$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa File: e251b681-fca9-30e4-8790-5ca9cd66992e.roa (raw, json) Hash identifier: 0IvVDvLOw5tm1kdHdMegQy3kuIS+DrtC2S2bxrB6vy0= Subject key identifier: A9:EB:6B:8A:3F:96:66:4C:7C:F2:1C:3D:5D:3C:95:D9:BD:65:11:4C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09128A4CCC394FF93BF74B20 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397231 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:8a:4c:cc:39:4f:f9:3b:f7:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=1a2f22cd-dd36-4109-b47b-84225222e4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0a:a4:83:8c:3a:f5:11:b9:72:35:26:36:f0: cf:32:f3:0e:9a:b2:1d:bf:38:e4:a7:ad:da:0f:2f: 6c:29:97:e7:e1:ab:04:15:e2:0d:a0:26:20:a5:5f: 35:38:5e:92:18:1d:e3:2d:38:d4:36:19:0a:40:e6: 0e:3e:1d:87:d3:a0:d1:86:bc:ca:e0:b4:ad:15:31: 4b:79:97:1c:2f:39:34:f0:de:83:2a:d2:75:ff:3f: 41:44:9f:40:39:4f:b9:b8:87:50:dc:79:3f:5e:5d: 35:f7:1e:1b:40:41:fb:4d:0c:11:98:31:dd:c8:b8: 3c:df:d7:6c:83:86:ba:ea:0a:2e:7c:bc:0c:42:19: 51:d5:18:58:cb:4a:bc:a2:37:d6:7c:ea:18:89:a1: a7:0a:9e:d3:c8:50:b5:0c:0e:cf:73:49:1d:0c:02: c1:72:d9:c0:e7:f4:de:63:78:d3:67:56:e6:49:9c: e8:e6:6c:18:af:2b:e6:b9:56:52:1b:38:5d:6c:b6: 8f:46:ec:1e:76:48:d5:77:64:6f:60:f3:a0:b5:56: 6a:f8:6d:7f:ee:ba:6c:57:e3:50:21:0c:94:ae:a0: 9d:cc:7a:2e:54:da:d9:3e:d4:cf:e3:b8:81:1f:e3: b5:a7:7e:bd:9a:a0:f1:9b:1e:c0:13:3d:bb:dd:ed: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EB:6B:8A:3F:96:66:4C:7C:F2:1C:3D:5D:3C:95:D9:BD:65:11:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e251b681-fca9-30e4-8790-5ca9cd66992e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:48:d6:25:22:5f:82:76:39:70:09:a9:96:5d:13:e3:e6:f2: 0c:f6:d4:cb:75:f2:b9:9b:ca:fe:97:5b:f1:3b:d4:6a:ca:61: 6c:7b:34:66:d2:f9:c9:91:ef:d5:09:ae:00:51:f0:75:6f:6a: 12:51:02:49:87:fb:45:bd:b0:25:64:31:79:03:09:e6:e6:f9: ce:57:b7:fa:45:2a:0f:29:1c:98:f1:02:dc:70:7e:f0:f9:cc: ad:10:d6:9c:89:f6:37:d4:71:15:ea:1a:48:43:88:45:3c:86: 1c:78:e2:6e:c2:78:ca:96:d7:d6:c8:1e:cb:e6:5f:da:43:fe: 4d:b1:85:9e:e0:d9:8a:4d:f1:1f:91:5f:7d:77:17:14:18:a2: 01:dc:54:d9:61:e1:a9:93:eb:de:6a:90:db:5d:81:e9:0d:89: fd:f5:8a:83:39:d4:b9:89:46:05:e1:13:8c:ac:90:b3:45:96: 0b:64:1c:72:21:58:1b:4a:4e:5f:d9:b6:5e:78:1b:0f:97:94: ee:7f:1c:e0:8c:5f:5a:5f:18:5b:41:4c:f9:7a:95:22:7d:15: 6e:e9:08:c6:f7:d2:3f:c1:eb:30:af:49:05:26:d3:e1:03:6f: 13:00:a2:d8:76:1d:5f:ec:56:c3:54:8c:9e:16:0e:48:6e:9e: 1e:6a:5b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEopMzDlP+Tv3SyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWEyZjIyY2QtZGQzNi00MTA5LWI0N2ItODQyMjUyMjJlNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgqkg4w69RG5cjUmNvDPMvMOmrIdvzjkp63a Dy9sKZfn4asEFeINoCYgpV81OF6SGB3jLTjUNhkKQOYOPh2H06DRhrzK4LStFTFL eZccLzk08N6DKtJ1/z9BRJ9AOU+5uIdQ3Hk/Xl019x4bQEH7TQwRmDHdyLg839ds g4a66goufLwMQhlR1RhYy0q8ojfWfOoYiaGnCp7TyFC1DA7Pc0kdDALBctnA5/Te Y3jTZ1bmSZzo5mwYryvmuVZSGzhdbLaPRuwedkjVd2RvYPOgtVZq+G1/7rpsV+NQ IQyUrqCdzHouVNrZPtTP47iBH+O1p369mqDxmx7AEz273e0UpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnra4o/lmZMfPIcPV08ldm9ZRFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTI1MWI2ODEtZmNhOS0z MGU0LTg3OTAtNWNhOWNkNjY5OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtI1iUiX4J2OXAJqZZdE+Pm8gz21Mt18rmbyv6XW/E71GrKYWx7NGbS +cmR79UJrgBR8HVvahJRAkmH+0W9sCVkMXkDCebm+c5Xt/pFKg8pHJjxAtxwfvD5 zK0Q1pyJ9jfUcRXqGkhDiEU8hhx44m7CeMqW19bIHsvmX9pD/k2xhZ7g2YpN8R+R X313FxQYogHcVNlh4amT695qkNtdgekNif31ioM51LmJRgXhE4yskLNFlgtkHHIh WBtKTl/Ztl54Gw+XlO5/HOCMX1pfGFtBTPl6lSJ9FW7pCMb30j/B6zCvSQUm0+ED bxMAoth2HV/sVsNUjJ4WDkhunh5qWz4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:31 2026 by rpki-client