$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f952ab68-acd1-31d1-a740-d4885a88bd3d.roa File: f952ab68-acd1-31d1-a740-d4885a88bd3d.roa (raw, json) Hash identifier: D4UDhDbdvea5D/yDN08T3NgXlHhCEiYTp64/K3bW/RM= Subject key identifier: 67:95:27:9A:3E:18:0E:BC:03:97:1B:0C:3B:AF:FD:9D:C2:52:AC:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912935BEEEEA564CC8A4000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f952ab68-acd1-31d1-a740-d4885a88bd3d.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397241 IP address blocks: 156.154.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:93:5b:ee:ee:a5:64:cc:8a:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=94f3c403-d9ec-4d5b-a0d1-6dfb6d72b370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:2d:36:56:6d:e9:22:a8:92:6b:fd:6c:8f: ab:11:68:e4:43:91:86:54:74:1b:09:65:59:c1:cb: da:69:05:77:56:75:9f:7e:e8:9c:95:36:0f:98:77: a6:42:fe:48:97:b2:ef:56:80:13:7c:1b:77:8d:6b: 93:98:d3:55:9d:73:40:db:2c:e3:b5:a3:8e:6c:0b: 7a:2a:63:98:ac:99:88:c7:54:c8:09:6e:79:e4:b9: 38:d1:99:d5:d5:dd:e5:7f:63:85:74:ca:42:2e:b2: 28:e8:4d:e9:45:1c:1c:11:44:74:2f:25:30:a3:b4: e4:9b:3d:f3:42:6a:a1:77:ca:ad:0d:8b:63:ec:9d: 58:b7:5d:8e:fb:91:e4:0c:9e:6a:91:ab:e9:66:0a: 39:f0:42:c7:6a:45:f8:d3:22:53:9f:9d:37:95:f8: 69:b6:bd:3d:cc:ae:c1:2b:ae:40:3f:6d:d4:9e:ac: 8b:50:22:92:95:9e:43:fc:dc:75:fa:90:d2:7b:08: e5:8e:bc:7c:7b:85:5d:bf:54:c8:cf:8c:ff:b9:1c: 3d:d6:cc:0e:23:ac:c0:3f:2d:8d:c8:f5:2b:9f:ea: 11:c8:45:51:d2:bc:ef:12:36:02:d8:e2:c5:eb:97: 98:8a:dc:ad:89:ac:b7:2a:52:56:fc:e3:e8:b3:e4: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:27:9A:3E:18:0E:BC:03:97:1B:0C:3B:AF:FD:9D:C2:52:AC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f952ab68-acd1-31d1-a740-d4885a88bd3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d5:16:66:fa:5f:e6:e8:99:4f:92:45:5d:57:4a:ed:fc:c6: 5d:57:93:ad:5b:fa:ef:91:f3:75:4b:d9:55:0a:9e:b3:e9:8f: a7:6f:a1:11:bd:8c:0a:9a:87:e1:a8:e7:ba:91:ff:0b:04:81: a5:a4:35:17:d6:68:73:92:e8:44:15:2e:a2:29:16:dd:e8:91: dd:68:94:c0:53:52:1c:80:44:5a:90:1d:f4:02:42:ac:14:1a: 20:da:3e:54:2e:b7:a7:60:84:c3:e6:1c:bd:a1:48:69:de:7f: a7:c3:6b:f6:a5:23:80:85:5b:d6:22:bd:72:d4:42:01:f3:ea: b1:34:15:19:24:ae:d6:c7:0d:12:9f:60:b9:39:41:46:50:9b: 48:4d:06:65:c6:b6:08:32:e8:7b:82:8e:e5:1d:58:b2:7d:dd: 73:12:8b:60:ca:5f:08:db:b7:b8:9e:8a:82:ae:38:00:39:67: 76:eb:21:0c:42:83:ba:30:9d:e1:15:d6:d9:53:cf:8d:43:46: 64:8a:62:8c:6c:1e:b8:83:17:40:95:8d:78:b2:f3:35:7c:91: a6:a6:a7:45:50:37:e6:08:e0:e0:41:dd:48:44:81:21:8a:4d: 45:3f:49:c6:25:ff:fb:30:46:e6:cb:3a:64:cd:87:57:69:4d: 66:ee:a8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpNb7u6lZMyKQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTRmM2M0MDMtZDllYy00ZDViLWEwZDEtNmRmYjZkNzJiMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHQtNlZt6SKokmv9bI+rEWjkQ5GGVHQbCWVZ wcvaaQV3VnWffuiclTYPmHemQv5Il7LvVoATfBt3jWuTmNNVnXNA2yzjtaOObAt6 KmOYrJmIx1TICW555Lk40ZnV1d3lf2OFdMpCLrIo6E3pRRwcEUR0LyUwo7Tkmz3z Qmqhd8qtDYtj7J1Yt12O+5HkDJ5qkavpZgo58ELHakX40yJTn503lfhptr09zK7B K65AP23UnqyLUCKSlZ5D/Nx1+pDSewjljrx8e4Vdv1TIz4z/uRw91swOI6zAPy2N yPUrn+oRyEVR0rzvEjYC2OLF65eYitytiay3KlJW/OPos+QKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeVJ5o+GA68A5cbDDuv/Z3CUqxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjk1MmFiNjgtYWNkMS0z MWQxLWE3NDAtZDQ4ODVhODhiZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfVFmb6X+bomU+SRV1XSu38xl1Xk61b+u+R83VL2VUKnrPpj6dvoRG9 jAqah+Go57qR/wsEgaWkNRfWaHOS6EQVLqIpFt3okd1olMBTUhyARFqQHfQCQqwU GiDaPlQut6dghMPmHL2hSGnef6fDa/alI4CFW9YivXLUQgHz6rE0FRkkrtbHDRKf YLk5QUZQm0hNBmXGtggy6HuCjuUdWLJ93XMSi2DKXwjbt7ieioKuOAA5Z3brIQxC g7owneEV1tlTz41DRmSKYoxsHriDF0CVjXiy8zV8kaamp0VQN+YI4OBB3UhEgSGK TUU/ScYl//swRubLOmTNh1dpTWbuqLQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:06:45 2026 by rpki-client