$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa File: 3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa (raw, json) Hash identifier: YBbKquHZJy2jWaZafgWx2CIFZq1bIfrQyv9PfnVHH2s= Subject key identifier: BE:B0:96:9C:CE:59:F2:58:65:36:7A:49:AA:C4:37:12:9D:21:5E:AC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09128DFD2D5958A83D499780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397224 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:8d:fd:2d:59:58:a8:3d:49:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=fc90b7c6-8437-4e83-b7d5-e01ca31ca39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:a7:72:0e:21:5c:6e:6f:95:ef:5f:76:79: b3:55:54:99:59:66:53:f3:2e:d8:91:fa:aa:5a:3a: 33:fb:e6:f9:d4:45:d0:b9:d1:b8:28:b2:ae:ae:6e: b4:51:3b:94:8f:e1:87:2f:75:80:6d:0a:f7:2d:7b: 3b:ad:b2:77:22:d1:e9:bd:eb:32:b4:99:4d:ab:cf: a7:2c:39:71:7f:76:d9:09:20:bd:0c:38:10:38:d8: 60:e1:3a:55:20:9e:da:c1:48:4f:67:ed:9b:8d:ef: 99:ed:ca:08:25:d8:ad:75:dc:2d:2d:00:d9:a3:56: 55:18:79:22:88:1b:1c:8b:40:a4:03:63:95:8f:15: 1c:e3:55:a3:a1:3d:03:ca:dd:5a:78:39:ed:c7:99: 2e:d5:1e:78:83:f9:8f:4d:cc:da:61:12:d2:ea:56: 16:ce:97:6f:c5:ba:86:a5:cb:f6:14:aa:6c:5c:16: 23:3a:60:9f:58:ce:7b:32:6d:17:2e:d0:09:93:91: 56:2e:cd:86:1f:75:ab:7c:d7:3c:b8:75:8d:c4:6b: 77:7e:41:80:f2:b7:d7:5e:c0:ee:79:ab:7c:05:96: 76:99:ff:46:bb:3c:8e:52:a5:a7:2c:ac:ce:6a:53: 6f:8f:b9:bc:71:4b:20:5b:c7:84:b6:23:1a:9f:00: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:96:9C:CE:59:F2:58:65:36:7A:49:AA:C4:37:12:9D:21:5E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7e:dd:b2:d0:4b:ec:4a:d7:34:92:47:51:d0:d6:d9:83:56: 71:42:24:ee:95:db:32:b0:6a:92:05:af:3c:9f:0b:c3:6a:9a: a8:2f:84:c5:8a:59:72:d0:ea:a1:05:16:55:46:a5:e9:b4:ee: 6c:65:59:00:24:21:f6:c6:01:d4:9e:21:cf:0f:0c:4c:b3:68: 06:e8:db:f5:70:04:d8:9f:e1:c0:a2:db:99:5d:8a:97:48:00: 61:cd:9d:73:ad:c3:dd:c8:c5:4e:84:64:d1:0f:bb:49:f9:22: 9d:17:e1:1b:22:c4:69:b8:84:a9:23:f1:d7:4e:f2:a6:21:89: 4f:87:fc:97:32:e5:c0:0b:17:d5:96:2f:23:43:74:8f:b9:2a: 94:d3:42:4d:37:19:08:14:c9:6a:19:93:2b:ce:82:6b:a7:74: e9:8f:31:04:3d:01:3c:8a:22:67:c8:f5:90:93:86:80:9c:41: 3b:07:d2:27:94:87:71:98:fc:98:3b:68:fc:73:3b:86:28:db: 15:69:71:93:5e:5b:81:36:35:e7:30:19:1e:52:47:88:a0:b5: 25:0c:a8:0f:7d:32:6d:20:83:11:97:ba:84:ef:35:79:d6:67: dd:da:e8:34:ce:2e:fe:6c:eb:44:50:9a:1e:ca:6c:ce:07:ec: 0f:d2:c1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEo39LVlYqD1Jl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmM5MGI3YzYtODQzNy00ZTgzLWI3ZDUtZTAxY2EzMWNhMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTCncg4hXG5vle9fdnmzVVSZWWZT8y7Ykfqq Wjoz++b51EXQudG4KLKurm60UTuUj+GHL3WAbQr3LXs7rbJ3ItHpvesytJlNq8+n LDlxf3bZCSC9DDgQONhg4TpVIJ7awUhPZ+2bje+Z7coIJditddwtLQDZo1ZVGHki iBsci0CkA2OVjxUc41WjoT0Dyt1aeDntx5ku1R54g/mPTczaYRLS6lYWzpdvxbqG pcv2FKpsXBYjOmCfWM57Mm0XLtAJk5FWLs2GH3WrfNc8uHWNxGt3fkGA8rfXXsDu eat8BZZ2mf9GuzyOUqWnLKzOalNvj7m8cUsgW8eEtiManwD0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6wlpzOWfJYZTZ6SarENxKdIV6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y4ZmYzZjktNTEzNC0z ZjNiLWI3MGYtNWM4ZjVhYTFjNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp+3bLQS+xK1zSSR1HQ1tmDVnFCJO6V2zKwapIFrzyfC8NqmqgvhMWK WXLQ6qEFFlVGpem07mxlWQAkIfbGAdSeIc8PDEyzaAbo2/VwBNif4cCi25ldipdI AGHNnXOtw93IxU6EZNEPu0n5Ip0X4RsixGm4hKkj8ddO8qYhiU+H/Jcy5cALF9WW LyNDdI+5KpTTQk03GQgUyWoZkyvOgmundOmPMQQ9ATyKImfI9ZCThoCcQTsH0ieU h3GY/Jg7aPxzO4Yo2xVpcZNeW4E2NecwGR5SR4igtSUMqA99Mm0ggxGXuoTvNXnW Z93a6DTOLv5s60RQmh7KbM4H7A/SwaQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:10 2026 by rpki-client