$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa File: d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa (raw, json) Hash identifier: Hqohu3GKnhMXrRBKYvWIYs6FOp9dyIgZ2T1gsB7SjO0= Subject key identifier: D2:F3:F1:CB:66:3F:DC:87:90:E3:C6:F2:3E:D6:7F:5A:EA:24:1A:CF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D3DFF8FEE49A240D906FC1080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 12008 IP address blocks: 156.154.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8f:ee:49:a2:40:d9:06:fc:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2c309f6f-5438-411a-a52b-5c6f2034d49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:d1:f6:22:df:02:74:8b:0c:e3:94:11:54: 6f:a1:15:7a:62:b7:3e:77:11:a4:1f:6d:ab:1e:28: 48:33:8f:8c:ca:d2:e5:ff:f9:ed:39:7a:10:ae:25: 7a:48:ea:ea:96:1c:fa:9b:89:4b:f2:9d:9b:cf:00: 20:13:ec:cc:96:c4:00:0f:db:e0:d2:ad:60:fe:37: ae:14:ea:e1:9b:1e:65:f0:8a:af:e5:08:e8:1a:eb: 7d:55:f9:10:ba:db:b4:a9:ab:53:52:3b:a9:c9:cd: 42:c7:ef:0b:cd:46:2d:2d:28:50:eb:e3:18:1d:9b: 7c:ce:50:27:41:00:4b:1e:d6:e9:2f:cb:86:f9:89: 8f:25:9c:25:dc:6a:84:af:0c:26:40:8c:d2:bd:37: fb:da:f0:24:2e:88:cc:f8:ae:19:2a:52:4b:70:46: 8b:73:a3:1a:0a:6c:53:30:ba:fc:38:01:7b:08:8a: e2:b4:cd:1a:4a:9c:3b:2f:36:d0:d0:e5:ef:93:93: 79:b1:21:70:d2:cd:3a:4d:58:72:d0:bc:b3:ef:d1: 0b:32:8a:65:60:2c:68:af:04:ae:2e:95:91:1c:d8: 1b:8c:11:93:b3:e8:9b:dc:02:9f:4f:f1:24:32:ff: 3b:18:9a:af:8b:a9:5d:c1:91:91:e1:37:36:6d:8a: 72:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F3:F1:CB:66:3F:DC:87:90:E3:C6:F2:3E:D6:7F:5A:EA:24:1A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d05962a7-fe0c-3799-83d7-0d90f65b81b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:18:e4:ff:c2:33:4c:8c:17:19:09:0a:4b:e9:03:4b:53:46: 04:5a:4c:0f:d1:ee:a4:2b:0b:e1:75:47:de:b5:87:41:56:6f: 24:be:78:08:72:6e:aa:72:44:6e:29:0b:38:0e:6a:09:ce:ca: f8:38:1d:6a:6f:0c:25:83:e6:62:65:3d:e5:b1:b6:e8:bb:ed: 7e:50:4d:7e:b9:c3:21:5f:fd:87:6c:68:28:cd:94:76:41:55: 5d:e8:1e:eb:7e:9d:b9:68:c0:61:ff:38:8c:73:24:74:36:b4: 93:b0:81:9c:23:5c:4e:c5:86:91:dd:e8:1b:0c:ce:f7:92:28: bb:1b:d1:d6:0b:75:26:e2:e4:94:46:8e:31:71:0f:7d:bf:ed: 37:ae:9a:7e:0a:4f:1d:95:a0:a7:ad:31:47:90:52:53:9f:48: 13:5e:aa:66:1e:54:67:a0:a2:0a:4b:a3:6f:8c:83:4d:9e:b5: b7:32:d8:57:22:68:a9:80:8a:55:23:41:0d:98:f9:69:3e:ce: 9b:da:0f:1d:51:f2:48:c5:f6:47:d1:b4:3a:78:5e:0f:c9:9f: db:b2:96:96:df:5a:08:07:dd:b4:59:14:eb:66:ea:46:e0:4c: 07:5d:c4:60:ac:24:29:1c:71:95:d7:77:fb:be:54:7c:04:ba: 58:65:1e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4/uSaJA2Qb8EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmMzMDlmNmYtNTQzOC00MTFhLWE1MmItNWM2ZjIwMzRkNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRfR9iLfAnSLDOOUEVRvoRV6Yrc+dxGkH22r HihIM4+MytLl//ntOXoQriV6SOrqlhz6m4lL8p2bzwAgE+zMlsQAD9vg0q1g/jeu FOrhmx5l8Iqv5QjoGut9VfkQutu0qatTUjupyc1Cx+8LzUYtLShQ6+MYHZt8zlAn QQBLHtbpL8uG+YmPJZwl3GqErwwmQIzSvTf72vAkLojM+K4ZKlJLcEaLc6MaCmxT MLr8OAF7CIritM0aSpw7LzbQ0OXvk5N5sSFw0s06TVhy0Lyz79ELMoplYCxorwSu LpWRHNgbjBGTs+ib3AKfT/EkMv87GJqvi6ldwZGR4Tc2bYpyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLz8ctmP9yHkOPG8j7Wf1rqJBrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDA1OTYyYTctZmUwYy0z Nzk5LTgzZDctMGQ5MGY2NWI4MWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4Y5P/CM0yMFxkJCkvpA0tTRgRaTA/R7qQrC+F1R961h0FWbyS+eAhy bqpyRG4pCzgOagnOyvg4HWpvDCWD5mJlPeWxtui77X5QTX65wyFf/YdsaCjNlHZB VV3oHut+nblowGH/OIxzJHQ2tJOwgZwjXE7FhpHd6BsMzveSKLsb0dYLdSbi5JRG jjFxD32/7Teumn4KTx2VoKetMUeQUlOfSBNeqmYeVGegogpLo2+Mg02etbcy2Fci aKmAilUjQQ2Y+Wk+zpvaDx1R8kjF9kfRtDp4Xg/Jn9uylpbfWggH3bRZFOtm6kbg TAddxGCsJCkccZXXd/u+VHwEulhlHnw= -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:03 2026 by rpki-client