$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa84ffd-6733-3755-aea7-2f33264798dd.roa File: afa84ffd-6733-3755-aea7-2f33264798dd.roa (raw, json) Hash identifier: nPXuCWEveuLi/8IaLt+4eC8tgMpFfesp2aUg0Bhjayk= Subject key identifier: FA:E4:B6:58:9D:E8:B6:42:CD:E4:6B:23:80:9A:22:A1:C6:A3:38:09 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF8FF9AE36407E548A780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa84ffd-6733-3755-aea7-2f33264798dd.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397220 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f8:ff:9a:e3:64:07:e5:48:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=22afe773-683d-4b2a-aa64-dab3c35f00c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:f1:a6:fe:b2:39:d6:ce:1e:03:8e:3b:a6: 6e:ed:eb:70:69:3c:f7:86:88:2e:10:26:41:ef:26: c7:1d:b5:d6:31:ad:7a:9f:c4:f6:59:9f:a4:cf:bc: 75:0d:43:eb:f2:53:c9:3a:18:c4:f5:c0:31:0d:ec: fc:81:a6:07:b0:4d:59:a3:e9:5f:28:65:77:e8:12: b5:35:be:02:fd:c3:fa:86:4a:fd:ca:3b:6c:e0:f0: 6a:0c:46:77:18:a9:6a:3f:d8:6e:c0:1a:5c:cf:e1: 7d:1b:1b:b7:65:3d:1b:67:fc:17:da:2e:03:dc:14: db:ba:82:29:86:ab:3f:dd:f4:f8:c8:8e:3e:76:6f: ee:ad:72:88:1b:24:02:3a:f3:d7:06:b1:a1:8c:93: c8:7a:4a:a6:15:71:03:35:99:1d:b2:53:ee:95:5b: 14:30:ba:8e:c2:05:6d:21:df:03:fd:44:dc:cc:39: 38:c2:5d:56:60:c4:90:81:63:df:18:62:23:62:0c: 49:1d:64:44:7b:18:6f:99:95:09:9c:47:27:b5:fa: f6:2e:4e:d5:e8:51:e3:6c:5f:fa:f4:94:83:dc:7a: 57:b7:8c:a8:74:45:e5:22:0d:5f:10:48:8f:c9:dd: c1:a9:48:d2:37:40:5b:ae:68:22:25:b1:b4:c2:02: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:B6:58:9D:E8:B6:42:CD:E4:6B:23:80:9A:22:A1:C6:A3:38:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afa84ffd-6733-3755-aea7-2f33264798dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2b:48:82:b9:36:f7:cd:84:76:45:12:d3:1f:a4:21:c7:7a: 32:b8:05:b5:fc:4b:c8:05:7e:88:18:e8:19:6e:35:58:03:e9: af:88:1e:f3:2f:1f:75:75:e5:4d:20:be:50:0f:6c:00:98:e3: 7a:d6:72:3c:7b:7d:16:ca:41:9b:da:02:85:73:ef:17:fe:bc: da:1b:75:69:29:e9:44:42:e5:7d:16:b4:c7:ef:98:0c:9a:77: 07:f4:a4:7b:32:f4:a2:c3:1f:cc:e8:d9:d1:b6:be:b0:aa:56: af:a9:cf:81:ec:70:dd:24:0e:97:88:f0:97:61:c0:0f:b2:36: d4:d6:1c:84:11:63:c5:36:6b:f5:5f:5f:60:2b:17:b7:63:ff: 4f:0d:df:dd:2c:40:58:13:74:02:02:12:06:6e:67:ba:9d:22: 77:15:f5:bc:64:50:75:96:3f:cb:fd:bb:09:f2:dc:b1:2c:36: 29:41:3d:b1:50:6f:30:b5:94:24:03:96:64:61:4a:05:cb:09: 82:58:91:11:15:29:e1:af:a9:e0:bf:24:38:43:6a:80:34:b4: ab:2e:e4:02:21:7a:1b:f5:ce:6b:1d:09:17:fa:2b:9a:12:9c: 24:2e:ac:01:7e:35:c9:c1:c2:5c:ac:5c:4b:81:eb:5b:19:ed: 90:51:a7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/j/muNkB+VIp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjJhZmU3NzMtNjgzZC00YjJhLWFhNjQtZGFiM2MzNWYwMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwLxpv6yOdbOHgOOO6Zu7etwaTz3hoguECZB 7ybHHbXWMa16n8T2WZ+kz7x1DUPr8lPJOhjE9cAxDez8gaYHsE1Zo+lfKGV36BK1 Nb4C/cP6hkr9yjts4PBqDEZ3GKlqP9huwBpcz+F9Gxu3ZT0bZ/wX2i4D3BTbuoIp hqs/3fT4yI4+dm/urXKIGyQCOvPXBrGhjJPIekqmFXEDNZkdslPulVsUMLqOwgVt Id8D/UTczDk4wl1WYMSQgWPfGGIjYgxJHWREexhvmZUJnEcntfr2Lk7V6FHjbF/6 9JSD3HpXt4yodEXlIg1fEEiPyd3BqUjSN0BbrmgiJbG0wgLqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrktlid6LZCzeRrI4CaIqHGozgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWZhODRmZmQtNjczMy0z NzU1LWFlYTctMmYzMzI2NDc5OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUrSIK5NvfNhHZFEtMfpCHHejK4BbX8S8gFfogY6BluNVgD6a+IHvMv H3V15U0gvlAPbACY43rWcjx7fRbKQZvaAoVz7xf+vNobdWkp6URC5X0WtMfvmAya dwf0pHsy9KLDH8zo2dG2vrCqVq+pz4HscN0kDpeI8JdhwA+yNtTWHIQRY8U2a/Vf X2ArF7dj/08N390sQFgTdAICEgZuZ7qdIncV9bxkUHWWP8v9uwny3LEsNilBPbFQ bzC1lCQDlmRhSgXLCYJYkREVKeGvqeC/JDhDaoA0tKsu5AIhehv1zmsdCRf6K5oS nCQurAF+NcnBwlysXEuB61sZ7ZBRpwQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:49:13 2026 by rpki-client