$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdf654c8-0553-38a4-9ae5-5bf257668bbf.roa File: cdf654c8-0553-38a4-9ae5-5bf257668bbf.roa (raw, json) Hash identifier: Dgak5mqHgJTzn06IjbiwPI70PQgt3JLbtGNjjxu/Lv0= Subject key identifier: 96:65:F5:03:7C:7B:7D:6C:30:A4:05:87:17:7D:25:B9:6F:19:34:54 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09128D5260B643A2C4C57340 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdf654c8-0553-38a4-9ae5-5bf257668bbf.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397214 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:8d:52:60:b6:43:a2:c4:c5:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=65dcd1c0-7867-4f0a-90b7-14277036e336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:ef:c9:d8:ad:8d:4d:26:b5:e8:35:e2:12: 7d:4e:77:87:a6:5f:c3:9b:b9:2a:9f:92:92:ed:ae: ea:eb:25:82:9d:d7:79:d8:a1:a4:46:d5:36:69:c3: 52:7f:70:1c:57:7c:f1:0b:7c:dc:c3:8e:b1:c3:5d: d4:95:24:49:b7:5b:9d:56:a7:09:c4:f0:6b:c9:cb: a4:87:27:94:0b:b5:8d:af:1e:91:1e:e9:bf:e0:88: 40:6d:80:56:e6:ed:a1:d0:8b:de:cb:a8:14:9b:20: 6c:3f:cf:71:e7:55:1a:1b:0b:44:3d:ac:6e:22:8f: d3:27:e0:9e:c8:17:36:61:d7:80:ae:64:03:fe:d4: 0e:6a:57:6e:cc:ea:1a:c5:ef:e4:1c:fe:d3:3b:c0: c4:47:55:de:b2:7a:7f:a7:20:c6:ed:95:5e:9b:fd: 8d:2d:79:2c:f1:f7:90:49:e5:91:a5:8f:43:44:b9: d8:11:f9:21:0d:02:d5:3d:bc:5b:ec:ce:9c:45:b8: d1:13:40:3e:b0:82:a8:b7:28:d0:56:4d:c0:ef:fd: f9:da:1c:da:35:3f:64:2e:b5:79:ba:fb:0d:af:af: e8:45:9b:10:ea:03:1f:0b:10:c5:e4:57:d9:1d:ee: 17:e7:af:d1:9c:2f:e0:9f:7b:cc:46:19:1a:2f:6f: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:F5:03:7C:7B:7D:6C:30:A4:05:87:17:7D:25:B9:6F:19:34:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cdf654c8-0553-38a4-9ae5-5bf257668bbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4e:79:ed:0f:1e:33:c8:bf:a8:86:63:4a:f4:99:f1:eb:be: a2:f9:58:03:85:d8:e4:04:e4:2d:98:f8:c4:c3:20:cd:6f:11: 8e:57:b4:05:95:83:66:f1:5a:56:e7:24:59:74:28:19:f7:9c: a8:f8:72:37:75:ff:9a:b9:b4:d5:5e:cd:9f:a4:9c:07:e8:53: 72:51:f6:b4:b7:08:13:dc:ca:13:28:dc:9f:f4:ac:89:76:b1: 6f:0c:b6:f6:33:7d:aa:6d:77:58:64:c1:d5:ac:23:49:e1:2d: 91:be:3a:73:22:59:3f:6e:30:72:f9:9e:aa:da:23:20:3d:78: 04:45:0d:65:d2:5c:5a:91:29:e8:a4:73:1b:52:c1:81:3c:17: 9a:52:b1:d8:24:5d:52:9c:2b:d8:be:5e:8e:ce:b1:3b:de:6d: 19:a3:b6:db:a7:3a:36:70:74:2b:43:61:56:c5:6d:f8:ef:f5: f0:46:eb:1f:d8:2c:82:3f:1c:4b:02:96:c2:db:d2:f4:b5:ab: 69:32:4b:3e:2f:67:50:69:8d:48:03:28:25:2c:8b:f3:6c:9d: 5f:72:7e:c8:84:6f:f3:0d:af:f4:36:05:ae:f7:51:9f:fe:32: 30:8c:30:fd:85:04:37:a0:18:6f:ff:73:1f:6e:1c:87:9f:b1: 3d:a6:6c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEo1SYLZDosTFc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjVkY2QxYzAtNzg2Ny00ZjBhLTkwYjctMTQyNzcwMzZlMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7vyditjU0mteg14hJ9TneHpl/Dm7kqn5KS 7a7q6yWCndd52KGkRtU2acNSf3AcV3zxC3zcw46xw13UlSRJt1udVqcJxPBrycuk hyeUC7WNrx6RHum/4IhAbYBW5u2h0Ivey6gUmyBsP89x51UaGwtEPaxuIo/TJ+Ce yBc2YdeArmQD/tQOalduzOoaxe/kHP7TO8DER1Xesnp/pyDG7ZVem/2NLXks8feQ SeWRpY9DRLnYEfkhDQLVPbxb7M6cRbjRE0A+sIKotyjQVk3A7/352hzaNT9kLrV5 uvsNr6/oRZsQ6gMfCxDF5FfZHe4X56/RnC/gn3vMRhkaL28bgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZl9QN8e31sMKQFhxd9JblvGTRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2RmNjU0YzgtMDU1My0z OGE0LTlhZTUtNWJmMjU3NjY4YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxOee0PHjPIv6iGY0r0mfHrvqL5WAOF2OQE5C2Y+MTDIM1vEY5XtAWV g2bxWlbnJFl0KBn3nKj4cjd1/5q5tNVezZ+knAfoU3JR9rS3CBPcyhMo3J/0rIl2 sW8MtvYzfaptd1hkwdWsI0nhLZG+OnMiWT9uMHL5nqraIyA9eARFDWXSXFqRKeik cxtSwYE8F5pSsdgkXVKcK9i+Xo7OsTvebRmjttunOjZwdCtDYVbFbfjv9fBG6x/Y LII/HEsClsLb0vS1q2kySz4vZ1BpjUgDKCUsi/NsnV9yfsiEb/MNr/Q2Ba73UZ/+ MjCMMP2FBDegGG//cx9uHIefsT2mbMs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:43 2026 by rpki-client