$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fdf0c3a-9d68-3ce2-9bdd-d554805f31cc.roa File: 5fdf0c3a-9d68-3ce2-9bdd-d554805f31cc.roa (raw, json) Hash identifier: sEZNl1za6J52KNhWlx44DbHQIgpXc1rqOxd2dBMlLHw= Subject key identifier: DD:81:B7:BF:1B:F7:4B:F6:D6:A5:9F:68:A6:4B:0C:5E:E3:BF:A7:38 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DE9B0A0A03774D5D4E717EA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fdf0c3a-9d68-3ce2-9bdd-d554805f31cc.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 12008 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:a0:a0:37:74:d5:d4:e7:17:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=c57b39f8-0249-4a3e-87a5-ca3ec599b6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:60:e0:fd:32:49:b7:33:1e:b7:21:c3:e3: 1d:35:d5:bc:5c:51:49:17:da:06:19:e3:ee:9b:99: 03:94:18:e0:12:50:35:9d:0d:29:54:9e:d6:63:f0: f6:41:b2:75:24:8f:25:c5:f6:cf:da:4e:be:23:c1: c5:3a:3e:81:79:cc:5e:a2:43:dd:d6:f0:38:0e:bf: 42:00:72:01:a1:06:f1:a0:54:56:a2:65:2f:65:26: b3:5c:fa:28:8b:cf:7d:fc:d3:38:b3:85:ec:8a:66: 53:12:fa:2b:50:30:bd:34:60:78:6f:64:8c:79:ef: 3a:a0:16:70:b2:8c:c9:52:cd:88:62:3f:b3:c3:29: bb:f8:52:00:1f:12:07:08:27:74:81:f7:9c:7e:57: 37:65:5a:12:67:06:68:5d:d5:e0:a7:3d:dd:59:4f: f0:68:c6:29:97:34:61:76:24:53:a7:87:4c:3c:86: 20:f5:a3:4f:b3:6c:71:a9:b6:8d:e5:20:c0:92:41: 2b:4f:d7:c9:29:b4:35:9a:82:79:d9:e7:71:ee:44: 86:59:c6:d9:18:d8:68:d9:f2:ca:1a:7c:e0:a4:8a: 7b:f9:b0:8e:e3:67:7d:85:9b:e7:59:16:34:1b:ca: a2:b7:bb:9c:28:e1:ac:14:d1:ef:f7:1f:49:b5:f9: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:81:B7:BF:1B:F7:4B:F6:D6:A5:9F:68:A6:4B:0C:5E:E3:BF:A7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5fdf0c3a-9d68-3ce2-9bdd-d554805f31cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:85:dc:44:fa:70:9e:e6:73:7b:9c:e1:7c:b2:99:90:3a:d0: bf:d8:bf:f6:d8:de:79:50:24:bc:e4:e0:a9:3b:1f:07:c8:86: 83:49:8c:ef:71:e3:47:1c:4c:11:f5:5b:72:0a:7c:25:cd:ae: 48:60:3a:08:3d:08:fb:93:1e:13:6c:f8:20:f0:e5:b4:75:f9: 9d:4c:6a:33:7d:80:b5:50:b3:83:66:6b:48:f9:68:86:d4:b6: 92:0c:f8:a1:90:4b:c8:67:c6:cc:d9:d3:3e:a6:c5:41:6a:c1: eb:33:7a:6f:b3:7e:b1:f8:47:e8:e0:a6:09:72:5d:4a:22:d7: 1b:f0:69:d0:c4:20:d8:3b:fa:85:4f:e1:6f:38:59:f4:e0:41: 55:0d:b9:a4:31:04:59:71:52:3c:e7:d6:3f:ea:ce:5f:a5:94: fe:a4:c8:28:16:7d:32:e0:0f:aa:2e:42:2b:3d:c3:78:9c:44: f1:38:69:55:dc:f9:f4:a0:64:9e:30:33:39:a4:b8:93:07:c9: 75:15:42:1a:d9:64:9b:59:4a:54:07:17:2c:35:5d:6c:5b:ae: 8d:2d:d7:4d:e3:13:cc:87:83:27:18:0a:a2:26:8e:26:a7:c3: df:52:c7:47:09:84:ca:86:e7:4c:cc:d7:f4:cb:74:e9:58:67: 5d:4f:4f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psKCgN3TV1OcX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk YzU3YjM5ZjgtMDI0OS00YTNlLTg3YTUtY2EzZWM1OTliNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Ng4P0ySbczHrchw+MdNdW8XFFJF9oGGePu m5kDlBjgElA1nQ0pVJ7WY/D2QbJ1JI8lxfbP2k6+I8HFOj6BecxeokPd1vA4Dr9C AHIBoQbxoFRWomUvZSazXPooi899/NM4s4XsimZTEvorUDC9NGB4b2SMee86oBZw sozJUs2IYj+zwym7+FIAHxIHCCd0gfecflc3ZVoSZwZoXdXgpz3dWU/waMYplzRh diRTp4dMPIYg9aNPs2xxqbaN5SDAkkErT9fJKbQ1moJ52edx7kSGWcbZGNho2fLK GnzgpIp7+bCO42d9hZvnWRY0G8qit7ucKOGsFNHv9x9JtfmzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Bt78b90v21qWfaKZLDF7jv6c4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWZkZjBjM2EtOWQ2OC0z Y2UyLTliZGQtZDU1NDgwNWYzMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+F3ET6cJ7mc3uc4XyymZA60L/Yv/bY3nlQJLzk4Kk7HwfIhoNJjO9x 40ccTBH1W3IKfCXNrkhgOgg9CPuTHhNs+CDw5bR1+Z1MajN9gLVQs4Nma0j5aIbU tpIM+KGQS8hnxszZ0z6mxUFqweszem+zfrH4R+jgpglyXUoi1xvwadDEINg7+oVP 4W84WfTgQVUNuaQxBFlxUjzn1j/qzl+llP6kyCgWfTLgD6ouQis9w3icRPE4aVXc +fSgZJ4wMzmkuJMHyXUVQhrZZJtZSlQHFyw1XWxbro0t103jE8yHgycYCqImjian w99Sx0cJhMqG50zM1/TLdOlYZ11PT1s= -----END CERTIFICATE-----Generated at Sat Jun 13 08:46:11 2026 by rpki-client