$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa File: cef05d66-93fc-35e8-bc90-4037679a6a40.roa (raw, json) Hash identifier: WDwhMsdcxUNnG5r+2TqriiPhC1SGJdoiBXrRLTnpz6Q= Subject key identifier: 2B:13:52:EE:C0:02:9F:10:C8:63:A5:61:E8:E8:C7:D9:84:28:E1:01 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584DE9B0ABE9A21B4D4A66530400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 397220 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:ab:e9:a2:1b:4d:4a:66:53:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=eaa4f36a-a517-4d5a-9eec-cc794f74f54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:f9:9a:26:63:0f:1b:5a:83:5b:56:27:9f: be:ca:ee:4e:cb:a1:c0:bd:5c:c6:5a:15:af:37:25: b2:99:bf:ad:7b:31:1b:ad:a6:cf:d1:79:7f:95:4f: 7f:b6:6c:f4:fb:8f:5e:a0:6c:96:dd:24:d6:df:02: fe:3c:f0:24:c7:da:a5:8a:1d:96:b4:ee:12:91:eb: af:ea:57:51:15:8e:0c:b8:04:18:99:bd:38:bd:11: f4:07:20:86:08:83:74:e4:72:e7:a2:a1:b5:44:4e: fc:6a:97:d7:09:15:74:c6:d0:21:bd:fb:ff:68:40: 79:48:aa:da:93:fd:db:93:ae:22:86:5f:b6:e3:1c: d3:da:e1:1b:b6:07:c5:2c:56:5f:1e:46:97:93:35: f4:99:36:7b:ad:d9:0a:d7:17:cb:79:95:2d:55:96: 74:7a:28:8e:35:da:11:46:cd:81:e6:46:ee:6f:27: 47:d1:71:1c:84:b1:2a:d6:97:af:ee:b9:a2:32:95: 12:45:73:e4:7e:df:3e:22:02:43:d6:fc:1d:ca:64: c7:33:a1:f3:b5:56:ab:87:d8:1d:e8:88:a4:33:b1: 22:46:28:bd:29:76:f8:65:cb:74:7e:6b:5b:78:2e: f9:57:8e:50:94:f6:8e:eb:38:8d:c4:40:1a:7c:5b: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:52:EE:C0:02:9F:10:C8:63:A5:61:E8:E8:C7:D9:84:28:E1:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cef05d66-93fc-35e8-bc90-4037679a6a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8b:14:8b:7b:74:9e:34:c4:e2:c3:6e:b6:e4:ee:64:89:0a: 9f:dd:46:23:53:e8:51:25:fb:0d:5c:1c:f9:70:02:e6:ff:d7: 9e:a4:d1:f6:d9:96:1b:3f:81:74:60:5c:de:a0:05:37:13:60: 58:e3:67:51:a8:d3:33:82:0e:40:d9:2c:8e:ce:5c:2d:1e:33: bf:a6:d9:ac:4d:60:51:9b:12:0b:78:c1:92:ed:e3:d9:98:bd: 42:d5:74:87:44:54:33:08:59:6b:fd:64:db:66:ae:06:61:e1: 77:f4:4c:d5:25:5e:f1:12:cc:6f:76:11:62:ba:5d:69:e7:d1: 56:33:46:85:e2:63:1c:46:fe:e0:09:e2:c7:9b:bc:06:27:34: c1:e7:0f:3b:7e:74:21:a7:07:70:ff:73:f5:21:01:ee:72:0f: b5:ba:a7:ea:65:55:72:70:6f:75:6e:84:22:66:01:02:a3:f6: 74:3c:c5:92:d0:aa:bf:c5:1d:e1:cb:96:89:48:6c:6e:b9:91: 17:f9:d6:67:7f:e5:6d:e3:da:1a:7f:86:13:5c:f2:fd:28:e2: a6:83:a4:ee:66:6b:e9:ab:3b:40:92:f3:b3:f7:c4:50:17:1e: c7:72:83:fd:a8:bc:da:2d:da:a4:5e:a6:87:b8:ea:91:81:5f: c3:f9:59:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psKvpohtNSmZTBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZWFhNGYzNmEtYTUxNy00ZDVhLTllZWMtY2M3OTRmNzRmNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRj5miZjDxtag1tWJ5++yu5Oy6HAvVzGWhWv NyWymb+tezEbrabP0Xl/lU9/tmz0+49eoGyW3STW3wL+PPAkx9qlih2WtO4Skeuv 6ldRFY4MuAQYmb04vRH0ByCGCIN05HLnoqG1RE78apfXCRV0xtAhvfv/aEB5SKra k/3bk64ihl+24xzT2uEbtgfFLFZfHkaXkzX0mTZ7rdkK1xfLeZUtVZZ0eiiONdoR Rs2B5kbubydH0XEchLEq1pev7rmiMpUSRXPkft8+IgJD1vwdymTHM6HztVarh9gd 6IikM7EiRii9KXb4Zct0fmtbeC75V45QlPaO6ziNxEAafFtbVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsTUu7AAp8QyGOlYejox9mEKOEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2VmMDVkNjYtOTNmYy0z NWU4LWJjOTAtNDAzNzY3OWE2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2LFIt7dJ40xOLDbrbk7mSJCp/dRiNT6FEl+w1cHPlwAub/156k0fbZ lhs/gXRgXN6gBTcTYFjjZ1Go0zOCDkDZLI7OXC0eM7+m2axNYFGbEgt4wZLt49mY vULVdIdEVDMIWWv9ZNtmrgZh4Xf0TNUlXvESzG92EWK6XWnn0VYzRoXiYxxG/uAJ 4sebvAYnNMHnDzt+dCGnB3D/c/UhAe5yD7W6p+plVXJwb3VuhCJmAQKj9nQ8xZLQ qr/FHeHLlolIbG65kRf51md/5W3j2hp/hhNc8v0o4qaDpO5ma+mrO0CS87P3xFAX Hsdyg/2ovNot2qRepoe46pGBX8P5WdY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:49:28 2026 by rpki-client