$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa File: cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa (raw, json) Hash identifier: 6qJqtO6PiHlbo3F7d6VxvLLJoNxwoktj5KiUZrQNiEs= Subject key identifier: D1:6A:EB:49:D6:13:C9:81:6C:EB:23:F2:F1:E3:2E:47:98:9F:02:EC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4A39BDEF178396D74540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397221 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4a:39:bd:ef:17:83:96:d7:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a6fc37da-c988-4389-b01e-66a43315dac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:bf:ba:74:a3:af:ba:38:de:b6:15:37:cf: b0:98:88:ef:31:87:5a:58:0e:a4:e6:4b:06:6a:0a: 61:c7:c4:d6:fe:68:69:5e:96:b0:da:7b:6e:8b:46: ef:80:2f:c2:bb:f7:4d:70:fe:4c:ae:1e:39:0d:f3: ce:c9:ea:33:c7:29:ae:3c:86:d7:af:19:a9:2e:f7: 86:67:48:d0:62:77:4e:a6:71:9a:d8:9f:3f:89:01: b1:2f:18:f8:b1:12:54:ad:62:5b:ef:8d:70:21:ff: e4:b0:cb:8e:cc:06:18:de:0c:2a:ed:a6:c6:d5:75: ca:bd:28:29:20:a8:5c:08:a6:28:63:d6:55:e6:f3: dd:0f:dc:cc:49:14:cb:88:65:d9:3d:74:0f:e9:c2: 80:fd:98:1c:b0:9b:be:53:dc:58:1c:fb:12:f9:32: 10:3c:c4:b5:6a:42:60:1d:51:c9:c5:d0:55:a9:5e: 36:8a:57:40:49:8f:d4:09:ae:29:96:d1:ed:d9:6c: eb:25:01:d8:20:50:f9:b0:85:d9:e4:82:91:f1:bc: c0:65:5b:b1:fa:d8:db:6b:61:5a:d1:37:72:8a:6a: ec:c9:2a:4f:1d:a9:d0:c8:ba:dc:7f:bc:53:7e:71: dd:5a:75:35:82:c7:50:97:f6:98:12:20:df:63:fd: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:EB:49:D6:13:C9:81:6C:EB:23:F2:F1:E3:2E:47:98:9F:02:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfe95d7a-3e80-3677-91cd-8f3924e226f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c0:43:ed:3a:cc:f4:63:d6:40:b9:c6:42:b6:3d:a1:89:f5: 72:4b:52:e3:be:c4:d5:b0:16:ca:b3:21:42:61:1e:22:67:a8: 20:5b:14:fa:39:64:b5:2d:36:db:fa:b9:2c:76:f3:f4:0b:f6: d6:c8:55:bc:c2:69:d8:03:e9:84:7b:c3:3d:03:90:9d:ff:59: 14:77:54:1e:12:e2:08:82:eb:8a:3f:31:92:71:9a:cc:76:fe: 17:5c:2a:be:a0:08:d9:08:e6:09:74:18:d1:19:41:73:9b:60: 01:67:5f:6d:ec:87:10:f4:2c:2e:f5:0c:c6:48:6d:3d:0a:5a: 12:1b:2d:7a:b7:46:8d:a8:35:6d:30:d3:bf:82:49:f3:b9:7c: d4:a5:79:81:fe:c4:c2:dc:f2:58:00:8f:03:e3:a0:0b:55:19: ab:14:58:a6:f7:ff:81:a9:fc:94:64:a8:ff:3d:bb:14:8f:c0: 98:01:89:17:bb:4f:a6:fb:74:f1:ab:b4:63:02:77:80:58:69: 22:e7:38:9e:97:03:d6:b6:cd:83:e9:87:c0:6f:45:ad:87:08: ce:9b:92:f1:07:c4:7b:40:2c:32:9a:62:a8:83:ee:57:86:a4: ff:2a:4e:a6:bf:f6:06:5e:e9:ce:ca:d9:27:49:ca:05:67:b2: ff:38:61:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGko5ve8Xg5bXRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YTZmYzM3ZGEtYzk4OC00Mzg5LWIwMWUtNjZhNDMzMTVkYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5m/unSjr7o43rYVN8+wmIjvMYdaWA6k5ksG agphx8TW/mhpXpaw2ntui0bvgC/Cu/dNcP5Mrh45DfPOyeozxymuPIbXrxmpLveG Z0jQYndOpnGa2J8/iQGxLxj4sRJUrWJb741wIf/ksMuOzAYY3gwq7abG1XXKvSgp IKhcCKYoY9ZV5vPdD9zMSRTLiGXZPXQP6cKA/ZgcsJu+U9xYHPsS+TIQPMS1akJg HVHJxdBVqV42ildASY/UCa4pltHt2WzrJQHYIFD5sIXZ5IKR8bzAZVux+tjba2Fa 0TdyimrsySpPHanQyLrcf7xTfnHdWnU1gsdQl/aYEiDfY/27ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFq60nWE8mBbOsj8vHjLkeYnwLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2ZlOTVkN2EtM2U4MC0z Njc3LTkxY2QtOGYzOTI0ZTIyNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzAQ+06zPRj1kC5xkK2PaGJ9XJLUuO+xNWwFsqzIUJhHiJnqCBbFPo5 ZLUtNtv6uSx28/QL9tbIVbzCadgD6YR7wz0DkJ3/WRR3VB4S4giC64o/MZJxmsx2 /hdcKr6gCNkI5gl0GNEZQXObYAFnX23shxD0LC71DMZIbT0KWhIbLXq3Ro2oNW0w 07+CSfO5fNSleYH+xMLc8lgAjwPjoAtVGasUWKb3/4Gp/JRkqP89uxSPwJgBiRe7 T6b7dPGrtGMCd4BYaSLnOJ6XA9a2zYPph8BvRa2HCM6bkvEHxHtALDKaYqiD7leG pP8qTqa/9gZe6c7K2SdJygVnsv84Yes= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:15 2026 by rpki-client