$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa File: ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa (raw, json) Hash identifier: vbqrQ8rIvSP/S37YR6sEI9AB5ievJ3Q169Vhs4D4wmk= Subject key identifier: 73:80:60:9D:9F:F0:99:9B:03:B2:E8:76:89:D9:BD:51:56:F9:17:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A49D7135A239C6BB16100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397215 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:49:d7:13:5a:23:9c:6b:b1:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=8e812bdf-15b6-4647-9c04-b4fcf9aa0a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:a1:2d:aa:a9:57:3c:ca:b7:5a:21:e6:6f: d9:a6:3c:5b:8d:13:f1:69:af:c9:22:dc:0c:e9:e8: 99:a6:9d:4d:73:5a:83:27:00:c3:56:c2:c6:ba:a4: 30:5b:dc:f7:74:42:4e:31:89:dc:0b:a2:02:f9:d8: b6:8a:b1:e4:59:97:18:51:54:2f:b3:b8:02:bf:2d: e3:a7:45:6f:7f:d2:94:a5:d2:8b:44:33:97:70:ef: 80:17:72:ee:15:5f:2f:99:9d:a5:0c:9f:a4:eb:40: 3c:8d:85:51:a3:a7:3a:5b:30:d2:37:51:6a:d6:8e: ff:31:35:70:00:00:19:de:46:24:a0:40:0f:30:c9: 54:bc:c0:a5:e5:68:57:b8:83:8e:7b:09:2c:28:a8: 30:93:67:c7:bb:1a:42:ed:fc:68:01:54:44:fb:8a: 1f:11:29:bb:87:77:c6:4e:9c:20:de:fe:a8:b9:4d: 5b:23:a5:25:a0:ca:90:80:72:d6:22:d8:4e:04:a7: c4:c4:c6:f9:c0:10:8e:4d:4e:22:80:8a:4d:6d:1a: 22:3e:4b:b4:27:e8:65:96:30:5e:b3:12:ba:98:f2: 05:c4:62:d6:ad:b3:67:95:96:98:f1:b0:70:95:0a: 44:c1:dc:6a:fc:ce:4c:b2:5a:42:82:94:f9:02:a6: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:60:9D:9F:F0:99:9B:03:B2:E8:76:89:D9:BD:51:56:F9:17:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fd:13:c6:50:64:80:0c:ce:e2:b6:20:bd:6e:23:de:8c:b8: 1e:95:6f:40:8a:59:d9:04:2a:bb:ea:68:a6:0c:44:ec:da:da: ae:4a:38:f7:21:09:65:1a:2a:e5:a3:55:9e:e6:8e:9a:bb:4b: 99:a4:79:a1:a9:48:5c:ae:f9:0a:56:41:ba:90:d6:e2:0c:a6: 67:e0:01:2c:c1:2b:f7:ba:e1:ec:49:9c:d0:95:40:25:35:73: 10:70:99:18:51:15:b5:3b:53:0a:37:48:11:f1:86:88:df:68: c1:03:37:ac:b9:4e:66:70:1e:2a:67:5e:7b:78:58:23:c0:05: 3a:96:34:44:5a:69:61:fe:13:02:db:66:b1:a9:36:a9:f6:ee: 19:49:00:3f:96:d9:ec:fd:ea:af:c7:af:b4:de:63:51:f1:8c: 60:85:7e:a1:09:a9:2e:42:1e:b8:8b:2c:b5:b7:7d:1b:94:04: 9d:94:cc:06:ea:ae:b3:a9:db:80:85:49:3a:7a:3c:4e:07:70: 73:0c:a5:0e:fd:0e:51:07:77:12:c4:36:88:df:d8:43:bb:c7: bb:24:f7:a4:f5:9a:f7:ee:ba:bb:a5:d4:03:9c:64:cc:96:72: f4:a1:dd:6e:cf:21:db:5d:95:fa:35:60:53:7e:dd:bf:1c:53: e2:e3:e3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGknXE1ojnGuxYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OGU4MTJiZGYtMTViNi00NjQ3LTljMDQtYjRmY2Y5YWEwYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3OhLaqpVzzKt1oh5m/ZpjxbjRPxaa/JItwM 6eiZpp1Nc1qDJwDDVsLGuqQwW9z3dEJOMYncC6IC+di2irHkWZcYUVQvs7gCvy3j p0Vvf9KUpdKLRDOXcO+AF3LuFV8vmZ2lDJ+k60A8jYVRo6c6WzDSN1Fq1o7/MTVw AAAZ3kYkoEAPMMlUvMCl5WhXuIOOewksKKgwk2fHuxpC7fxoAVRE+4ofESm7h3fG Tpwg3v6ouU1bI6UloMqQgHLWIthOBKfExMb5wBCOTU4igIpNbRoiPku0J+hlljBe sxK6mPIFxGLWrbNnlZaY8bBwlQpEwdxq/M5MslpCgpT5AqZ2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOAYJ2f8JmbA7LodonZvVFW+RcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmZlNWYxYjYtZGZmMS0z Yzk4LTliNTMtMDQ1YzE1MmU1MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP9E8ZQZIAMzuK2IL1uI96MuB6Vb0CKWdkEKrvqaKYMROza2q5KOPch CWUaKuWjVZ7mjpq7S5mkeaGpSFyu+QpWQbqQ1uIMpmfgASzBK/e64exJnNCVQCU1 cxBwmRhRFbU7Uwo3SBHxhojfaMEDN6y5TmZwHipnXnt4WCPABTqWNERaaWH+EwLb ZrGpNqn27hlJAD+W2ez96q/Hr7TeY1HxjGCFfqEJqS5CHriLLLW3fRuUBJ2UzAbq rrOp24CFSTp6PE4HcHMMpQ79DlEHdxLENojf2EO7x7sk96T1mvfuurul1AOcZMyW cvSh3W7PIdtdlfo1YFN+3b8cU+Lj42g= -----END CERTIFICATE-----Generated at Thu Mar 26 04:19:39 2026 by rpki-client