$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa File: ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa (raw, json) Hash identifier: usCKxWsLzbu5pLbd7oV8cVNOJOGY13t3QdMGD/Iv8Qc= Subject key identifier: 44:C3:6D:C8:28:8B:70:3D:77:0D:6C:0A:1B:6B:16:5E:06:EF:B3:8D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FEA9C8B6AFEFC014B8980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 12008 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ea:9c:8b:6a:fe:fc:01:4b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=fa2c41aa-d958-4bf7-a1ac-f4cb8d698d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:66:77:b1:11:19:7e:d0:ae:20:f0:3d:4d: d6:e8:9e:4e:07:65:f9:ab:04:de:a1:c3:d8:fb:bc: 9b:bd:ce:df:9e:f3:56:4d:dd:ee:e7:b0:a5:20:9c: 4c:25:dc:05:7f:10:b1:c3:39:3c:ef:72:66:44:44: 89:10:38:80:7b:74:7f:6f:24:e9:1a:93:a8:b0:2d: c9:d5:59:01:bb:d2:4d:0f:81:7d:7a:8d:eb:5e:2a: 7a:cb:ce:f5:46:21:6d:20:fd:e5:d8:39:97:f3:77: 34:92:c4:b4:fb:ff:7f:a8:55:5a:1f:c3:73:35:0f: bd:80:03:bb:8f:9f:58:1e:03:23:47:00:92:56:8b: 1a:d7:c4:a8:74:d3:af:21:51:5a:ef:53:0e:48:13: 41:cc:50:a0:7d:95:01:0e:b3:c4:30:e5:34:b6:6b: 0f:ce:06:55:2f:64:8e:8b:eb:03:8b:27:21:c3:60: 67:fe:4c:d1:a5:a7:f1:1e:1a:30:dd:cf:21:cc:7e: 73:2a:8d:7c:ab:01:3c:41:79:a1:8d:71:b1:83:e5: 07:d6:af:c9:e4:27:ad:85:b6:b9:cf:ef:2b:31:d9: 52:49:9f:b3:b4:b0:2f:69:78:00:cc:80:bc:04:34: dc:42:36:5e:b2:78:a5:83:fb:91:87:84:29:95:3f: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:6D:C8:28:8B:70:3D:77:0D:6C:0A:1B:6B:16:5E:06:EF:B3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ce7bfcc0-805e-39c2-b586-fb9ab78e1add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:69:4e:ee:a7:46:89:06:93:e7:1c:c9:9d:36:dd:c9:ab:22: 8a:31:2c:ee:bc:2e:8e:75:83:e9:14:de:62:13:76:0c:f7:14: 4e:fd:d6:03:9a:ad:e2:86:19:cb:59:37:6b:c2:bd:ab:1d:c5: 65:05:20:36:5c:05:e1:32:d5:27:98:43:47:df:7f:ef:85:c7: 23:be:fb:84:99:e3:a2:b7:dd:0d:ba:e0:4e:df:b3:7f:de:3c: 89:3f:02:04:7a:1d:24:ce:7b:6e:11:f6:8b:ee:87:49:3d:0d: 37:56:9e:32:6c:bc:3c:93:94:26:1a:c7:bf:b0:73:7c:93:5b: 89:fd:b8:b5:c6:9e:40:8f:11:2c:7f:75:8d:e9:d4:64:f4:0e: d9:19:35:40:1a:6e:78:5b:2d:35:66:fe:b0:d9:aa:74:d9:97: e5:f9:99:3f:14:0f:72:1c:f6:f6:f2:6c:57:34:d1:66:71:de: 43:af:07:e7:1a:92:32:29:ca:cb:9f:bd:7d:f7:da:c1:ad:0c: 33:c8:01:d8:b8:b7:82:e5:65:bb:81:83:c8:5c:02:60:a8:c1: e4:c7:a6:35:88:54:ce:19:27:cc:c8:32:00:5c:cf:9a:8c:36: 4d:89:ee:4e:b5:1c:dc:e9:ae:78:cc:06:7f:59:5e:5c:1e:a5: bd:00:e2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+qci2r+/AFLiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZmEyYzQxYWEtZDk1OC00YmY3LWExYWMtZjRjYjhkNjk4ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC5md7ERGX7QriDwPU3W6J5OB2X5qwTeocPY +7ybvc7fnvNWTd3u57ClIJxMJdwFfxCxwzk873JmRESJEDiAe3R/byTpGpOosC3J 1VkBu9JND4F9eo3rXip6y871RiFtIP3l2DmX83c0ksS0+/9/qFVaH8NzNQ+9gAO7 j59YHgMjRwCSVosa18SodNOvIVFa71MOSBNBzFCgfZUBDrPEMOU0tmsPzgZVL2SO i+sDiychw2Bn/kzRpafxHhow3c8hzH5zKo18qwE8QXmhjXGxg+UH1q/J5Cethba5 z+8rMdlSSZ+ztLAvaXgAzIC8BDTcQjZesnilg/uRh4QplT9/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETDbcgoi3A9dw1sChtrFl4G77ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2U3YmZjYzAtODA1ZS0z OWMyLWI1ODYtZmI5YWI3OGUxYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVpTu6nRokGk+ccyZ023cmrIooxLO68Lo51g+kU3mITdgz3FE791gOa reKGGctZN2vCvasdxWUFIDZcBeEy1SeYQ0fff++FxyO++4SZ46K33Q264E7fs3/e PIk/AgR6HSTOe24R9ovuh0k9DTdWnjJsvDyTlCYax7+wc3yTW4n9uLXGnkCPESx/ dY3p1GT0DtkZNUAabnhbLTVm/rDZqnTZl+X5mT8UD3Ic9vbybFc00WZx3kOvB+ca kjIpysufvX332sGtDDPIAdi4t4LlZbuBg8hcAmCoweTHpjWIVM4ZJ8zIMgBcz5qM Nk2J7k61HNzprnjMBn9ZXlwepb0A4r8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:56 2026 by rpki-client