$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa File: 2bd20e07-9af0-35ca-a017-e2516bba252a.roa (raw, json) Hash identifier: JNjsN1EVO1YrJXb3kd8yAYaZbJBPonm3Hdl4LZyxZn0= Subject key identifier: 2C:DA:DA:F8:A6:3F:D0:63:6E:22:02:B3:40:25:0A:2C:43:14:61:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DFBD60BACEB7E1E4454028510 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 397230 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:0b:ac:eb:7e:1e:44:54:02:85:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=3e1cd672-bfeb-4d98-8fed-ba7d2f69a2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:1d:3b:37:da:34:e3:b4:b2:cb:39:df:e8: a1:2f:6d:5a:30:84:80:af:1c:56:15:15:11:60:7f: e2:94:4d:c4:a3:5c:1a:4e:fb:1a:db:87:b6:08:68: 48:a5:97:08:95:5b:8b:56:c2:cc:24:23:fb:c4:c1: f9:0d:bc:55:e2:92:2a:9a:a2:58:fb:23:de:c0:b9: 44:df:89:f8:07:11:c7:1a:15:c0:f1:87:d9:d7:1f: bc:fb:b9:2c:a7:48:4c:a0:2d:7e:e3:ba:89:90:f7: 3c:cc:85:2a:46:24:15:2e:36:44:59:aa:1a:46:ff: bd:3e:60:9a:dc:17:ac:d8:45:9c:18:54:ab:4b:59: bd:13:2d:20:15:be:c9:3c:29:99:b5:cb:90:ba:93: 9b:04:3a:29:4d:a3:85:0f:76:f1:ea:6f:fc:0b:1d: 9f:4c:f1:9a:f1:c2:a2:e9:e5:18:f4:30:62:6c:dd: bc:43:ec:69:fc:25:a9:fa:0b:39:92:2b:1e:22:fc: e8:5e:61:38:73:9e:9d:c1:2e:71:82:07:cf:43:ad: 9b:07:73:f4:d8:81:19:a1:a9:96:67:2d:c7:5b:b2: e8:49:bf:69:9a:7c:55:23:b5:47:67:a6:dc:70:72: 8e:f8:5e:dd:46:ab:1e:d2:9c:28:3b:24:6d:7e:22: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DA:DA:F8:A6:3F:D0:63:6E:22:02:B3:40:25:0A:2C:43:14:61:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2bd20e07-9af0-35ca-a017-e2516bba252a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f7:67:2f:8d:0d:81:98:7b:1e:8b:a9:59:0b:6d:42:af:65: 87:63:38:34:e9:6d:13:7c:09:dc:f7:d7:18:ec:f9:22:20:62: c7:43:78:82:b8:31:db:d0:e9:a6:f0:87:a1:e3:1a:4c:9b:3a: 44:73:ef:67:04:38:d8:9a:b5:2a:96:bd:8f:13:8f:aa:17:11: 57:50:77:93:91:ce:2b:b1:a2:dd:dd:2b:a7:7c:db:45:20:56: 15:55:3a:ef:9c:0f:ae:70:2c:76:51:50:7d:cb:a0:d3:e0:97: 6d:1b:0a:e2:d2:76:92:5f:bd:45:5e:94:68:7d:91:3e:f8:43: 21:cc:07:a1:5e:c2:cc:04:4e:86:96:87:b5:fd:75:41:eb:7f: fc:8a:49:dc:30:1f:4b:f9:03:b2:81:0e:b9:a8:4d:44:d6:3b: 50:99:1a:a4:1a:64:72:e3:04:89:09:b5:27:c6:2c:02:03:17: 12:c0:ec:7e:32:1a:79:eb:c8:5d:a7:00:dd:42:4e:f9:60:00: 96:c1:86:91:29:77:82:52:33:85:b9:44:f0:19:b8:a3:76:3d: 53:47:b4:3b:db:2b:2f:b3:83:67:51:0c:7a:39:18:4b:18:31: e8:d7:5b:13:9c:6b:10:9a:28:41:26:63:4f:ea:c7:32:28:fe: 50:8f:bd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371gus634eRFQChRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk M2UxY2Q2NzItYmZlYi00ZDk4LThmZWQtYmE3ZDJmNjlhMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0gdOzfaNOO0sss53+ihL21aMISArxxWFRUR YH/ilE3Eo1waTvsa24e2CGhIpZcIlVuLVsLMJCP7xMH5DbxV4pIqmqJY+yPewLlE 34n4BxHHGhXA8YfZ1x+8+7ksp0hMoC1+47qJkPc8zIUqRiQVLjZEWaoaRv+9PmCa 3Bes2EWcGFSrS1m9Ey0gFb7JPCmZtcuQupObBDopTaOFD3bx6m/8Cx2fTPGa8cKi 6eUY9DBibN28Q+xp/CWp+gs5kiseIvzoXmE4c56dwS5xggfPQ62bB3P02IEZoamW Zy3HW7LoSb9pmnxVI7VHZ6bccHKO+F7dRqse0pwoOyRtfiITyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCza2vimP9BjbiICs0AlCixDFGFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmJkMjBlMDctOWFmMC0z NWNhLWEwMTctZTI1MTZiYmEyNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL3Zy+NDYGYex6LqVkLbUKvZYdjODTpbRN8Cdz31xjs+SIgYsdDeIK4 MdvQ6abwh6HjGkybOkRz72cEONiatSqWvY8Tj6oXEVdQd5ORziuxot3dK6d820Ug VhVVOu+cD65wLHZRUH3LoNPgl20bCuLSdpJfvUVelGh9kT74QyHMB6FewswEToaW h7X9dUHrf/yKSdwwH0v5A7KBDrmoTUTWO1CZGqQaZHLjBIkJtSfGLAIDFxLA7H4y GnnryF2nAN1CTvlgAJbBhpEpd4JSM4W5RPAZuKN2PVNHtDvbKy+zg2dRDHo5GEsY MejXWxOcaxCaKEEmY0/qxzIo/lCPvdk= -----END CERTIFICATE-----Generated at Sat Jun 13 15:25:14 2026 by rpki-client