$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa File: 146a9de0-22c0-3f5f-b977-58a4249e22f3.roa (raw, json) Hash identifier: U8ifNut2itLFciEjC3yydQSJYUMkapZYeCDkBJw2y3k= Subject key identifier: C2:11:B0:FE:D8:DA:BF:FE:36:7F:AD:92:25:79:BB:20:3E:46:F6:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FEC68C32FC09D1D9ED702 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397215 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ec:68:c3:2f:c0:9d:1d:9e:d7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3d33e08f-7247-4bfc-8b90-62e015114f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:71:38:f3:26:0a:11:d6:2c:43:46:59:06:16: 11:74:58:24:71:87:b3:17:2e:8d:4b:12:ab:f6:89: d1:f3:ba:49:09:66:9d:3d:b0:01:f1:7d:d4:d9:18: ae:bd:b3:c8:31:37:40:4d:fb:89:2a:92:54:f4:aa: bd:83:e5:dc:47:63:57:d5:b6:d3:5a:61:4d:40:46: 54:f2:60:82:a3:5f:8a:7d:84:05:c5:2c:b9:b3:43: 25:b4:c2:79:b5:cf:96:69:b7:6b:1e:a9:64:43:9b: 17:d1:92:fa:3a:aa:20:26:5d:c8:a0:0c:5f:b7:0e: 12:2b:c1:36:ed:3d:93:3b:ea:4c:82:87:18:54:65: 49:e7:00:c2:5b:ce:58:69:8c:e2:10:5a:7e:91:36: 41:5e:db:6c:f6:8f:7d:76:90:60:f2:5c:11:05:b8: 51:07:0b:f6:66:3e:24:80:f4:92:d6:67:7d:f5:ab: d4:2b:e6:57:db:e4:6e:c5:84:0a:95:21:95:69:37: 7e:7b:81:33:01:8c:1d:c6:be:ad:bf:b8:b2:1b:06: 28:1e:93:9a:9b:7f:d2:8f:b3:00:01:39:a5:bc:da: 5b:bd:bd:be:4a:d6:9a:a9:93:51:dd:59:2e:9f:f7: 16:17:ea:3b:ab:bf:c1:46:1d:1b:c0:2e:57:3b:1b: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:B0:FE:D8:DA:BF:FE:36:7F:AD:92:25:79:BB:20:3E:46:F6:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/146a9de0-22c0-3f5f-b977-58a4249e22f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:68:63:7c:75:fe:e1:7c:e2:62:ae:16:91:f5:06:1c:5c:c7: 44:46:d4:ae:f7:4b:cb:6a:a0:2f:a1:b0:3b:32:60:d5:b3:4d: 88:a3:bf:0a:4b:75:a3:a2:61:0c:2e:3d:2a:d2:7b:c0:f8:56: fc:fe:b5:99:17:5e:e4:23:a8:9e:6b:2e:34:9b:a2:14:bc:62: 08:7f:99:b8:4d:ef:de:76:14:15:34:1e:63:32:7b:f9:80:fb: 8e:a6:e3:12:85:76:46:8d:a5:f8:e4:a6:6e:ec:f4:b8:d3:26: 1a:bf:16:70:22:4e:e7:df:26:1b:88:9d:93:f1:d9:5c:b6:07: b0:b3:95:b9:b7:ad:ca:0c:20:46:4a:90:cc:41:c4:d1:c0:9c: ff:4f:d7:63:c3:e4:00:6f:b5:e1:48:ce:d4:a0:06:db:e4:5c: 7c:f7:b5:fa:96:63:7f:2d:f1:c4:c8:23:2f:ed:a8:32:3d:25: 9b:32:2b:b3:47:6b:3e:02:0e:40:de:84:3a:f6:88:cb:f1:86: f9:26:e5:fc:c9:43:94:ea:ae:04:a7:87:19:98:3c:15:16:3e: cd:7c:c7:07:40:37:3c:33:de:05:b6:fe:55:a5:40:ba:c4:ce: fc:f2:36:ae:31:d8:fc:dd:20:f4:97:b7:f5:ad:2a:f7:d6:a5: 60:9a:30:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+xowy/AnR2e1wIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2QzM2UwOGYtNzI0Ny00YmZjLThiOTAtNjJlMDE1MTE0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnE48yYKEdYsQ0ZZBhYRdFgkcYezFy6NSxKr 9onR87pJCWadPbAB8X3U2RiuvbPIMTdATfuJKpJU9Kq9g+XcR2NX1bbTWmFNQEZU 8mCCo1+KfYQFxSy5s0MltMJ5tc+WabdrHqlkQ5sX0ZL6OqogJl3IoAxftw4SK8E2 7T2TO+pMgocYVGVJ5wDCW85YaYziEFp+kTZBXtts9o99dpBg8lwRBbhRBwv2Zj4k gPSS1md99avUK+ZX2+RuxYQKlSGVaTd+e4EzAYwdxr6tv7iyGwYoHpOam3/Sj7MA ATmlvNpbvb2+StaaqZNR3Vkun/cWF+o7q7/BRh0bwC5XOxs5vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIRsP7Y2r/+Nn+tkiV5uyA+RvYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTQ2YTlkZTAtMjJjMC0z ZjVmLWI5NzctNThhNDI0OWUyMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxoY3x1/uF84mKuFpH1Bhxcx0RG1K73S8tqoC+hsDsyYNWzTYijvwpL daOiYQwuPSrSe8D4Vvz+tZkXXuQjqJ5rLjSbohS8Ygh/mbhN7952FBU0HmMye/mA +46m4xKFdkaNpfjkpm7s9LjTJhq/FnAiTuffJhuInZPx2Vy2B7Czlbm3rcoMIEZK kMxBxNHAnP9P12PD5ABvteFIztSgBtvkXHz3tfqWY38t8cTIIy/tqDI9JZsyK7NH az4CDkDehDr2iMvxhvkm5fzJQ5TqrgSnhxmYPBUWPs18xwdANzwz3gW2/lWlQLrE zvzyNq4x2PzdIPSXt/WtKvfWpWCaMB8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:31 2026 by rpki-client