$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa File: 0f2a680b-f04d-33e8-9d09-15281372c2f9.roa (raw, json) Hash identifier: TwEvY/yFnBvhvR87ZyW7wxJ1m1T3TWgAogeYNfC8jZY= Subject key identifier: 47:E9:6F:C5:4D:A7:D4:79:41:BE:3E:4A:31:6A:20:0D:66:8D:77:1A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF2725321152C8B1A9C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 12008 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f2:72:53:21:15:2c:8b:1a:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=c7d88fbe-afa4-4c8d-84b7-31746dafc6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:90:05:49:dd:fd:86:30:14:fb:e3:b4:2b: 18:93:20:2c:ad:c0:37:cb:c2:2a:8f:14:08:c0:b1: 00:93:68:78:00:c9:82:c8:dd:90:6c:ec:2f:96:ef: 4d:50:ec:af:76:d4:11:95:79:08:a2:6d:c3:db:14: 8b:04:57:cd:a9:1c:46:7d:85:3d:db:1d:a8:2d:d4: 2d:89:77:31:0d:ba:ba:e3:fd:2b:5b:1a:77:78:f1: 25:7e:e3:f5:9e:d1:cd:6b:e5:12:81:d5:63:c8:b4: 7c:90:1f:c3:9f:ed:26:41:cb:06:66:e6:76:56:78: a8:23:9f:4c:54:d5:cb:34:e5:a2:85:85:9c:5c:34: 88:16:8c:21:96:9c:d1:e6:26:77:97:58:ba:40:e4: 7c:79:35:ee:d2:cd:35:79:91:1f:13:0a:9c:da:4b: 3d:55:b2:d3:d4:64:91:86:ef:cd:eb:23:d8:3e:1c: d5:93:e2:cb:01:c9:9f:38:13:64:6c:0e:6b:1f:44: a6:31:07:e7:a3:1d:52:c3:eb:fc:39:b7:81:26:03: 05:ca:93:ae:1a:60:d5:cd:12:24:2b:28:17:5a:19: b3:f8:cd:6e:68:db:7a:f4:90:60:ef:79:5b:42:90: 45:45:24:2d:21:03:3d:c1:62:89:70:4e:c5:35:0c: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:6F:C5:4D:A7:D4:79:41:BE:3E:4A:31:6A:20:0D:66:8D:77:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8c:8d:70:b5:06:01:c6:9f:10:10:cb:99:c7:f6:29:48:81: ce:eb:59:07:8c:dd:7c:3c:b9:bc:20:2c:35:19:92:e9:ad:58: 24:23:6d:a2:82:b2:73:fe:9b:42:da:bf:92:41:bb:f1:02:30: 41:95:f5:4a:6a:dd:dc:e3:c4:56:c7:27:0b:b1:b0:6c:9a:0b: a6:30:0c:6b:b7:b1:f7:04:e2:83:54:24:68:54:59:47:7c:77: 39:08:4e:fd:fe:f2:fe:ae:6f:2d:42:f5:b1:58:b3:33:74:db: a4:c1:db:d7:93:09:bd:62:7b:64:1f:63:9c:8c:05:8e:9c:f0: e5:d2:3a:a7:cf:9d:b6:c8:61:05:8c:0f:67:9a:3c:e2:36:e3: 22:11:04:65:d6:da:a7:e4:9a:b4:fb:a6:f8:a6:51:cc:c2:22: 17:7a:75:7a:d6:b5:db:fd:cc:6e:ed:a9:03:92:7d:90:d8:48: 6e:12:88:78:e0:06:34:f5:49:0c:1a:de:4d:43:0e:06:97:53: 1a:f1:a1:d0:90:27:d4:e9:8b:e9:67:23:95:d5:87:3b:2d:b7: 69:a1:2c:ac:38:d3:57:9d:b7:f2:b8:f5:4a:39:ef:b8:7a:ff: c9:ec:2e:d0:32:3d:d6:fa:aa:4d:a6:b0:14:e0:98:0b:73:40: 8d:be:7c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/JyUyEVLIsanIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzdkODhmYmUtYWZhNC00YzhkLTg0YjctMzE3NDZkYWZjNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQOQBUnd/YYwFPvjtCsYkyAsrcA3y8IqjxQI wLEAk2h4AMmCyN2QbOwvlu9NUOyvdtQRlXkIom3D2xSLBFfNqRxGfYU92x2oLdQt iXcxDbq64/0rWxp3ePElfuP1ntHNa+USgdVjyLR8kB/Dn+0mQcsGZuZ2VnioI59M VNXLNOWihYWcXDSIFowhlpzR5iZ3l1i6QOR8eTXu0s01eZEfEwqc2ks9VbLT1GSR hu/N6yPYPhzVk+LLAcmfOBNkbA5rH0SmMQfnox1Sw+v8ObeBJgMFypOuGmDVzRIk KygXWhmz+M1uaNt69JBg73lbQpBFRSQtIQM9wWKJcE7FNQy6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfpb8VNp9R5Qb4+SjFqIA1mjXcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGYyYTY4MGItZjA0ZC0z M2U4LTlkMDktMTUyODEzNzJjMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqMjXC1BgHGnxAQy5nH9ilIgc7rWQeM3Xw8ubwgLDUZkumtWCQjbaKC snP+m0Lav5JBu/ECMEGV9Upq3dzjxFbHJwuxsGyaC6YwDGu3sfcE4oNUJGhUWUd8 dzkITv3+8v6uby1C9bFYszN026TB29eTCb1ie2QfY5yMBY6c8OXSOqfPnbbIYQWM D2eaPOI24yIRBGXW2qfkmrT7pvimUczCIhd6dXrWtdv9zG7tqQOSfZDYSG4SiHjg BjT1SQwa3k1DDgaXUxrxodCQJ9Tpi+lnI5XVhzstt2mhLKw401edt/K49Uo577h6 /8nsLtAyPdb6qk2msBTgmAtzQI2+fPo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:03 2026 by rpki-client