$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa File: cc50029d-2795-3128-97b2-eadfbd0c65c3.roa (raw, json) Hash identifier: hkksqUrP0cln3zeMTM8j4qhDaASahc2PVIAW32H3Qqg= Subject key identifier: C5:59:B4:F7:DE:E3:69:A5:9B:73:11:8C:FD:E4:1C:44:55:31:E7:2C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D091297EC2ADA9735FD9C9580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397214 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:97:ec:2a:da:97:35:fd:9c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=fbbafb69-1de6-4f72-8174-407387ac992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:7e:eb:f9:de:9b:9b:c1:16:41:cb:49:8d: eb:34:2a:b4:45:2d:28:98:4b:4b:2d:49:4a:37:7e: 7d:18:8c:65:53:c1:3a:22:a2:e8:2f:24:3e:81:78: 07:81:98:ed:d4:b3:ff:34:e8:ba:4a:1c:98:83:f1: 9b:8c:75:11:2c:4a:fb:82:72:1f:2d:f8:35:d8:42: 4b:a1:87:d2:45:9e:5b:0f:1d:e6:ef:ee:14:80:81: 5c:69:1d:92:c5:e6:f9:2f:e1:ec:9e:f8:23:6d:77: 80:37:cd:c7:1b:f4:35:c1:f1:68:35:d8:f7:8e:3e: 67:ff:b6:d0:69:c3:1b:52:7c:82:48:90:ed:77:7d: f1:e4:b2:64:c7:82:b4:84:11:74:f3:01:09:87:50: e5:79:e3:65:4f:00:dc:23:98:38:51:75:7e:be:c9: 67:e0:bc:3c:8e:37:4a:ce:99:9e:e7:c8:cd:b6:6a: e2:2a:a4:cd:ab:27:ff:c6:b6:e7:0f:d8:84:2d:bc: ca:c3:95:50:30:74:c0:11:9a:a4:85:34:40:70:3b: ee:cd:9e:4f:c1:7b:b2:cf:a0:a3:d2:4a:7c:86:e8: ea:69:01:ad:f3:03:f8:d1:5f:b7:48:f5:61:50:d2: 25:3d:a2:c5:06:0d:4d:ea:17:dd:0d:44:04:6e:06: 6f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:59:B4:F7:DE:E3:69:A5:9B:73:11:8C:FD:E4:1C:44:55:31:E7:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6f:04:56:11:f8:24:18:4d:d3:c7:cf:8c:e9:56:a1:49:31: bd:ff:d8:4d:df:41:c6:d4:d9:03:d8:47:59:de:17:3c:fb:62: cd:8f:34:28:07:be:f2:f5:82:3a:3e:0a:ab:ef:d4:41:bc:3f: 1f:70:ae:03:31:60:8b:93:65:29:2c:8f:70:ce:fc:ee:a1:7f: 9e:6d:8c:c3:09:ad:3d:be:a8:93:62:db:2d:1e:35:a3:91:73: 1c:33:d9:8d:b9:16:bb:da:41:c3:e1:f4:67:67:ac:7c:ae:b8: 24:83:0a:ff:48:9a:c7:e3:6c:88:13:d9:ad:a7:00:00:2d:a5: 8d:01:3e:44:02:f1:0b:b8:9e:c6:4a:9f:a4:ac:aa:a9:77:d7: 77:80:a7:d6:40:aa:8d:32:8e:a0:c8:22:8c:b8:e0:d1:27:03: 73:7d:17:dd:7a:15:a9:7d:44:b9:8e:10:48:5a:41:99:ba:96: 5a:a1:e5:df:29:8c:d1:f2:eb:aa:fc:f8:76:aa:4b:13:2c:01: ee:19:e3:d1:35:f5:67:48:fd:f5:11:20:e4:34:d7:46:5a:49: c0:4f:19:bc:e4:9f:2d:ce:18:fe:8b:0f:28:7e:31:76:36:c9: 45:cd:ad:ee:73:7f:26:bd:a5:8d:a7:39:1c:cc:c6:82:19:95: 5a:4a:33:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpfsKtqXNf2clYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmJiYWZiNjktMWRlNi00ZjcyLTgxNzQtNDA3Mzg3YWM5OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/N+6/nem5vBFkHLSY3rNCq0RS0omEtLLUlK N359GIxlU8E6IqLoLyQ+gXgHgZjt1LP/NOi6ShyYg/GbjHURLEr7gnIfLfg12EJL oYfSRZ5bDx3m7+4UgIFcaR2Sxeb5L+HsnvgjbXeAN83HG/Q1wfFoNdj3jj5n/7bQ acMbUnyCSJDtd33x5LJkx4K0hBF08wEJh1DleeNlTwDcI5g4UXV+vsln4Lw8jjdK zpme58jNtmriKqTNqyf/xrbnD9iELbzKw5VQMHTAEZqkhTRAcDvuzZ5PwXuyz6Cj 0kp8hujqaQGt8wP40V+3SPVhUNIlPaLFBg1N6hfdDUQEbgZvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVZtPfe42mlm3MRjP3kHERVMecsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2M1MDAyOWQtMjc5NS0z MTI4LTk3YjItZWFkZmJkMGM2NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZvBFYR+CQYTdPHz4zpVqFJMb3/2E3fQcbU2QPYR1neFzz7Ys2PNCgH vvL1gjo+Cqvv1EG8Px9wrgMxYIuTZSksj3DO/O6hf55tjMMJrT2+qJNi2y0eNaOR cxwz2Y25FrvaQcPh9GdnrHyuuCSDCv9ImsfjbIgT2a2nAAAtpY0BPkQC8Qu4nsZK n6Ssqql313eAp9ZAqo0yjqDIIoy44NEnA3N9F916Fal9RLmOEEhaQZm6llqh5d8p jNHy66r8+HaqSxMsAe4Z49E19WdI/fURIOQ010ZaScBPGbzkny3OGP6LDyh+MXY2 yUXNre5zfya9pY2nORzMxoIZlVpKMzs= -----END CERTIFICATE-----Generated at Thu Mar 26 05:11:41 2026 by rpki-client