$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa File: ea85d689-f412-3ca9-8467-a0a4c846db6e.roa (raw, json) Hash identifier: 7Gije90aUICKjHMcDGqNrB5K3N8/2tgL+x3e5R7KnPI= Subject key identifier: B8:3C:61:EF:D2:E2:9F:A6:4E:38:94:6F:08:AF:FA:2C:0A:BE:0E:38 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A44E3A2CE01F9A3F36900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397237 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:44:e3:a2:ce:01:f9:a3:f3:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3b1a1924-d53d-4358-b7ee-59c673613e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:f1:b2:c3:9e:1b:d0:36:57:26:13:14:db: 41:52:79:92:ef:05:82:53:7c:95:44:2d:7f:58:b5: f8:38:fd:c8:81:4b:47:8f:f2:72:8a:07:b3:8c:0d: a7:27:8b:f3:5b:fa:54:5f:5f:9b:5c:ce:93:82:78: 9a:22:04:1d:32:6c:43:37:95:c9:1f:0a:e6:af:1b: 8a:f9:c4:b5:aa:51:e6:43:80:4b:04:43:d3:2a:b2: e2:d9:40:f5:55:bd:f6:a6:c1:ae:c0:fb:1a:fc:e8: c3:e2:a9:81:57:9c:27:96:96:f4:3d:7f:56:57:36: 08:19:6d:75:4d:4a:69:1e:c5:3d:34:30:ac:84:b3: 9c:93:99:a2:4c:8d:8b:bc:05:fe:e6:9a:34:a9:48: da:be:14:72:bf:a9:55:31:fb:33:67:b8:51:ca:c4: 0e:19:7c:46:8d:b8:42:5f:57:91:6e:ea:08:26:ac: db:ca:23:fe:3f:d9:c6:73:08:89:ca:c6:a5:a2:87: 71:87:d6:a3:4f:98:ae:d5:e7:81:89:a8:5a:53:3b: 90:30:03:c8:4e:f2:09:2a:f0:df:c2:cd:8b:50:7b: 71:18:2c:43:64:60:82:19:5e:af:b6:ac:56:f9:e2: 0b:92:ca:9b:86:f6:67:b2:dc:0c:e8:36:e8:e7:9e: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:61:EF:D2:E2:9F:A6:4E:38:94:6F:08:AF:FA:2C:0A:BE:0E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea85d689-f412-3ca9-8467-a0a4c846db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6d:97:19:3f:08:d9:e2:8e:63:a5:ac:45:4d:9b:51:8f:c4: 81:bd:ea:4b:c6:39:c3:02:c1:b3:77:7c:c9:5d:04:25:7d:07: d0:b2:a8:a0:1a:50:d6:d3:d0:0a:75:a8:f4:4b:8b:d0:00:f5: 3f:1f:14:ec:0b:aa:75:87:bc:d3:78:3b:bb:66:1f:49:d4:2b: 39:86:df:2d:cf:f2:83:77:25:e6:d5:12:67:ed:7e:7b:64:2d: aa:f1:4e:50:ee:6a:5d:b1:27:b6:dc:b7:ef:50:61:29:6d:2d: 7f:c4:fb:43:aa:f6:92:05:cc:5f:02:7d:53:48:28:3f:32:c9: 55:3d:00:3c:12:e6:38:81:b7:30:ac:e4:c4:dc:0e:e0:78:53: 16:b9:56:d9:d8:b3:56:65:7c:66:1f:db:c9:b0:af:35:7d:0b: 4c:2b:0d:ce:20:fc:55:d8:b8:d1:a5:01:6c:cf:09:3a:f8:03: 56:2f:bb:14:d0:36:2a:21:a7:15:fd:43:bd:1c:2b:63:d8:5e: d3:c4:93:c3:f0:5b:b8:77:ec:d8:8c:d5:80:ae:9e:f3:c5:10: f6:ad:08:f3:dc:f9:dd:53:3c:75:e9:c1:1d:b7:49:2e:66:bc: 1d:03:79:ca:1d:21:07:c6:63:b8:bd:b9:e6:0d:97:c6:9b:a6: 6d:3f:1c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGkTjos4B+aPzaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2IxYTE5MjQtZDUzZC00MzU4LWI3ZWUtNTljNjczNjEzZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPxssOeG9A2VyYTFNtBUnmS7wWCU3yVRC1/ WLX4OP3IgUtHj/JyigezjA2nJ4vzW/pUX1+bXM6TgniaIgQdMmxDN5XJHwrmrxuK +cS1qlHmQ4BLBEPTKrLi2UD1Vb32psGuwPsa/OjD4qmBV5wnlpb0PX9WVzYIGW11 TUppHsU9NDCshLOck5miTI2LvAX+5po0qUjavhRyv6lVMfszZ7hRysQOGXxGjbhC X1eRbuoIJqzbyiP+P9nGcwiJysaloodxh9ajT5iu1eeBiahaUzuQMAPITvIJKvDf ws2LUHtxGCxDZGCCGV6vtqxW+eILksqbhvZnstwM6Dbo557GbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg8Ye/S4p+mTjiUbwiv+iwKvg44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWE4NWQ2ODktZjQxMi0z Y2E5LTg0NjctYTBhNGM4NDZkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdtlxk/CNnijmOlrEVNm1GPxIG96kvGOcMCwbN3fMldBCV9B9CyqKAa UNbT0Ap1qPRLi9AA9T8fFOwLqnWHvNN4O7tmH0nUKzmG3y3P8oN3JebVEmftfntk LarxTlDual2xJ7bct+9QYSltLX/E+0Oq9pIFzF8CfVNIKD8yyVU9ADwS5jiBtzCs 5MTcDuB4Uxa5VtnYs1ZlfGYf28mwrzV9C0wrDc4g/FXYuNGlAWzPCTr4A1YvuxTQ NiohpxX9Q70cK2PYXtPEk8PwW7h37NiM1YCunvPFEPatCPPc+d1TPHXpwR23SS5m vB0DecodIQfGY7i9ueYNl8abpm0/HJU= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:23 2026 by rpki-client