$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2a0df02-8f47-3c05-a713-1a5c5b5b4d9d.roa File: c2a0df02-8f47-3c05-a713-1a5c5b5b4d9d.roa (raw, json) Hash identifier: XS0mQ4dDUM6A7Ik+jrIaMHr52c93AzFuwUNNB7Fm5eY= Subject key identifier: B5:F0:25:3A:97:74:B2:9A:48:FE:48:24:15:56:1E:3B:FA:60:5D:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4016B4ACF66A85F23000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2a0df02-8f47-3c05-a713-1a5c5b5b4d9d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397227 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:40:16:b4:ac:f6:6a:85:f2:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=7f1b7b77-2ff0-42a1-b729-49a40a9c4cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:04:ab:cb:df:cd:4c:16:18:4e:a9:f2:1d: 82:8c:81:c1:dd:72:81:d2:af:31:92:64:bf:79:4c: 6a:4e:30:e1:01:59:13:0a:c6:64:7a:ce:cb:79:e3: 28:42:ef:99:1a:71:43:ad:a6:3b:dc:e1:d2:f0:f3: 6d:ab:ae:9a:85:b7:18:7b:6b:05:e9:7c:c8:e1:31: 42:72:c9:9f:a7:81:88:7b:22:b2:80:9a:c8:8f:b5: f1:3f:27:71:58:7f:1a:a9:ef:3c:06:4c:d6:ee:1c: ce:51:1b:7a:9f:5b:0a:dc:60:99:0e:b1:9d:2d:a1: 34:93:d9:6b:2a:9f:d0:a3:bf:7d:0b:7e:e5:01:66: 26:59:48:5e:91:66:96:5b:12:83:bb:a8:ab:14:11: 2f:23:9d:82:c2:53:9b:50:c5:1b:83:85:35:1f:b6: 7c:01:06:51:0a:73:da:00:c8:ed:e2:9b:d1:44:72: 41:de:93:74:94:66:fd:8c:bb:61:3a:f1:39:ea:05: 3e:f2:f6:8b:37:80:6f:44:fa:30:cc:66:71:35:9e: 86:71:25:bf:30:5d:2b:7e:e6:7e:90:22:fb:7d:cf: 72:e7:05:ec:b6:60:8c:a4:1f:80:9d:35:9c:ec:b3: 09:13:79:0c:87:70:cc:93:6e:13:c1:85:6e:3a:3e: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:25:3A:97:74:B2:9A:48:FE:48:24:15:56:1E:3B:FA:60:5D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2a0df02-8f47-3c05-a713-1a5c5b5b4d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:96:f6:66:6d:3f:6d:46:cb:70:ce:c1:9c:ee:91:81:a4:23: 18:d2:11:0d:f9:cb:e0:13:93:19:99:86:43:c4:c9:36:df:4a: 7a:c9:b2:a9:b7:5c:fd:6e:2a:82:af:20:d7:aa:c8:c9:4d:25: 11:b1:7c:68:79:2a:3a:4c:60:a9:88:69:83:14:b1:df:fc:61: fb:4a:87:c6:57:a9:51:81:7a:6e:4a:f4:73:d8:5b:a9:c2:c6: ed:ba:bd:df:57:9d:ad:ca:b5:bd:f3:b6:ef:1e:b7:03:0a:9c: 3d:9f:65:51:d7:a8:8d:93:9d:c1:d7:b9:77:a8:a5:bb:7c:07: 59:2c:2e:21:71:4f:45:bb:e1:79:94:12:da:a9:c5:30:37:2f: 43:3b:ff:24:a4:bb:79:95:24:bd:5b:93:9c:20:41:a8:d8:ed: f3:78:df:2a:9b:c2:ea:79:6f:3c:c4:ad:6d:ed:b6:d8:20:c5: 4d:b8:6d:c7:63:06:0f:70:aa:e2:9c:47:c0:19:47:5e:39:51: 75:63:5e:e0:b4:32:c6:7e:8f:51:52:81:17:02:f9:ef:8b:03: bf:2a:e8:66:f4:7a:78:be:9d:ef:bc:81:6b:86:1a:74:b4:18: ae:f7:e5:7e:a6:dd:6d:86:3c:cd:c2:d4:2d:ee:bc:0c:bc:f9: 49:b1:53:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkAWtKz2aoXyMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk N2YxYjdiNzctMmZmMC00MmExLWI3MjktNDlhNDBhOWM0Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYEq8vfzUwWGE6p8h2CjIHB3XKB0q8xkmS/ eUxqTjDhAVkTCsZkes7LeeMoQu+ZGnFDraY73OHS8PNtq66ahbcYe2sF6XzI4TFC csmfp4GIeyKygJrIj7XxPydxWH8aqe88BkzW7hzOURt6n1sK3GCZDrGdLaE0k9lr Kp/Qo799C37lAWYmWUhekWaWWxKDu6irFBEvI52CwlObUMUbg4U1H7Z8AQZRCnPa AMjt4pvRRHJB3pN0lGb9jLthOvE56gU+8vaLN4BvRPowzGZxNZ6GcSW/MF0rfuZ+ kCL7fc9y5wXstmCMpB+AnTWc7LMJE3kMh3DMk24TwYVuOj43OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXwJTqXdLKaSP5IJBVWHjv6YF0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzJhMGRmMDItOGY0Ny0z YzA1LWE3MTMtMWE1YzViNWI0ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGW9mZtP21Gy3DOwZzukYGkIxjSEQ35y+ATkxmZhkPEyTbfSnrJsqm3 XP1uKoKvINeqyMlNJRGxfGh5KjpMYKmIaYMUsd/8YftKh8ZXqVGBem5K9HPYW6nC xu26vd9Xna3Ktb3ztu8etwMKnD2fZVHXqI2TncHXuXeopbt8B1ksLiFxT0W74XmU EtqpxTA3L0M7/ySku3mVJL1bk5wgQajY7fN43yqbwup5bzzErW3tttggxU24bcdj Bg9wquKcR8AZR145UXVjXuC0MsZ+j1FSgRcC+e+LA78q6Gb0eni+ne+8gWuGGnS0 GK735X6m3W2GPM3C1C3uvAy8+UmxU34= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:47 2026 by rpki-client