$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa File: 08209b0a-6f5a-3156-b100-e902a59d6ef5.roa (raw, json) Hash identifier: OQiTPnZk9PkpUFTXJy6v0bH4sxXcX07Ld1lPc8JfFGw= Subject key identifier: 3D:CA:A2:85:4A:7B:C9:53:8A:25:6E:61:62:A8:91:68:EA:53:2C:DA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF77EAF050EF96161FB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397221 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f7:7e:af:05:0e:f9:61:61:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=72a746a2-31fb-46e2-a752-88276df0a6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:59:af:30:8b:9b:9d:4d:74:43:8e:22:cb: c6:64:29:fb:3a:42:86:c6:05:39:26:0c:84:38:6d: f8:78:1d:10:66:c1:8c:09:28:89:02:02:35:77:22: 9b:09:a9:e8:e4:7c:ba:a9:d3:33:65:91:80:13:fa: cd:13:34:e6:60:73:05:fc:62:31:53:8e:93:96:fe: 56:ef:8f:5c:da:ed:2a:8c:25:35:65:1e:41:b1:7f: af:f8:0a:48:61:81:56:fe:da:96:51:a9:84:0e:df: 13:0f:79:5b:fb:99:af:37:06:8b:8b:d8:14:d2:bd: c5:d7:cb:19:6b:7b:12:4e:2d:11:bb:21:8b:0d:ac: b8:0c:0d:75:1d:eb:10:fa:18:1a:7f:b3:9f:a2:ff: 24:b9:a7:8c:3f:2e:32:ec:0d:5a:6a:32:68:b8:dd: f3:5a:fa:74:d3:71:cf:b8:ac:19:1a:0a:53:6a:4c: e8:8f:1d:f4:90:9d:12:d7:dd:75:c9:28:ae:22:e5: c9:9b:f8:4d:4e:d8:89:67:89:01:0e:83:60:c4:2d: 57:30:c6:cb:5c:84:19:6c:26:fb:5c:e9:6c:72:0a: bd:58:d7:70:11:f7:46:26:96:c7:8e:23:a8:24:a0: 69:c0:41:b0:24:12:e7:32:0a:99:9c:59:75:5a:62: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CA:A2:85:4A:7B:C9:53:8A:25:6E:61:62:A8:91:68:EA:53:2C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/08209b0a-6f5a-3156-b100-e902a59d6ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ce:f6:8a:e3:1e:4a:cb:3f:e1:dd:f2:20:a5:ba:91:90:28: 70:4c:fa:a8:ac:bc:a9:28:00:f8:88:11:d1:58:e9:60:34:c5: 91:7e:0d:55:ed:e7:94:43:f7:3d:ec:61:6e:94:6e:49:a2:93: 4d:b7:65:63:78:64:7c:91:9c:8e:50:fd:b9:61:3b:66:cd:d3: 7f:9f:aa:63:cb:5a:35:58:47:64:d5:1a:54:a2:45:6b:88:91: 89:81:a5:7f:0d:18:e5:4f:a3:73:0e:24:75:97:71:31:6f:69: 04:ad:84:2e:6b:38:b3:2a:86:50:90:33:9b:bb:b5:4e:02:b7: 1c:8c:fc:28:cf:03:50:02:46:ba:99:41:da:ad:d6:5a:a3:f0: 6d:e5:ac:54:43:03:32:89:0e:52:1b:63:bb:a4:3d:21:dd:38: 6f:23:a6:4f:e6:67:4d:6f:93:0f:7d:d6:69:31:9b:85:04:aa: 71:c3:b6:87:3c:04:3e:6e:83:6b:a7:4f:d7:23:92:fa:8c:03: 99:a3:68:2a:ab:5c:97:fc:00:9e:b2:d7:a9:4c:25:75:2f:e6: 3d:8b:85:0f:1b:97:a6:e4:86:53:49:31:11:81:ed:75:56:d3: 85:96:3f:54:5b:4a:c1:90:8b:e6:62:8d:56:c8:4a:b1:d4:5c: 79:92:5f:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/d+rwUO+WFh+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NzJhNzQ2YTItMzFmYi00NmUyLWE3NTItODgyNzZkZjBhNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW9ZrzCLm51NdEOOIsvGZCn7OkKGxgU5JgyE OG34eB0QZsGMCSiJAgI1dyKbCano5Hy6qdMzZZGAE/rNEzTmYHMF/GIxU46Tlv5W 749c2u0qjCU1ZR5BsX+v+ApIYYFW/tqWUamEDt8TD3lb+5mvNwaLi9gU0r3F18sZ a3sSTi0RuyGLDay4DA11HesQ+hgaf7Ofov8kuaeMPy4y7A1aajJouN3zWvp003HP uKwZGgpTakzojx30kJ0S1911ySiuIuXJm/hNTtiJZ4kBDoNgxC1XMMbLXIQZbCb7 XOlscgq9WNdwEfdGJpbHjiOoJKBpwEGwJBLnMgqZnFl1WmK6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3KooVKe8lTiiVuYWKokWjqUyzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDgyMDliMGEtNmY1YS0z MTU2LWIxMDAtZTkwMmE1OWQ2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrO9orjHkrLP+Hd8iClupGQKHBM+qisvKkoAPiIEdFY6WA0xZF+DVXt 55RD9z3sYW6Ubkmik023ZWN4ZHyRnI5Q/blhO2bN03+fqmPLWjVYR2TVGlSiRWuI kYmBpX8NGOVPo3MOJHWXcTFvaQSthC5rOLMqhlCQM5u7tU4CtxyM/CjPA1ACRrqZ Qdqt1lqj8G3lrFRDAzKJDlIbY7ukPSHdOG8jpk/mZ01vkw991mkxm4UEqnHDtoc8 BD5ug2unT9cjkvqMA5mjaCqrXJf8AJ6y16lMJXUv5j2LhQ8bl6bkhlNJMRGB7XVW 04WWP1RbSsGQi+ZijVbISrHUXHmSX8s= -----END CERTIFICATE-----Generated at Fri Apr 17 16:36:58 2026 by rpki-client