$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa File: de2102d6-30e1-30c4-bde1-407cdd90a778.roa (raw, json) Hash identifier: Qoku9/njtT51mC2E+Nd8HSRSOml01bzKrnHQYTrTfgY= Subject key identifier: 63:F2:F6:9D:0C:11:96:74:9D:5C:AB:D8:C2:FA:4D:23:2A:46:E7:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A480BEA3204F21971FB80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397221 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:48:0b:ea:32:04:f2:19:71:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=f3ad89e4-862c-435f-a186-d22e981a6c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:25:7f:b2:9a:b1:bb:59:6c:fe:84:96:4d:74: 58:94:59:b1:52:10:91:7f:d6:68:82:b9:01:78:55: ca:90:6e:44:ea:14:7c:56:c8:03:a9:7a:c1:08:e0: b2:ce:cc:76:e2:4e:09:c1:7e:34:50:b7:db:d7:02: b8:d2:8e:ac:be:94:66:e2:88:f2:92:13:f9:94:68: f0:3f:92:52:4c:51:5b:c7:60:b2:a4:38:77:d6:ef: 5c:0e:1a:98:09:83:f8:04:60:83:75:89:96:52:1e: f8:bb:a7:05:f4:dc:25:8e:66:b3:fb:3a:34:62:3b: a6:e4:d3:3e:5d:70:5d:45:6c:4e:6e:93:88:82:81: 61:06:20:8f:18:0d:3b:29:82:26:fb:13:31:d2:c2: 28:af:48:5f:28:9b:5d:6b:d7:cf:60:73:9f:f5:e2: f8:26:38:44:0a:a7:84:27:8f:04:96:cb:82:4d:40: e5:11:50:ec:d3:16:50:bb:9b:8a:44:2a:7f:13:1a: b2:ab:59:06:7a:de:ad:16:0b:09:46:88:52:14:22: 2a:2d:35:f5:a8:d1:37:4b:12:42:45:87:da:cb:fa: 5a:d7:f8:5c:4e:85:78:38:e3:5e:c2:e8:9b:8e:87: 75:91:5b:46:2e:3c:2f:dd:a1:f8:6b:6f:5f:18:d3: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F2:F6:9D:0C:11:96:74:9D:5C:AB:D8:C2:FA:4D:23:2A:46:E7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2102d6-30e1-30c4-bde1-407cdd90a778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:95:de:eb:da:26:e3:6b:73:3a:3c:17:55:da:ad:33:2d:72: 61:1f:f6:16:ea:c0:76:06:43:ad:74:73:82:a2:7c:db:0f:ea: ee:80:4a:f8:2d:85:35:45:ff:4e:b6:25:cf:74:cb:78:a7:87: c4:cd:d3:29:5a:e1:9e:9a:69:9b:22:d5:5b:c1:1a:3d:da:61: 97:8e:ac:f3:e3:7a:b1:75:c9:7d:36:70:33:11:62:43:28:a5: 0f:36:50:2b:8d:1e:34:ea:6b:ef:77:fa:19:bd:56:dd:fb:33: f9:e4:4e:2c:5e:63:db:52:1c:1d:72:e5:f2:da:4f:51:24:3b: c1:94:ca:b5:89:5a:1d:f7:ce:92:69:c6:8c:67:2d:ce:80:f5: 4f:51:b6:e1:a7:32:12:96:ef:62:77:6e:66:a8:72:b8:67:6c: 9f:be:94:ba:38:88:67:07:9e:40:e1:7b:80:4e:0d:96:dc:9f: 4f:4e:84:1c:dd:bd:a1:5c:c2:19:b8:81:90:37:27:c8:8a:c5: bc:9e:1b:14:87:ee:fc:7a:c5:d3:5d:6f:5d:e8:94:91:c1:90: ef:ce:89:80:67:67:b7:e7:56:e7:dc:66:56:98:1f:a8:05:46: 41:de:e2:e7:4d:c8:17:33:b3:b9:a8:b1:54:ea:de:c0:79:54: a7:44:ac:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkgL6jIE8hlx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZjNhZDg5ZTQtODYyYy00MzVmLWExODYtZDIyZTk4MWE2YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCV/spqxu1ls/oSWTXRYlFmxUhCRf9ZogrkB eFXKkG5E6hR8VsgDqXrBCOCyzsx24k4JwX40ULfb1wK40o6svpRm4ojykhP5lGjw P5JSTFFbx2CypDh31u9cDhqYCYP4BGCDdYmWUh74u6cF9Nwljmaz+zo0Yjum5NM+ XXBdRWxObpOIgoFhBiCPGA07KYIm+xMx0sIor0hfKJtda9fPYHOf9eL4JjhECqeE J48ElsuCTUDlEVDs0xZQu5uKRCp/Exqyq1kGet6tFgsJRohSFCIqLTX1qNE3SxJC RYfay/pa1/hcToV4OONewuibjod1kVtGLjwv3aH4a29fGNMjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPy9p0MEZZ0nVyr2ML6TSMqRucMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUyMTAyZDYtMzBlMS0z MGM0LWJkZTEtNDA3Y2RkOTBhNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOV3uvaJuNrczo8F1XarTMtcmEf9hbqwHYGQ610c4KifNsP6u6ASvgt hTVF/062Jc90y3inh8TN0yla4Z6aaZsi1VvBGj3aYZeOrPPjerF1yX02cDMRYkMo pQ82UCuNHjTqa+93+hm9Vt37M/nkTixeY9tSHB1y5fLaT1EkO8GUyrWJWh33zpJp xoxnLc6A9U9RtuGnMhKW72J3bmaocrhnbJ++lLo4iGcHnkDhe4BODZbcn09OhBzd vaFcwhm4gZA3J8iKxbyeGxSH7vx6xdNdb13olJHBkO/OiYBnZ7fnVufcZlaYH6gF RkHe4udNyBczs7mosVTq3sB5VKdErCM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:44 2026 by rpki-client