$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json) Hash identifier: 4m2Jzh/MU0SgNrQoGxRVCLjm3/X8Yff9xtaS22hcTYY= Subject key identifier: 42:21:02:B8:07:07:BF:55:65:5B:1A:98:75:88:62:B3:2D:02:6F:A2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FFCB216F04056D2DCCEC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397232 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:fc:b2:16:f0:40:56:d2:dc:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a68648c6-5d23-4344-bbfc-cda0315feba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:1c:69:be:7f:0c:9f:1b:a3:34:61:a9:0e: b5:d2:45:c3:1d:da:b6:a3:29:4c:b0:8c:a6:59:1b: 00:0c:6c:6a:04:e1:d9:b4:63:92:d3:0b:9c:86:3d: 9f:fa:c0:0c:07:75:b6:6a:a9:a3:f9:fc:af:0a:7a: 4c:79:9f:7e:2a:96:40:9a:9b:6f:8e:b0:89:7f:a3: cf:66:67:d0:9c:f5:e2:80:fb:6c:79:1e:9a:25:43: 71:be:4c:1b:9a:3f:b2:a1:51:91:94:fe:2e:16:94: d8:3f:b5:d0:a9:54:13:8c:b7:5a:77:c7:78:b6:9d: f2:f2:06:11:57:e6:71:36:83:ee:ba:93:d7:ca:68: d7:4d:25:eb:31:8c:a2:18:46:9c:b0:f7:60:83:53: 61:a8:01:1c:4f:df:ad:ec:35:60:51:2e:42:df:10: 27:29:af:c8:81:33:9a:21:02:13:f5:4a:24:83:4a: be:f6:f0:cb:c5:2e:91:d7:66:03:33:8e:4b:c0:45: 69:80:82:46:d4:f4:14:7d:5d:0f:5e:31:25:fa:f6: 95:8c:69:f3:95:ff:d7:53:86:db:cb:74:e6:a2:9c: f2:b2:5c:aa:7b:74:1d:06:a3:7a:dc:c1:0f:f8:3b: d6:c2:5e:5f:b8:03:da:b8:4f:9c:70:4b:5d:b6:17: 6b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:21:02:B8:07:07:BF:55:65:5B:1A:98:75:88:62:B3:2D:02:6F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:25:ea:9c:98:69:c7:ac:4f:b4:2c:55:99:a8:9d:80:95:a4: 07:f5:f1:6d:4c:4a:e6:a2:83:a9:65:9c:0a:98:95:f2:fe:ad: a7:1e:34:80:c3:d2:4a:55:3d:ec:7d:4d:94:fb:f3:28:e6:00: 29:13:db:c3:73:15:8f:54:55:36:d3:45:ae:49:eb:1f:79:c4: de:30:b0:88:c9:f4:80:d4:fe:46:90:d0:cd:ae:1a:81:c4:f8: 11:5f:ed:47:7a:e4:5f:eb:eb:27:0a:73:df:6d:01:b4:b3:a3: b3:43:15:fc:7c:c7:c3:fd:0f:5a:1e:1b:01:8f:c5:73:52:c7: 6b:e1:d2:a1:56:bd:4d:63:42:ba:43:d5:3d:33:de:e5:88:f0: d5:c9:21:77:ab:4d:ed:15:8a:29:e1:44:d2:19:5a:88:36:1f: 53:bd:a3:45:6f:16:68:41:80:dd:13:d5:69:39:4b:b9:28:26: 93:a2:6c:76:a2:1f:6c:05:c8:4c:50:af:1d:cf:d2:e5:44:73: d2:ee:08:d2:1c:bd:6f:3d:2c:48:e4:09:8a:99:06:eb:68:35: 81:5c:a7:38:45:de:77:98:6d:22:21:32:e8:4a:13:fb:60:6b: c1:e7:f3:95:0f:ab:28:96:a2:19:f9:4d:cd:65:84:fb:1a:3e: d1:3a:21:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/yyFvBAVtLczsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTY4NjQ4YzYtNWQyMy00MzQ0LWJiZmMtY2RhMDMxNWZlYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmakcab5/DJ8bozRhqQ610kXDHdq2oylMsIym WRsADGxqBOHZtGOS0wuchj2f+sAMB3W2aqmj+fyvCnpMeZ9+KpZAmptvjrCJf6PP ZmfQnPXigPtseR6aJUNxvkwbmj+yoVGRlP4uFpTYP7XQqVQTjLdad8d4tp3y8gYR V+ZxNoPuupPXymjXTSXrMYyiGEacsPdgg1NhqAEcT9+t7DVgUS5C3xAnKa/IgTOa IQIT9Uokg0q+9vDLxS6R12YDM45LwEVpgIJG1PQUfV0PXjEl+vaVjGnzlf/XU4bb y3Tmopzyslyqe3QdBqN63MEP+DvWwl5fuAPauE+ccEtdthdrfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIhArgHB79VZVsamHWIYrMtAm+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FlNjBlNzAtZTVmZS0z ODAyLWFlNTUtZjY4ZTIzYTE5NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwl6pyYacesT7QsVZmonYCVpAf18W1MSuaig6llnAqYlfL+raceNIDD 0kpVPex9TZT78yjmACkT28NzFY9UVTbTRa5J6x95xN4wsIjJ9IDU/kaQ0M2uGoHE +BFf7Ud65F/r6ycKc99tAbSzo7NDFfx8x8P9D1oeGwGPxXNSx2vh0qFWvU1jQrpD 1T0z3uWI8NXJIXerTe0ViinhRNIZWog2H1O9o0VvFmhBgN0T1Wk5S7koJpOibHai H2wFyExQrx3P0uVEc9LuCNIcvW89LEjkCYqZButoNYFcpzhF3neYbSIhMuhKE/tg a8Hn85UPqyiWohn5Tc1lhPsaPtE6Iaw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:24:00 2026 by rpki-client