$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa File: 2db7e0a5-95c8-3e91-8098-7099383c5d60.roa (raw, json) Hash identifier: IZGXQI/ED/4MFte+td7ZEFkvhjSrHA6AqXiatZyn1Xk= Subject key identifier: 61:5E:A2:B2:8A:41:CC:A2:2E:D8:24:D3:BE:0E:A1:58:E2:D0:B4:B7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF39B5D774C7C1D12CEAC Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397235 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f3:9b:5d:77:4c:7c:1d:12:ce:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=28a3f856-3799-412d-b532-a07649212257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:28:87:08:2e:05:57:f4:32:6f:e6:63:70: aa:5a:51:99:86:5b:f1:3d:ff:08:e9:67:3b:d3:bf: 4d:75:b4:98:b4:64:ff:b6:f1:9d:7b:c9:4e:11:dd: 9d:3a:75:bf:bc:c0:3f:95:48:fb:35:a8:65:b5:a7: 26:9a:2c:8e:1a:cb:63:5b:73:02:5c:c4:17:da:09: 9e:8b:1d:93:c8:28:26:0e:99:f5:79:6d:a7:3b:d6: 79:43:ee:66:e7:ad:9a:3f:a9:b5:9e:77:fc:eb:11: fe:1a:48:93:31:1a:7f:8b:32:c1:79:fc:b3:49:d1: 4c:4e:ea:c8:02:dd:7f:94:03:e2:e5:9e:48:70:a9: 05:ba:20:92:ab:7e:fc:1c:4c:a7:51:c7:c9:3d:1d: 73:bc:20:67:a2:62:23:c5:d3:45:73:27:56:bb:1f: ef:55:5f:97:11:bf:36:f3:5c:42:4c:60:e5:58:27: 75:75:4f:00:76:12:c3:67:07:c2:d3:e8:e9:66:12: 9e:1a:9d:48:48:f2:51:99:bd:f6:92:b2:e6:dc:8b: d4:a7:9f:8c:59:11:b5:ae:48:cd:0b:51:e6:aa:10: c4:6c:8f:e2:bd:04:4c:74:fe:99:5e:e6:75:b3:21: 58:fd:be:4e:07:01:9e:ca:94:e4:07:75:c7:83:7c: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:A2:B2:8A:41:CC:A2:2E:D8:24:D3:BE:0E:A1:58:E2:D0:B4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:58:2c:74:6d:e3:b4:df:b2:ba:32:a3:74:1d:22:5e:10:13: 05:36:ed:09:5b:ce:1f:77:bd:98:a2:58:c5:7d:15:9f:16:89: 12:a5:34:eb:ec:ef:c1:fb:49:11:9b:c5:f9:96:29:76:7b:26: e8:d0:c9:21:6d:40:c0:53:10:82:9f:eb:be:c7:45:b9:50:9e: aa:66:93:83:e2:d7:04:59:3e:bf:c8:9b:6d:0d:0b:7f:77:57: 55:17:e3:44:e2:d8:6a:f0:fa:d6:c7:0e:12:68:76:45:17:c2: 34:bb:fd:fc:a1:35:cd:ba:e8:64:4f:19:9f:75:2e:91:16:b5: ac:4b:70:e6:a7:14:9e:77:56:24:20:74:4f:b7:be:be:1b:b4: a0:92:fd:b2:80:62:35:49:48:36:3f:5f:0a:5e:87:7a:15:01: 01:d3:e0:b5:b5:8d:c4:d2:da:91:8a:49:47:a5:2f:ff:16:96: f5:29:57:e5:dd:11:21:1e:1e:c4:f0:ba:8e:f4:15:b8:3b:2e: b1:47:6e:55:ac:97:c5:6e:af:1d:ea:ce:45:54:c4:3d:00:91: c7:43:e2:31:9d:dd:13:67:c8:5d:aa:7e:b1:61:18:31:83:8c: 65:b9:09:89:2e:d5:01:7c:32:28:d4:d8:ef:8d:25:40:07:f7: b0:91:8a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/ObXXdMfB0SzqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjhhM2Y4NTYtMzc5OS00MTJkLWI1MzItYTA3NjQ5MjEyMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVgohwguBVf0Mm/mY3CqWlGZhlvxPf8I6Wc7 079NdbSYtGT/tvGde8lOEd2dOnW/vMA/lUj7NahltacmmiyOGstjW3MCXMQX2gme ix2TyCgmDpn1eW2nO9Z5Q+5m562aP6m1nnf86xH+GkiTMRp/izLBefyzSdFMTurI At1/lAPi5Z5IcKkFuiCSq378HEynUcfJPR1zvCBnomIjxdNFcydWux/vVV+XEb82 81xCTGDlWCd1dU8AdhLDZwfC0+jpZhKeGp1ISPJRmb32krLm3IvUp5+MWRG1rkjN C1HmqhDEbI/ivQRMdP6ZXuZ1syFY/b5OBwGeypTkB3XHg3z5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFeorKKQcyiLtgk074OoVji0LS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmRiN2UwYTUtOTVjOC0z ZTkxLTgwOTgtNzA5OTM4M2M1ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZYLHRt47Tfsroyo3QdIl4QEwU27Qlbzh93vZiiWMV9FZ8WiRKlNOvs 78H7SRGbxfmWKXZ7JujQySFtQMBTEIKf677HRblQnqpmk4Pi1wRZPr/Im20NC393 V1UX40Ti2Grw+tbHDhJodkUXwjS7/fyhNc266GRPGZ91LpEWtaxLcOanFJ53ViQg dE+3vr4btKCS/bKAYjVJSDY/Xwpeh3oVAQHT4LW1jcTS2pGKSUelL/8WlvUpV+Xd ESEeHsTwuo70Fbg7LrFHblWsl8Vurx3qzkVUxD0AkcdD4jGd3RNnyF2qfrFhGDGD jGW5CYku1QF8MijU2O+NJUAH97CRit0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:41:45 2026 by rpki-client