$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/657a5aa4-ec45-374e-8f2a-5bd97b5f4cc2.roa File: 657a5aa4-ec45-374e-8f2a-5bd97b5f4cc2.roa (raw, json) Hash identifier: CRQ8t7tnpjCiYbVNoh2/0vk2uVAF7BEbfkmYlfzd9tw= Subject key identifier: 73:84:F4:49:EF:40:BE:09:2A:87:D4:D3:E0:D9:7C:9F:3E:27:A2:14 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584CDC67BD9778307B67AE1BF400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/657a5aa4-ec45-374e-8f2a-5bd97b5f4cc2.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 397214 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:bd:97:78:30:7b:67:ae:1b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=7c406e05-f3eb-4063-b7cb-79932d3adff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:e0:29:82:a6:9b:15:25:2d:dd:19:b3:8e: 8a:1e:20:86:c3:b6:7a:c5:d8:b4:a6:33:5c:21:3c: e6:c4:bd:89:4c:8d:28:62:33:9e:8a:7d:b6:3e:fb: f7:2d:8f:73:51:0c:93:4b:59:71:b0:1d:01:a3:e7: e8:3e:9b:1f:1c:7c:ef:2b:8c:5e:9a:df:05:61:4e: a8:96:a8:62:66:77:27:a4:b0:15:dd:78:ac:6e:fd: e1:70:84:61:96:c5:06:1e:df:ed:9a:c4:26:66:1f: f8:42:38:c3:34:14:32:d0:38:20:7d:35:7c:31:02: 49:d5:5c:4d:2d:0f:cb:b7:d3:0d:10:64:24:50:f5: 2c:60:a4:ce:b6:b6:26:97:81:03:3c:7f:cb:b4:42: d9:88:f5:6d:4c:23:28:ce:bf:4f:3e:3d:68:95:84: ee:ca:b3:33:b3:c8:6e:39:23:d7:b5:0f:45:7f:0d: 3c:63:19:bd:d3:48:aa:b3:5d:86:1f:34:c9:89:5c: d4:ec:df:10:99:59:6a:10:6f:2f:8d:0d:1f:07:69: f0:66:07:0d:42:3f:b6:0a:95:e7:c5:68:3d:b2:b9: 4b:87:23:f5:f3:5b:62:7d:5c:0b:8c:0f:b7:bd:c6: fe:cb:a3:13:95:f8:79:ba:c1:21:d5:cf:e6:b2:88: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:F4:49:EF:40:BE:09:2A:87:D4:D3:E0:D9:7C:9F:3E:27:A2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/657a5aa4-ec45-374e-8f2a-5bd97b5f4cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:87:16:62:16:28:9b:e0:3e:a3:fc:fb:c8:01:b0:1a:cb:94: dd:09:c5:58:9e:08:ba:4e:3e:ea:d1:79:37:b2:e1:2b:32:c0: 37:5d:95:9d:7d:0d:4e:33:19:39:53:fa:f7:d8:12:2e:01:18: 02:78:8e:ff:5f:58:7a:06:c1:37:7f:48:37:ac:bc:70:91:95: fc:52:e6:98:8d:a1:0c:1c:b1:a9:1c:a8:de:56:07:ff:a1:7b: 3c:b8:75:11:73:87:87:5f:ed:57:32:0e:b6:81:d6:b0:d7:b3: 7c:a2:26:ae:13:e0:79:32:e2:d1:2e:b7:3e:a0:29:50:60:6f: 0e:70:a1:2c:4a:22:92:ab:80:d8:44:93:cb:a2:49:4c:7a:7b: d3:84:f2:ba:9d:04:ac:4d:d2:e5:41:18:4c:ec:4a:22:cd:61: c7:87:ec:fb:51:2c:a6:e3:68:87:52:24:fa:57:83:f9:fc:84: ab:7f:99:e4:2c:9e:87:47:98:d4:4b:37:97:f6:9a:55:a0:72: 8a:50:f7:32:14:aa:78:a3:20:ec:59:96:1f:ad:c2:fa:a5:71: e9:61:43:55:ae:91:30:4c:e6:56:ee:42:17:75:e0:ff:95:c9: 81:8e:d2:09:ec:d5:ed:9c:b9:f9:c8:45:91:84:39:e2:1c:40: 12:66:d2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ72XeDB7Z64b9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk N2M0MDZlMDUtZjNlYi00MDYzLWI3Y2ItNzk5MzJkM2FkZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiXgKYKmmxUlLd0Zs46KHiCGw7Z6xdi0pjNc ITzmxL2JTI0oYjOein22Pvv3LY9zUQyTS1lxsB0Bo+foPpsfHHzvK4xemt8FYU6o lqhiZncnpLAV3Xisbv3hcIRhlsUGHt/tmsQmZh/4QjjDNBQy0DggfTV8MQJJ1VxN LQ/Lt9MNEGQkUPUsYKTOtrYml4EDPH/LtELZiPVtTCMozr9PPj1olYTuyrMzs8hu OSPXtQ9Ffw08Yxm900iqs12GHzTJiVzU7N8QmVlqEG8vjQ0fB2nwZgcNQj+2CpXn xWg9srlLhyP181tifVwLjA+3vcb+y6MTlfh5usEh1c/msogmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOE9EnvQL4JKofU0+DZfJ8+J6IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjU3YTVhYTQtZWM0NS0z NzRlLThmMmEtNWJkOTdiNWY0Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyHFmIWKJvgPqP8+8gBsBrLlN0JxVieCLpOPurReTey4SsywDddlZ19 DU4zGTlT+vfYEi4BGAJ4jv9fWHoGwTd/SDesvHCRlfxS5piNoQwcsakcqN5WB/+h ezy4dRFzh4df7VcyDraB1rDXs3yiJq4T4Hky4tEutz6gKVBgbw5woSxKIpKrgNhE k8uiSUx6e9OE8rqdBKxN0uVBGEzsSiLNYceH7PtRLKbjaIdSJPpXg/n8hKt/meQs nodHmNRLN5f2mlWgcopQ9zIUqnijIOxZlh+twvqlcelhQ1WukTBM5lbuQhd14P+V yYGO0gns1e2cufnIRZGEOeIcQBJm0kM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:29:55 2026 by rpki-client