$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa File: cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa (raw, json) Hash identifier: kuf+8mkm/aspPVfFsosRrg+OLcXJfR8N2SAvYiT8x70= Subject key identifier: 9F:01:C3:88:4A:20:73:2E:98:56:F0:9C:47:CB:21:E1:03:5F:4C:A3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D09129AC0F6D5DF970E00D980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397225 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:9a:c0:f6:d5:df:97:0e:00:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f5185786-7bac-4b31-8f1f-966508fc059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:69:7d:66:2f:d5:8c:fd:7e:a9:9f:58:93:d1: 6e:5b:ea:45:3f:02:4a:1e:d8:5c:fb:f9:7d:c1:10: bf:ec:d3:86:0e:bc:42:ce:79:37:22:21:99:bc:9a: e0:9e:55:18:bc:f0:1f:8a:56:27:42:fd:19:84:53: e4:45:96:fb:36:aa:60:9f:f8:a3:5a:93:8c:7e:9a: fc:f3:75:c9:85:7f:a6:74:e6:03:c2:8e:db:45:12: aa:d9:6a:62:77:55:8e:78:7d:68:51:0c:a3:d1:d8: 07:5e:ec:2e:d5:38:f0:88:3b:37:b4:d8:b6:41:ac: ac:25:9f:fd:ed:94:0d:c8:4b:25:30:34:d6:71:8c: e3:c1:f5:22:04:e3:6d:66:41:d0:7a:b9:95:8d:55: 74:53:ec:6a:22:84:53:6a:04:24:f6:c6:f4:37:61: ff:17:c7:b2:0d:1e:26:21:c7:30:59:a9:99:8c:5e: 77:a2:80:1e:48:90:62:b6:0f:24:45:4b:a0:db:59: 96:9f:e6:19:65:75:e6:65:37:3a:58:00:33:ff:51: 8e:8a:58:fc:77:d1:ce:f1:0c:e0:61:b4:e1:b3:f4: 2e:ad:fe:c5:b0:10:ae:af:33:a1:f7:8e:dd:ec:18: 7f:c5:71:1e:6d:ab:b9:8e:41:51:e2:48:10:8f:1e: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:01:C3:88:4A:20:73:2E:98:56:F0:9C:47:CB:21:E1:03:5F:4C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cddca02d-1cf5-3904-a8cd-a66bf6d3a986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a7:ee:c6:98:8a:ab:13:41:01:0a:09:c4:a9:2d:63:44:2a: c6:14:04:d2:79:ed:56:56:11:5f:32:f0:59:98:e5:bf:e5:09: 27:d0:51:8e:66:cc:37:a0:df:f6:07:c4:18:4f:01:70:cb:e7: 64:6e:3f:ab:d4:d7:2a:9f:12:ea:5d:17:7e:e9:5f:02:ce:76: ba:bc:a8:23:57:94:dd:f2:80:2b:9c:23:af:e1:58:89:c0:e9: c7:ea:4b:13:b6:25:37:70:9b:89:3a:55:13:0a:3d:c1:6a:5f: d2:58:ea:4b:3e:93:fb:e6:a9:99:4c:eb:d9:89:80:67:65:2a: f2:59:f2:dd:9e:20:75:ba:b1:78:e1:65:f5:f7:6a:00:ef:9e: 4a:61:19:84:02:85:96:96:56:c3:72:d1:8e:2f:97:75:67:1d: 89:a6:0b:4f:18:3e:b9:12:18:4f:28:11:77:1f:9d:50:fc:30: 40:98:d6:c1:32:53:ab:ab:d2:e4:c3:d3:aa:c9:b9:5b:c9:20: b5:c8:6a:90:3b:13:10:b4:9a:d1:10:ce:26:37:79:10:13:76: c4:38:d5:7a:26:e6:f3:cc:6f:fd:a3:2a:d2:c3:ae:87:4d:1d: 20:9c:8f:1a:c7:cd:36:35:5d:39:a1:99:6f:51:7f:85:09:e6: f0:77:e1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEprA9tXflw4A2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjUxODU3ODYtN2JhYy00YjMxLThmMWYtOTY2NTA4ZmMwNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2l9Zi/VjP1+qZ9Yk9FuW+pFPwJKHthc+/l9 wRC/7NOGDrxCznk3IiGZvJrgnlUYvPAfilYnQv0ZhFPkRZb7Nqpgn/ijWpOMfpr8 83XJhX+mdOYDwo7bRRKq2Wpid1WOeH1oUQyj0dgHXuwu1TjwiDs3tNi2QaysJZ/9 7ZQNyEslMDTWcYzjwfUiBONtZkHQermVjVV0U+xqIoRTagQk9sb0N2H/F8eyDR4m IccwWamZjF53ooAeSJBitg8kRUug21mWn+YZZXXmZTc6WAAz/1GOilj8d9HO8Qzg YbThs/Qurf7FsBCurzOh947d7Bh/xXEebau5jkFR4kgQjx5/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8Bw4hKIHMumFbwnEfLIeEDX0yjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2RkY2EwMmQtMWNmNS0z OTA0LWE4Y2QtYTY2YmY2ZDNhOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACan7saYiqsTQQEKCcSpLWNEKsYUBNJ57VZWEV8y8FmY5b/lCSfQUY5m zDeg3/YHxBhPAXDL52RuP6vU1yqfEupdF37pXwLOdrq8qCNXlN3ygCucI6/hWInA 6cfqSxO2JTdwm4k6VRMKPcFqX9JY6ks+k/vmqZlM69mJgGdlKvJZ8t2eIHW6sXjh ZfX3agDvnkphGYQChZaWVsNy0Y4vl3VnHYmmC08YPrkSGE8oEXcfnVD8MECY1sEy U6ur0uTD06rJuVvJILXIapA7ExC0mtEQziY3eRATdsQ41Xom5vPMb/2jKtLDrodN HSCcjxrHzTY1XTmhmW9Rf4UJ5vB34QI= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:32 2026 by rpki-client