$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa File: a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa (raw, json) Hash identifier: gWeQsb19kTv0kwBtalbF7y2/RbRptpAXIjIGmQcS2fY= Subject key identifier: C9:2F:AE:70:2D:33:15:DA:1A:94:84:32:C5:E7:77:AC:AB:C9:B9:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D0912963ED0414EE24B7C1740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397221 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:96:3e:d0:41:4e:e2:4b:7c:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f6b184d1-9f3a-4a48-8a38-42cc0bb75067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:0c:73:b5:be:d1:b4:11:42:84:ed:fd:28: 41:41:fd:45:c6:82:8f:86:65:a0:bf:ea:bc:a8:50: d8:a3:8d:24:90:7e:e8:2a:f2:ad:33:60:b5:52:73: 5c:e1:73:61:14:4b:6c:f1:02:5c:37:27:78:58:af: 56:53:d8:e6:f7:84:4e:4c:29:74:a9:bf:20:3a:c7: e7:cc:b8:37:1a:ef:58:6f:d2:0c:97:04:b2:3c:7d: 90:f7:c6:2e:7d:bb:28:bc:2a:95:4e:b7:25:88:f3: b1:da:6b:d2:b6:f7:87:83:98:47:0e:34:b8:f2:82: 75:6b:19:04:79:f9:99:fc:34:50:bf:4a:67:03:21: a9:fe:a1:0d:03:61:08:d5:cb:78:20:cf:0b:ab:16: 55:2d:7a:9f:2a:1a:6b:62:db:35:e6:ca:6f:52:63: ca:09:84:1d:2f:e3:a9:60:9b:6f:9e:10:ec:97:44: 8c:3f:e8:8a:48:b6:7d:39:c6:67:d9:6a:d3:83:d5: 64:41:5c:bc:02:22:95:4b:1d:a6:8a:0e:52:df:fc: 22:ab:76:8a:80:b1:98:fc:f0:4b:9e:52:fe:3f:38: 5c:8e:1f:ab:88:36:73:4c:3c:bf:50:4b:5d:f8:ba: 1f:1f:ce:dd:e8:be:c7:1d:41:e4:7f:ed:d6:95:b4: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:AE:70:2D:33:15:DA:1A:94:84:32:C5:E7:77:AC:AB:C9:B9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3d873df-9ddf-3692-be61-d56a2ee6e4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d6:15:22:9a:2a:d3:fb:fc:91:e2:f1:6a:5f:4f:12:1c:22: a3:52:f7:ee:f3:5f:ed:12:70:3c:ab:e5:ae:0b:d7:e8:82:fb: ae:f0:be:c4:da:ce:56:cc:45:b5:39:cc:36:93:40:a7:54:31: 0b:29:3b:12:2c:33:fc:57:fe:02:d5:6b:98:09:49:6c:cd:1c: 3e:a8:2e:2f:66:84:2c:a1:cb:29:8d:25:1e:4c:2e:9f:86:d1: ef:36:af:98:f0:ab:0d:a5:13:fa:ef:74:27:d0:de:70:c8:16: 0b:2d:15:b7:68:9a:61:7f:36:75:3a:99:cd:0f:fa:fd:74:b2: 81:cd:4b:cb:18:b1:6b:0c:29:a0:a8:31:ee:a0:29:06:c2:a0: af:50:69:f5:de:05:7f:6e:f6:bc:49:cd:ec:04:e1:46:34:d0: af:db:9a:18:b3:56:c7:e1:7b:24:f4:93:af:d5:52:23:b0:4c: fb:1b:d3:29:8d:b1:52:a4:71:6d:01:0a:95:71:d7:ac:ff:e4: a1:13:0a:8e:0f:fa:82:09:19:51:87:26:94:92:a3:ca:d6:dc: 64:60:26:a4:52:22:b6:7a:4e:b0:8b:f7:22:26:0d:0d:ab:cc: 9a:1a:be:7c:6e:bd:f2:c4:3d:3c:7a:81:0d:96:11:fb:d6:28: ad:78:d1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpY+0EFO4kt8F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjZiMTg0ZDEtOWYzYS00YTQ4LThhMzgtNDJjYzBiYjc1MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcIMc7W+0bQRQoTt/ShBQf1FxoKPhmWgv+q8 qFDYo40kkH7oKvKtM2C1UnNc4XNhFEts8QJcNyd4WK9WU9jm94ROTCl0qb8gOsfn zLg3Gu9Yb9IMlwSyPH2Q98YufbsovCqVTrcliPOx2mvStveHg5hHDjS48oJ1axkE efmZ/DRQv0pnAyGp/qENA2EI1ct4IM8LqxZVLXqfKhprYts15spvUmPKCYQdL+Op YJtvnhDsl0SMP+iKSLZ9OcZn2WrTg9VkQVy8AiKVSx2mig5S3/wiq3aKgLGY/PBL nlL+Pzhcjh+riDZzTDy/UEtd+LofH87d6L7HHUHkf+3WlbTuVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkvrnAtMxXaGpSEMsXnd6yryblzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTNkODczZGYtOWRkZi0z NjkyLWJlNjEtZDU2YTJlZTZlNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3WFSKaKtP7/JHi8WpfTxIcIqNS9+7zX+0ScDyr5a4L1+iC+67wvsTa zlbMRbU5zDaTQKdUMQspOxIsM/xX/gLVa5gJSWzNHD6oLi9mhCyhyymNJR5MLp+G 0e82r5jwqw2lE/rvdCfQ3nDIFgstFbdommF/NnU6mc0P+v10soHNS8sYsWsMKaCo Me6gKQbCoK9QafXeBX9u9rxJzewE4UY00K/bmhizVsfheyT0k6/VUiOwTPsb0ymN sVKkcW0BCpVx16z/5KETCo4P+oIJGVGHJpSSo8rW3GRgJqRSIrZ6TrCL9yImDQ2r zJoavnxuvfLEPTx6gQ2WEfvWKK140T0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:54 2026 by rpki-client