$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa File: a9c196fc-54e7-30bc-ab95-303e9f201b08.roa (raw, json) Hash identifier: ogJtYAbog0QfBB+3iT//R2YdO9CGUH2HrLZbPYun4iQ= Subject key identifier: D2:B9:D7:D0:61:5A:F2:02:44:46:6A:37:26:B2:5E:F3:38:78:C6:57 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129D8EAED7BE8B8F1FD8C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397236 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:9d:8e:ae:d7:be:8b:8f:1f:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=02a3fc6c-2607-4986-8564-dd0d7579eacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:8c:6e:94:95:a7:99:e6:88:42:e2:66:b8: 86:0f:ee:15:63:93:36:cf:07:26:bc:fa:13:53:2c: 68:af:6d:11:50:ff:ae:92:8b:e0:dd:37:71:ba:4a: ae:44:52:e7:4a:07:cc:11:ce:52:85:c2:ac:96:7d: cf:95:7e:72:93:37:fa:1a:50:e0:f9:ce:29:36:d8: 6e:c3:54:c3:8a:88:27:f4:12:ea:85:91:d7:9e:72: e9:f7:05:51:89:c3:2f:74:33:52:da:f3:b7:17:50: 1f:ab:4d:b5:04:40:09:f2:99:19:78:ad:1f:57:dd: 51:95:b0:87:2a:27:cb:b6:97:be:14:34:12:22:70: 17:b7:a8:ae:73:d4:0c:33:88:06:52:af:0a:bb:e8: 49:f0:0e:00:54:0d:95:c3:f6:32:54:e4:01:66:9f: ae:92:3c:5e:5b:a7:26:41:50:6c:26:89:e5:5a:64: 0b:34:d0:d4:f3:d6:ff:7a:eb:0e:c0:7f:99:3a:f7: bb:a4:d1:0c:c3:f2:85:fc:b4:da:f6:57:f4:15:38: ac:24:c2:5b:e4:7f:ad:e6:06:6e:50:72:34:b5:2f: 9d:33:6b:db:0b:d8:fa:77:3d:91:6c:2e:18:04:3c: 62:7c:7a:56:ad:cd:69:f4:65:59:b6:19:fa:72:33: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:D7:D0:61:5A:F2:02:44:46:6A:37:26:B2:5E:F3:38:78:C6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a6:65:d4:38:76:01:e5:f4:76:11:4c:ca:2b:a9:39:1f:82: cf:28:26:a0:d6:40:49:ca:a6:cd:f4:f8:61:27:44:f2:83:be: 4f:17:fd:43:82:64:67:15:79:02:9b:59:f4:14:a8:73:a0:c4: e2:74:1a:79:74:da:8e:84:ed:0d:ad:49:79:2c:c9:ca:2b:be: 55:14:61:3e:81:73:b0:26:ec:ee:66:cc:b4:16:95:ef:e9:cb: 3a:18:4e:13:2f:04:d7:15:80:c0:07:78:2b:f3:42:d7:7c:23: 26:47:53:e8:a2:99:ad:25:50:c0:09:70:a5:4a:82:3b:a1:15: db:18:bc:78:49:a3:53:4e:d0:93:31:64:74:a9:b1:a1:93:81: a4:3a:45:25:8d:e9:9d:ad:cb:86:71:7c:1d:38:a1:80:07:ad: 5b:cf:d6:87:34:18:51:c0:29:49:1a:2b:1d:83:62:ae:db:09: 5a:9c:4e:37:f6:7d:1d:c0:50:dd:79:e7:48:3a:a5:7f:86:de: ab:75:f5:a2:ea:2a:f6:d2:89:ef:d8:99:f6:2f:c8:9c:ea:ab: 16:98:ce:e1:6f:c1:22:70:b5:f8:ee:14:da:37:8d:69:36:3d: 7b:cb:cd:b6:ba:a9:f5:7d:c5:28:17:3b:d1:71:b9:3e:59:7f: 36:06:92:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEp2Orte+i48f2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDJhM2ZjNmMtMjYwNy00OTg2LTg1NjQtZGQwZDc1NzllYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAKMbpSVp5nmiELiZriGD+4VY5M2zwcmvPoT Uyxor20RUP+ukovg3TdxukquRFLnSgfMEc5ShcKsln3PlX5ykzf6GlDg+c4pNthu w1TDiogn9BLqhZHXnnLp9wVRicMvdDNS2vO3F1Afq021BEAJ8pkZeK0fV91RlbCH KifLtpe+FDQSInAXt6iuc9QMM4gGUq8Ku+hJ8A4AVA2Vw/YyVOQBZp+ukjxeW6cm QVBsJonlWmQLNNDU89b/eusOwH+ZOve7pNEMw/KF/LTa9lf0FTisJMJb5H+t5gZu UHI0tS+dM2vbC9j6dz2RbC4YBDxifHpWrc1p9GVZthn6cjPrzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK519BhWvICREZqNyayXvM4eMZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTljMTk2ZmMtNTRlNy0z MGJjLWFiOTUtMzAzZTlmMjAxYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6mZdQ4dgHl9HYRTMorqTkfgs8oJqDWQEnKps30+GEnRPKDvk8X/UOC ZGcVeQKbWfQUqHOgxOJ0Gnl02o6E7Q2tSXksycorvlUUYT6Bc7Am7O5mzLQWle/p yzoYThMvBNcVgMAHeCvzQtd8IyZHU+iima0lUMAJcKVKgjuhFdsYvHhJo1NO0JMx ZHSpsaGTgaQ6RSWN6Z2ty4ZxfB04oYAHrVvP1oc0GFHAKUkaKx2DYq7bCVqcTjf2 fR3AUN1550g6pX+G3qt19aLqKvbSie/YmfYvyJzqqxaYzuFvwSJwtfjuFNo3jWk2 PXvLzba6qfV9xSgXO9FxuT5ZfzYGknU= -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:38 2026 by rpki-client