$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a688ff2-0a18-3da9-ac8f-69bf2ee3a254.roa File: 5a688ff2-0a18-3da9-ac8f-69bf2ee3a254.roa (raw, json) Hash identifier: 3Wj3Q8uPYHuivbewPHgf/JQxs24NxldCQVE3lCPA+OI= Subject key identifier: 11:0B:6C:D5:AC:63:2E:17:F3:27:FF:99:AC:4D:2A:F6:EF:44:9E:52 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FFC49779095BE88415700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a688ff2-0a18-3da9-ac8f-69bf2ee3a254.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397223 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:fc:49:77:90:95:be:88:41:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=8b867a0b-b01e-46ff-be86-65ed4c0a3a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:00:97:3a:97:5b:05:20:4b:b7:93:47:0c: 4c:dd:9c:0e:a6:f8:3f:48:4f:31:67:d9:a1:86:9d: 72:4c:91:a0:16:3e:71:cc:cf:53:a9:1b:f8:34:87: 02:e5:cf:a9:f9:39:9f:d6:1c:9b:88:ae:74:15:22: 95:f0:29:d5:df:bf:dc:3a:ef:31:fa:17:84:31:71: dd:93:08:14:fe:ef:3a:7f:ea:4a:9b:f4:54:00:1b: 71:75:35:a2:0f:5d:83:55:78:2e:23:9f:67:04:cd: 6d:e2:7e:26:34:bc:e9:17:5c:fa:78:18:0d:70:96: df:f2:8a:e9:76:04:0d:42:85:75:9c:63:aa:9f:27: 4d:e9:9e:b4:d1:8f:b3:8a:9a:92:b5:aa:fe:d6:bd: f0:6e:57:80:69:07:3f:94:34:d6:9b:3f:ab:bc:43: 42:a8:a3:51:1c:13:ab:d4:fa:d9:dd:2e:a4:8e:c1: b7:e6:bf:0a:55:86:30:fe:7c:9d:8f:6f:ee:c6:89: 44:b3:a2:46:3f:95:f9:1c:5e:c4:d7:54:0d:b4:eb: 04:b3:7e:c7:d2:b1:ae:f2:0a:6d:59:b9:a9:b0:2c: d3:95:c3:d5:d1:ad:90:e9:23:c2:50:4a:e6:de:89: bc:e5:88:f8:bf:53:2c:7c:fc:29:7e:9a:30:e2:04: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:6C:D5:AC:63:2E:17:F3:27:FF:99:AC:4D:2A:F6:EF:44:9E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a688ff2-0a18-3da9-ac8f-69bf2ee3a254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:91:7b:03:74:ca:f1:05:13:4c:cf:05:a6:45:bb:c6:3d:1d: ce:6a:04:e4:fe:28:4c:05:9f:7c:a5:5c:01:33:b2:21:d3:df: 32:c0:c2:b5:9a:1e:cf:26:ae:d1:42:df:c6:08:f7:54:06:0f: 92:eb:42:2b:f4:5d:15:c3:04:6e:eb:b2:c2:8a:6f:c9:74:80: 3a:72:b5:36:3f:87:e7:05:a3:9e:7d:5b:53:ee:67:92:84:ea: 48:de:ef:43:1b:f8:1f:8d:97:89:b0:c0:50:98:89:3a:a0:3f: cf:ba:e7:13:ac:89:f9:ee:1d:82:d9:05:be:ac:6a:22:bb:41: 09:02:5e:e1:4c:e3:3b:f0:39:7b:aa:3f:09:43:49:bd:cc:46: 65:fb:46:76:95:ff:3b:06:7b:3c:50:bc:cf:2f:6f:ff:79:f4: 8a:ec:72:13:0c:32:a0:2b:c1:a5:f9:df:87:b4:48:ce:20:b0: 63:db:3a:a7:8c:9b:ad:8d:ce:b1:3d:03:c3:0c:be:4c:97:04: 6d:af:e7:5e:39:d8:f9:52:bb:95:12:39:ac:d1:bf:fb:9d:65: 24:1f:86:57:91:6f:1d:7b:d5:40:77:44:1a:de:fd:73:1e:4f: 0e:a2:86:ff:6b:36:29:fb:8c:23:42:d4:46:e5:13:10:da:0a: 1c:44:32:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/xJd5CVvohBVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OGI4NjdhMGItYjAxZS00NmZmLWJlODYtNjVlZDRjMGEzYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7wAlzqXWwUgS7eTRwxM3ZwOpvg/SE8xZ9mh hp1yTJGgFj5xzM9TqRv4NIcC5c+p+Tmf1hybiK50FSKV8CnV37/cOu8x+heEMXHd kwgU/u86f+pKm/RUABtxdTWiD12DVXguI59nBM1t4n4mNLzpF1z6eBgNcJbf8orp dgQNQoV1nGOqnydN6Z600Y+zipqStar+1r3wbleAaQc/lDTWmz+rvENCqKNRHBOr 1PrZ3S6kjsG35r8KVYYw/nydj2/uxolEs6JGP5X5HF7E11QNtOsEs37H0rGu8gpt WbmpsCzTlcPV0a2Q6SPCUErm3om85Yj4v1MsfPwpfpow4gTVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBELbNWsYy4X8yf/maxNKvbvRJ5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWE2ODhmZjItMGExOC0z ZGE5LWFjOGYtNjliZjJlZTNhMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWRewN0yvEFE0zPBaZFu8Y9Hc5qBOT+KEwFn3ylXAEzsiHT3zLAwrWa Hs8mrtFC38YI91QGD5LrQiv0XRXDBG7rssKKb8l0gDpytTY/h+cFo559W1PuZ5KE 6kje70Mb+B+Nl4mwwFCYiTqgP8+65xOsifnuHYLZBb6saiK7QQkCXuFM4zvwOXuq PwlDSb3MRmX7RnaV/zsGezxQvM8vb/959IrschMMMqArwaX534e0SM4gsGPbOqeM m62NzrE9A8MMvkyXBG2v51452PlSu5USOazRv/udZSQfhleRbx171UB3RBre/XMe Tw6ihv9rNin7jCNC1EblExDaChxEMpY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:59:19 2026 by rpki-client