$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/444368c9-a1c9-31ac-a465-2d2d97ba028c.roa File: 444368c9-a1c9-31ac-a465-2d2d97ba028c.roa (raw, json) Hash identifier: 9hZqu1VUlc0xolPSh/NKiHWGd4FSH9xePDDRw2SpU8E= Subject key identifier: 25:45:38:AF:0D:9F:2C:94:33:56:61:E8:E5:1E:50:82:24:EF:25:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D091298518D2D2F2F5EE4F500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/444368c9-a1c9-31ac-a465-2d2d97ba028c.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397220 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:98:51:8d:2d:2f:2f:5e:e4:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=92ebf3ca-5a2e-4355-9101-ea7cb8857069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:40:d6:4c:e0:bd:9c:10:6c:94:05:d3:63: 46:ef:fc:7b:9f:77:a3:9d:b5:02:a7:ac:79:ec:db: 12:74:ad:64:8a:04:5d:1d:19:b0:49:66:3d:ae:84: 1c:8b:8f:dd:0e:e9:8f:29:30:b0:3c:41:8d:c8:c8: 85:8e:89:98:ea:e5:4d:69:aa:3c:b7:b3:b1:8d:3b: 6a:f6:73:60:42:01:2a:36:17:df:48:19:a0:d5:6f: 87:bd:fa:3d:37:01:37:72:7a:94:64:c2:cf:29:ce: 47:7a:fa:23:de:74:1c:06:92:a2:61:12:96:85:b9: 0e:d1:6f:2e:17:5d:b3:fc:9c:e9:ca:7d:06:f4:dc: 4e:94:a0:b5:b9:05:f1:cc:d6:2f:7b:d1:fc:88:40: 1a:da:15:d3:66:a7:6a:3c:c2:2d:1b:77:5d:7b:3d: b5:d1:24:eb:0f:5b:a2:dc:07:c2:64:10:1c:b4:64: e9:af:5d:60:d0:db:8c:b8:6a:d3:6d:b6:92:25:e5: e7:cf:89:e3:31:94:27:b8:af:43:a1:df:a9:eb:a3: 99:1f:a5:9e:97:55:69:0a:c3:92:30:0e:b8:f4:9f: 2c:ea:e6:93:6d:de:fc:ea:96:b5:fe:04:6a:be:60: de:ea:0c:27:3e:76:78:66:49:97:20:34:5f:95:dc: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:38:AF:0D:9F:2C:94:33:56:61:E8:E5:1E:50:82:24:EF:25:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/444368c9-a1c9-31ac-a465-2d2d97ba028c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:54:13:97:04:c8:de:79:50:e6:fa:33:27:b4:aa:3e:7c:c5: 3b:89:16:be:17:8b:5d:65:67:da:cf:ac:2f:aa:04:8a:4c:37: f4:1a:78:74:58:58:45:5f:de:d6:31:66:f9:c9:21:ea:ce:1a: 46:56:5a:9a:12:fc:92:07:fc:cb:e8:42:de:7c:88:87:bd:64: 02:af:73:d4:aa:a1:31:af:47:0b:91:34:47:bd:5f:b4:a6:6f: 2c:d1:35:4e:cd:dd:ac:a0:5a:7e:c1:62:48:c2:73:ab:94:3f: 57:95:6b:91:5c:4f:80:9f:7a:6a:d9:46:ee:28:cb:24:65:9c: 10:d1:67:1b:99:61:d1:9e:69:f9:f7:5a:d4:96:b1:89:d2:b4: 5f:b9:a0:fa:ad:0a:51:8a:fe:37:26:2a:d1:4f:d9:0d:63:4f: 51:55:f0:53:65:dc:74:d2:5e:5a:55:52:f6:fa:27:03:74:b8: 87:21:01:d9:c9:97:82:8e:0b:52:13:a8:8e:6e:5d:46:32:69: 45:f8:2b:ab:5e:e1:8c:1c:84:83:bc:cb:76:47:52:d0:af:90: 6d:16:bd:ff:29:87:98:48:5e:8e:e8:ae:60:de:f7:6a:4e:32: ef:af:87:a2:ca:3a:d1:a4:14:2d:33:47:8b:75:65:b0:6c:42: c0:ec:fd:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEphRjS0vL17k9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTJlYmYzY2EtNWEyZS00MzU1LTkxMDEtZWE3Y2I4ODU3MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVA1kzgvZwQbJQF02NG7/x7n3ejnbUCp6x5 7NsSdK1kigRdHRmwSWY9roQci4/dDumPKTCwPEGNyMiFjomY6uVNaao8t7OxjTtq 9nNgQgEqNhffSBmg1W+Hvfo9NwE3cnqUZMLPKc5Hevoj3nQcBpKiYRKWhbkO0W8u F12z/Jzpyn0G9NxOlKC1uQXxzNYve9H8iEAa2hXTZqdqPMItG3ddez210STrD1ui 3AfCZBActGTpr11g0NuMuGrTbbaSJeXnz4njMZQnuK9Dod+p66OZH6Wel1VpCsOS MA649J8s6uaTbd786pa1/gRqvmDe6gwnPnZ4ZkmXIDRfldyFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVFOK8NnyyUM1Zh6OUeUIIk7yX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDQ0MzY4YzktYTFjOS0z MWFjLWE0NjUtMmQyZDk3YmEwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9UE5cEyN55UOb6Mye0qj58xTuJFr4Xi11lZ9rPrC+qBIpMN/QaeHRY WEVf3tYxZvnJIerOGkZWWpoS/JIH/MvoQt58iIe9ZAKvc9SqoTGvRwuRNEe9X7Sm byzRNU7N3aygWn7BYkjCc6uUP1eVa5FcT4CfemrZRu4oyyRlnBDRZxuZYdGeafn3 WtSWsYnStF+5oPqtClGK/jcmKtFP2Q1jT1FV8FNl3HTSXlpVUvb6JwN0uIchAdnJ l4KOC1ITqI5uXUYyaUX4K6te4YwchIO8y3ZHUtCvkG0Wvf8ph5hIXo7ormDe92pO Mu+vh6LKOtGkFC0zR4t1ZbBsQsDs/UU= -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:41 2026 by rpki-client