$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa File: a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa (raw, json) Hash identifier: R1VIOZl453r39916jH6dVSUUhZE1We7P/cGP5sC61yI= Subject key identifier: 8A:36:A2:94:6D:13:38:0B:53:1B:74:A9:5B:85:24:54:E5:E7:84:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FEEE98D84FBD8A8FD6A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397235 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ee:e9:8d:84:fb:d8:a8:fd:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=1cac0eee-7054-4ae9-842e-04f0909decd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:9c:4c:ca:db:6e:9d:b5:a5:ae:b1:57:b0: 78:a0:f7:97:e3:64:80:15:ef:5c:20:2e:ed:78:0c: 7a:a3:4c:4f:2c:e0:e8:18:34:dd:44:03:eb:1f:23: 72:e7:27:06:42:9f:ed:d3:58:02:71:df:5f:68:f7: f0:32:7e:76:7f:6c:16:8c:c6:a0:cc:e8:72:80:df: b3:0d:01:ce:d3:64:f6:92:c4:b9:6b:2e:51:46:e1: 77:6d:3e:56:05:16:67:7e:46:c9:4b:89:ed:56:d8: 97:a7:ab:3e:f6:5f:7c:36:6d:1b:21:c6:11:c7:d6: db:17:60:e2:c6:f2:8a:eb:38:a5:7e:23:52:f4:9e: 23:f6:f2:b3:30:63:87:a3:0b:99:f5:6a:9e:93:e1: ee:c9:06:61:86:46:00:e3:70:06:89:1b:b7:8e:51: 41:9e:23:9e:c2:02:39:2d:f3:c1:fb:10:e5:f1:57: 21:bf:bb:bb:9c:02:50:9b:fe:2b:d1:89:cd:56:1b: 20:64:57:4f:2f:29:53:d5:c8:ce:ae:1d:be:e8:a3: 11:3e:ab:7e:89:c3:68:f4:21:67:72:6a:c0:bc:7f: 9b:2d:ab:32:4a:f9:7e:bc:09:15:dd:17:8d:00:80: 1c:13:25:89:07:1a:0b:ba:ae:a9:82:b0:01:79:e5: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:A2:94:6D:13:38:0B:53:1B:74:A9:5B:85:24:54:E5:E7:84:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a1abee41-8717-3ff2-9f78-6dffe0b2a0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:35:02:6b:85:ca:67:a5:3c:08:75:0d:3f:44:58:e9:1b: 31:94:b0:fd:9f:2c:ba:9c:00:dd:b1:0a:d6:0d:21:f0:70:01: 39:a1:81:47:61:5c:c7:d8:7c:44:9a:cf:4a:38:5f:0b:84:4d: 75:f8:4b:6c:62:01:ad:02:3b:8a:d9:c3:1c:b7:7a:5f:0c:49: cd:45:48:79:25:37:5d:66:56:a4:17:86:0a:c1:be:2d:fa:58: 56:f7:df:5a:56:1f:0d:fc:ae:4b:7c:45:a4:20:a2:84:c3:ad: ad:6c:dc:3d:61:20:13:11:2a:1d:e4:a2:8d:5f:0b:ad:5c:b3: f2:fe:03:1d:43:bb:3c:38:09:84:86:90:31:3f:b8:a8:7c:0e: a7:89:22:2c:85:66:91:97:f4:40:5a:69:4d:a0:d3:32:6d:2c: ad:c4:89:87:bd:40:d8:81:72:b3:d5:9f:b8:44:10:a0:1b:bc: c1:50:9a:51:7e:4f:ec:1d:a3:80:ec:e2:78:9f:0c:e7:0a:05: 8d:8e:7b:90:c7:c1:37:8d:58:45:a7:79:d2:df:e6:f3:f1:78: 80:49:46:a8:a5:84:7c:59:4c:64:07:36:75:a1:8b:d8:13:58: e3:7d:a3:9d:c9:d4:69:74:18:5d:49:cd:0e:1a:79:a6:da:14: 14:b9:aa:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+7pjYT72Kj9agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MWNhYzBlZWUtNzA1NC00YWU5LTg0MmUtMDRmMDkwOWRlY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig2cTMrbbp21pa6xV7B4oPeX42SAFe9cIC7t eAx6o0xPLODoGDTdRAPrHyNy5ycGQp/t01gCcd9faPfwMn52f2wWjMagzOhygN+z DQHO02T2ksS5ay5RRuF3bT5WBRZnfkbJS4ntVtiXp6s+9l98Nm0bIcYRx9bbF2Di xvKK6zilfiNS9J4j9vKzMGOHowuZ9Wqek+HuyQZhhkYA43AGiRu3jlFBniOewgI5 LfPB+xDl8Vchv7u7nAJQm/4r0YnNVhsgZFdPLylT1cjOrh2+6KMRPqt+icNo9CFn cmrAvH+bLasySvl+vAkV3ReNAIAcEyWJBxoLuq6pgrABeeXrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo2opRtEzgLUxt0qVuFJFTl54QGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTFhYmVlNDEtODcxNy0z ZmYyLTlmNzgtNmRmZmUwYjJhMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE7NQJrhcpnpTwIdQ0/RFjpGzGUsP2fLLqcAN2xCtYNIfBwATmhgUdh XMfYfESaz0o4XwuETXX4S2xiAa0CO4rZwxy3el8MSc1FSHklN11mVqQXhgrBvi36 WFb331pWHw38rkt8RaQgooTDra1s3D1hIBMRKh3koo1fC61cs/L+Ax1Duzw4CYSG kDE/uKh8DqeJIiyFZpGX9EBaaU2g0zJtLK3EiYe9QNiBcrPVn7hEEKAbvMFQmlF+ T+wdo4Ds4nifDOcKBY2Oe5DHwTeNWEWnedLf5vPxeIBJRqilhHxZTGQHNnWhi9gT WON9o53J1Gl0GF1JzQ4aeabaFBS5qik= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:44 2026 by rpki-client