$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa File: c9510f83-ec03-3be5-af3d-3665ee4e9002.roa (raw, json) Hash identifier: 3j11qLTNXi8gCweRAvoTNu0luSMLqY9djAsVsHIFeVk= Subject key identifier: C9:41:2C:7F:03:02:B2:FE:91:78:C4:9D:41:90:AF:00:17:FB:A6:6A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D091299FFF4CC2F03CADC0900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397213 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:99:ff:f4:cc:2f:03:ca:dc:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=da36faa6-af2d-4467-a114-d4bef29946d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:30:72:36:66:78:22:fc:65:8f:be:66:53: e6:4a:09:93:1f:c2:6d:29:e3:da:40:5b:2e:f7:8c: 47:ba:1b:d4:eb:7d:40:b0:16:ff:1f:ed:53:4a:a9: 5e:5b:43:b8:4f:39:a0:48:aa:10:e7:88:05:1c:9f: 3a:15:da:69:91:54:13:43:23:b9:26:f1:f2:9c:3e: d2:48:e4:c3:48:4b:5a:86:c0:77:70:a4:19:a2:36: d4:c1:31:41:4e:54:f4:9e:9a:83:3a:46:ec:ff:ee: f5:ba:73:1a:df:90:86:4b:cd:cf:e6:f2:48:6e:71: 11:02:14:d6:08:f3:da:10:04:c4:bb:a8:04:89:eb: 51:39:26:14:90:51:52:40:75:e1:f1:de:5a:33:39: 2e:46:5d:44:f0:b3:9f:e6:16:e1:31:e1:36:d1:b0: c0:08:03:10:81:0d:8c:53:40:a3:08:08:cb:6a:99: 6f:88:a0:5d:6e:97:3a:80:53:b9:b5:80:1f:58:38: b4:24:0c:d2:51:2d:65:af:c2:9a:d1:ce:ba:cc:44: ee:06:09:88:df:c5:5d:51:fd:e0:cc:c4:23:88:bd: 06:05:ed:5c:88:38:41:20:d5:8a:7f:9a:4f:b0:f3: f5:de:11:67:62:7f:96:a4:f0:65:92:bd:26:82:a7: 3f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:2C:7F:03:02:B2:FE:91:78:C4:9D:41:90:AF:00:17:FB:A6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c9510f83-ec03-3be5-af3d-3665ee4e9002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:aa:82:6e:e9:cd:a1:42:9d:23:14:ff:6b:6f:3a:72:91:99: 9d:ea:f4:99:da:a7:12:20:4e:b1:96:f7:89:00:34:12:72:93: 52:d8:4d:53:ed:b4:60:dc:2d:28:8f:a5:66:a7:ea:96:5c:f5: 55:a9:e6:05:b4:df:e7:db:63:b6:cb:ec:49:48:23:58:63:d1: 56:ef:17:34:ae:39:fe:d5:d8:bd:fd:0f:ad:bb:22:0a:33:34: 8f:a6:5b:9e:ae:b7:1b:c1:45:7c:b9:c4:50:1d:22:86:c3:49: 99:a6:2f:ce:29:96:c2:6e:1d:c5:e9:20:63:73:8b:8f:92:b9: 93:27:3e:42:ca:3b:e3:d5:13:52:31:eb:19:ea:fc:8f:81:cf: a3:4b:db:0f:04:bf:f0:85:09:b4:60:2d:01:26:00:14:62:54: cf:73:7e:83:9a:81:74:00:ca:aa:92:bb:d8:bd:77:6c:6d:f0: 7f:28:c2:ca:c9:be:f8:84:32:bb:a1:0e:46:1a:19:59:5a:33: 6d:16:57:16:75:4d:ef:42:e9:72:ad:5c:d6:b4:a8:58:ec:de: 95:8f:7e:12:9a:55:81:3a:31:b1:f6:d5:31:fb:b6:bc:1b:17: bc:1d:2f:01:52:12:81:14:86:6e:6f:2a:2c:8b:07:5d:6a:43: c6:23:b9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEpn/9MwvA8rcCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGEzNmZhYTYtYWYyZC00NDY3LWExMTQtZDRiZWYyOTk0NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6cwcjZmeCL8ZY++ZlPmSgmTH8JtKePaQFsu 94xHuhvU631AsBb/H+1TSqleW0O4TzmgSKoQ54gFHJ86FdppkVQTQyO5JvHynD7S SOTDSEtahsB3cKQZojbUwTFBTlT0npqDOkbs/+71unMa35CGS83P5vJIbnERAhTW CPPaEATEu6gEietROSYUkFFSQHXh8d5aMzkuRl1E8LOf5hbhMeE20bDACAMQgQ2M U0CjCAjLaplviKBdbpc6gFO5tYAfWDi0JAzSUS1lr8Ka0c66zETuBgmI38VdUf3g zMQjiL0GBe1ciDhBINWKf5pPsPP13hFnYn+WpPBlkr0mgqc/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlBLH8DArL+kXjEnUGQrwAX+6ZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzk1MTBmODMtZWMwMy0z YmU1LWFmM2QtMzY2NWVlNGU5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqqgm7pzaFCnSMU/2tvOnKRmZ3q9JnapxIgTrGW94kANBJyk1LYTVPt tGDcLSiPpWan6pZc9VWp5gW03+fbY7bL7ElII1hj0VbvFzSuOf7V2L39D627Igoz NI+mW56utxvBRXy5xFAdIobDSZmmL84plsJuHcXpIGNzi4+SuZMnPkLKO+PVE1Ix 6xnq/I+Bz6NL2w8Ev/CFCbRgLQEmABRiVM9zfoOagXQAyqqSu9i9d2xt8H8owsrJ vviEMruhDkYaGVlaM20WVxZ1Te9C6XKtXNa0qFjs3pWPfhKaVYE6MbH21TH7trwb F7wdLwFSEoEUhm5vKiyLB11qQ8YjuZE= -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:02 2026 by rpki-client