$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db0b0fb1-c9a2-3e08-a838-b1dae8bb358f.roa File: db0b0fb1-c9a2-3e08-a838-b1dae8bb358f.roa (raw, json) Hash identifier: 4PNV337ygfPSHsh9IHNE99oc/Qs1iDN0lrrwsV5ZfJY= Subject key identifier: 86:50:08:D3:F4:D0:C8:42:BE:A3:09:FF:48:B7:38:B4:01:44:C6:14 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A3CE28769DBF5D9A60480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db0b0fb1-c9a2-3e08-a838-b1dae8bb358f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397241 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:3c:e2:87:69:db:f5:d9:a6:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4da4d6ec-3433-43d0-bbda-e1579bab2858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:b4:01:35:f4:05:fe:9d:e8:f6:5b:f0:f2: 8c:27:bb:ef:28:a5:23:24:93:ac:f8:fd:ca:03:5d: 94:a0:be:41:e5:c3:54:cd:7d:e4:9b:35:63:1f:68: 0f:0c:e2:69:4c:8d:c0:8a:62:d4:99:3d:79:90:16: cb:09:45:df:b6:7e:15:3d:8d:d4:90:ee:b0:9a:8f: 54:4e:29:f0:cb:78:6e:48:f3:e8:48:7e:2a:bb:d6: 5c:4c:cd:a7:6c:27:28:4b:ba:67:27:11:03:8c:d8: 1a:80:c1:55:9e:05:eb:51:94:48:c2:4f:00:21:5d: e0:10:69:d7:12:86:22:8e:96:bb:6e:fe:8d:ba:c0: 6f:fb:00:f4:66:e7:a9:e9:67:12:b7:b7:06:72:02: b8:1e:fa:f4:75:f5:cc:80:7f:63:78:48:c4:5e:c4: 47:6b:33:6c:a2:66:81:0d:08:74:10:db:68:b5:f0: 31:00:b9:f8:e5:cd:a1:26:2e:9a:d8:83:23:e9:6a: a7:e0:c4:55:8a:51:17:7b:a0:6a:91:e4:34:4c:e5: 63:6f:eb:1f:7a:69:2b:e8:b9:98:65:96:7f:84:99: a8:6e:c8:1b:f5:e1:e4:be:7d:a5:da:ae:a8:c8:b0: 65:ed:2b:e9:6c:4a:dc:06:57:6f:09:5d:dd:50:70: c0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:50:08:D3:F4:D0:C8:42:BE:A3:09:FF:48:B7:38:B4:01:44:C6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db0b0fb1-c9a2-3e08-a838-b1dae8bb358f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ba:11:0d:bf:b2:6e:e4:a7:9f:47:15:3f:8e:1d:02:bc:db: fe:b9:aa:4f:f4:76:f5:d2:de:a9:5c:f8:06:d3:f8:ed:1c:13: 7f:41:98:aa:e6:48:9f:8c:1f:67:1f:4a:3d:8b:83:4a:9a:cc: 05:5f:66:47:18:71:34:21:16:c6:fa:57:88:e1:b1:9f:71:b7: c1:d5:10:fe:b1:15:b2:67:14:18:42:17:12:cd:67:f3:5d:49: 92:80:ca:00:03:68:6d:ad:35:30:0f:81:c7:2e:25:44:18:d2: d2:4d:8f:20:4e:86:b7:de:b8:c3:d3:a9:86:73:26:41:16:b7: 6d:d5:c1:b2:78:dd:ba:fd:3b:f5:a4:b1:ed:9b:02:ae:1a:8e: 19:28:9c:c9:68:6b:b3:26:60:e8:6c:a6:76:35:cd:87:3f:dc: 7e:d5:0a:c8:d1:a2:30:f1:c6:84:74:ba:03:32:11:82:d3:27: db:91:08:5e:0d:52:82:af:4d:53:bd:7a:ef:fd:2b:a3:87:58: e3:f4:05:cf:f6:5d:17:a0:99:31:b3:82:ad:9e:a6:9f:35:f3: db:10:b1:20:db:37:fd:e6:85:84:c7:e4:23:04:97:37:f8:79: e3:44:14:d8:83:7d:30:ec:b8:6b:23:6d:50:ad:fc:f8:25:46: 13:18:ea:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGjzih2nb9dmmBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGRhNGQ2ZWMtMzQzMy00M2QwLWJiZGEtZTE1NzliYWIyODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ20ATX0Bf6d6PZb8PKMJ7vvKKUjJJOs+P3K A12UoL5B5cNUzX3kmzVjH2gPDOJpTI3AimLUmT15kBbLCUXftn4VPY3UkO6wmo9U Tinwy3huSPPoSH4qu9ZcTM2nbCcoS7pnJxEDjNgagMFVngXrUZRIwk8AIV3gEGnX EoYijpa7bv6NusBv+wD0Zuep6WcSt7cGcgK4Hvr0dfXMgH9jeEjEXsRHazNsomaB DQh0ENtotfAxALn45c2hJi6a2IMj6Wqn4MRVilEXe6BqkeQ0TOVjb+sfemkr6LmY ZZZ/hJmobsgb9eHkvn2l2q6oyLBl7SvpbErcBldvCV3dUHDAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZQCNP00MhCvqMJ/0i3OLQBRMYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGIwYjBmYjEtYzlhMi0z ZTA4LWE4MzgtYjFkYWU4YmIzNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+6EQ2/sm7kp59HFT+OHQK82/65qk/0dvXS3qlc+AbT+O0cE39BmKrm SJ+MH2cfSj2Lg0qazAVfZkcYcTQhFsb6V4jhsZ9xt8HVEP6xFbJnFBhCFxLNZ/Nd SZKAygADaG2tNTAPgccuJUQY0tJNjyBOhrfeuMPTqYZzJkEWt23VwbJ43br9O/Wk se2bAq4ajhkonMloa7MmYOhspnY1zYc/3H7VCsjRojDxxoR0ugMyEYLTJ9uRCF4N UoKvTVO9eu/9K6OHWOP0Bc/2XRegmTGzgq2epp8189sQsSDbN/3mhYTH5CMElzf4 eeNEFNiDfTDsuGsjbVCt/PglRhMY6kk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:25 2026 by rpki-client