mqLb2fg1+B1g9 +azWG2XlWEw7o+e9va0LbKXtabiQA05DG2C62D6D0xUMEwjDp1EZVxR7ArWTGxl9 w8m8nlcNeqkWzEH7/sd2yM47YQV2VBfPBLrGdNBqYmEbUApJtZsC/34II3CpkIah GaOcmhjWA2KsxHWPp+ufHmryUpoi0GCe9z/fQIEltPV3oKgOWKMB8xuILeWwtfis 7HIv9Jyo618a5Ls4jpKc/26PS240pPk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:45 2026 by rpki-client