$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa File: 414ee527-1d6f-30dd-be1f-288ed342b4b5.roa (raw, json) Hash identifier: 87CbB3fJYBsNVEaAAA3lvjnGU2Y8yqqTmoE1rLfUq2U= Subject key identifier: C5:FE:1C:9B:0E:DA:5D:0B:78:C9:11:38:54:4B:A8:DB:BC:C3:7C:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912992EB7AAD0BF06AB5F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397233 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:99:2e:b7:aa:d0:bf:06:ab:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=468d9c7b-eae9-402f-af24-1dbcefd52c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1d:1c:da:8b:5e:be:0e:30:09:8e:9d:24:f1: 2f:4a:cb:27:32:24:e7:8f:33:fa:c8:9e:bf:89:57: 45:b3:f3:24:5f:10:2a:00:51:67:46:91:27:c4:ff: 61:f2:74:31:3a:e0:cc:e3:8a:44:81:61:72:27:ac: c5:f6:f3:af:4c:9b:a8:7f:3e:81:55:53:01:d1:70: 3e:7b:b4:f9:86:cd:29:bf:93:eb:fd:48:a6:c6:03: fb:35:1c:42:7e:5c:e5:f0:05:dd:4d:ac:f2:4a:7c: d7:07:ce:2d:0c:2f:3e:d7:38:0d:ba:7a:ec:f9:22: 8e:d9:15:27:88:b9:95:07:7f:e9:f1:ec:88:d2:a7: 39:86:91:aa:49:a9:9a:55:de:10:71:09:ae:6a:f8: f3:5a:6d:ba:85:b2:2e:f4:8e:ca:09:f3:c3:8a:fd: cb:f2:26:23:e3:2a:00:70:68:79:c5:5f:43:da:8a: 5d:bf:20:3e:9a:29:73:00:a2:fa:f4:b6:b7:e3:b2: 0d:76:d9:c3:7e:f6:87:bd:b4:27:e1:6f:66:81:58: 54:33:e7:1d:1c:c4:25:d6:82:76:10:ed:ee:fc:a0: f7:4f:11:c9:68:f3:3b:ab:0a:b0:94:26:53:e5:88: 83:17:ec:50:a6:c6:e3:dc:0c:ae:07:5d:eb:e3:f1: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FE:1C:9B:0E:DA:5D:0B:78:C9:11:38:54:4B:A8:DB:BC:C3:7C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/414ee527-1d6f-30dd-be1f-288ed342b4b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e3:42:ec:ee:5c:0f:c5:6d:d1:b6:55:db:41:d1:e7:85:fc: 8c:0c:3d:f9:e9:11:20:95:c9:e6:2e:a7:58:f8:dc:51:2d:ce: 5e:12:81:e8:19:20:db:27:f1:86:93:10:ff:99:fa:90:51:b9: 04:c5:e8:0b:e4:44:19:83:41:dd:cf:13:c5:33:4d:e1:1b:88: 43:21:38:bd:70:0f:49:75:6c:ac:3f:df:21:4e:43:40:cd:29: 57:4f:32:eb:04:13:34:80:c0:32:62:bd:52:0e:ca:d4:cd:da: dd:6e:5a:94:e1:64:0e:7e:10:17:05:c4:83:bc:e8:d3:42:46: c5:6f:ed:26:46:f2:69:00:ab:19:cd:82:5a:95:8e:df:75:95: 37:1a:dc:f4:75:19:45:c2:0e:9f:50:e0:8d:2d:65:a7:6b:97: 32:54:08:a5:c4:48:a0:e3:d9:01:f3:61:b4:b4:ce:aa:71:fc: 14:16:7b:14:7d:52:de:10:cc:73:12:18:de:ff:4c:9f:c5:ea: a7:09:5e:ae:79:db:fc:50:31:99:cf:ef:bc:07:55:23:d2:04: 1c:16:b5:cc:6a:07:50:3c:ab:8b:40:8a:d0:61:62:9e:1a:9b: a2:d0:de:62:b5:98:38:62:27:c8:16:cc:68:fd:4d:39:a7:7e: c6:95:5f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpkut6rQvwarXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDY4ZDljN2ItZWFlOS00MDJmLWFmMjQtMWRiY2VmZDUyYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB0c2otevg4wCY6dJPEvSssnMiTnjzP6yJ6/ iVdFs/MkXxAqAFFnRpEnxP9h8nQxOuDM44pEgWFyJ6zF9vOvTJuofz6BVVMB0XA+ e7T5hs0pv5Pr/UimxgP7NRxCflzl8AXdTazySnzXB84tDC8+1zgNunrs+SKO2RUn iLmVB3/p8eyI0qc5hpGqSamaVd4QcQmuavjzWm26hbIu9I7KCfPDiv3L8iYj4yoA cGh5xV9D2opdvyA+milzAKL69La347INdtnDfvaHvbQn4W9mgVhUM+cdHMQl1oJ2 EO3u/KD3TxHJaPM7qwqwlCZT5YiDF+xQpsbj3AyuB13r4/FcDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX+HJsO2l0LeMkROFRLqNu8w3yEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDE0ZWU1MjctMWQ2Zi0z MGRkLWJlMWYtMjg4ZWQzNDJiNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTjQuzuXA/FbdG2VdtB0eeF/IwMPfnpESCVyeYup1j43FEtzl4SgegZ INsn8YaTEP+Z+pBRuQTF6AvkRBmDQd3PE8UzTeEbiEMhOL1wD0l1bKw/3yFOQ0DN KVdPMusEEzSAwDJivVIOytTN2t1uWpThZA5+EBcFxIO86NNCRsVv7SZG8mkAqxnN glqVjt91lTca3PR1GUXCDp9Q4I0tZadrlzJUCKXESKDj2QHzYbS0zqpx/BQWexR9 Ut4QzHMSGN7/TJ/F6qcJXq552/xQMZnP77wHVSPSBBwWtcxqB1A8q4tAitBhYp4a m6LQ3mK1mDhiJ8gWzGj9TTmnfsaVX24= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:42 2026 by rpki-client