$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa File: 2d9da503-3a56-3a3e-8031-35310762665a.roa (raw, json) Hash identifier: Q5RXYJspWJ1CPMBivZLrlgAg54SRQQIS4K4now8Rn2Q= Subject key identifier: 00:6D:6F:F7:E9:1E:49:F9:9A:43:08:D4:12:5A:31:CD:E5:07:3C:31 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FED88A991D4314C6E9680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397239 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ed:88:a9:91:d4:31:4c:6e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a7c80a7d-55fc-4743-b040-327b4280f4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:68:9f:14:2d:17:c9:83:23:24:78:4e:f6: ab:92:d6:27:d3:b4:24:aa:35:26:7c:da:2b:3a:07: af:56:8f:fb:f5:d0:22:69:6a:81:a6:5a:69:36:7d: 45:39:9c:d8:20:0f:6e:d3:64:6c:79:b8:60:0a:88: 5e:bd:fd:a6:d4:24:6e:5e:47:c2:b6:f2:06:ed:1e: 77:dd:6e:a7:6e:33:e2:f4:2b:df:83:15:73:40:d8: d8:63:be:ba:c8:1f:1e:fb:4a:0c:87:b3:35:bb:7f: 32:20:be:09:1c:81:e2:da:8b:e2:19:42:d3:38:b2: ed:30:fc:e9:5c:08:29:da:8f:b7:5f:10:e6:e8:a1: c2:3c:16:19:e0:ee:51:36:0a:58:e1:97:6d:47:ae: c5:38:9a:55:2a:e7:de:bb:3c:42:eb:d1:ce:21:09: 0b:8e:6b:ca:60:ca:22:76:01:82:9b:d3:e7:eb:32: 6e:d8:f0:97:ee:ea:22:44:fd:be:56:d8:e6:2a:9f: 19:35:b7:3b:7b:ce:5c:13:79:f2:78:4b:1c:5a:e2: d7:e8:36:15:c7:70:7f:59:78:ef:d0:18:d8:43:61: 9b:5d:64:dd:89:3e:43:7e:41:30:02:56:44:3f:e5: 40:d6:16:e8:69:6e:c2:89:82:20:ae:f4:82:bb:70: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6D:6F:F7:E9:1E:49:F9:9A:43:08:D4:12:5A:31:CD:E5:07:3C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c1:c8:99:f1:bd:bf:12:be:3b:51:9a:e8:2b:26:33:44:69: 57:20:c8:2b:a5:c5:99:5d:d8:11:41:89:98:a7:58:58:85:2a: 84:e8:22:53:68:00:74:99:52:03:54:77:99:d1:6c:85:41:70: 32:b2:d6:45:87:43:3e:90:64:93:35:55:d9:33:76:f4:c0:e7: 90:8a:54:6a:01:39:48:12:1c:53:23:6f:d1:e6:b9:dc:f8:f4: bc:d4:64:17:d9:19:4a:2d:a5:a1:5e:24:cb:bd:0d:dc:e7:ee: 54:57:da:4c:33:4c:b9:a6:63:92:e5:bd:df:d8:ed:ed:b8:c8: 0a:d3:1e:13:8b:1f:0a:58:3c:33:b7:ee:2b:85:d6:57:72:7a: 29:4c:cc:27:a0:7a:c9:08:ab:a4:03:91:5e:cb:30:92:ce:10: 95:0d:d6:ce:e3:79:f8:79:92:7e:7a:46:95:2e:04:61:73:cc: cb:49:9f:ad:ab:90:af:cc:2e:0d:db:10:f7:79:3e:25:30:f4: 99:e6:e8:40:bc:05:b7:90:5c:94:68:74:e0:22:e4:f1:74:08: 6f:68:1e:9d:14:ef:21:85:97:76:94:36:87:c6:18:33:03:2a: 47:dd:c8:22:f7:9f:e7:14:24:5c:81:a6:13:b2:28:b1:1e:53: 73:43:27:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+2IqZHUMUxuloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTdjODBhN2QtNTVmYy00NzQzLWIwNDAtMzI3YjQyODBmNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuBonxQtF8mDIyR4TvarktYn07QkqjUmfNor OgevVo/79dAiaWqBplppNn1FOZzYIA9u02RsebhgCohevf2m1CRuXkfCtvIG7R53 3W6nbjPi9CvfgxVzQNjYY766yB8e+0oMh7M1u38yIL4JHIHi2oviGULTOLLtMPzp XAgp2o+3XxDm6KHCPBYZ4O5RNgpY4ZdtR67FOJpVKufeuzxC69HOIQkLjmvKYMoi dgGCm9Pn6zJu2PCX7uoiRP2+VtjmKp8ZNbc7e85cE3nyeEscWuLX6DYVx3B/WXjv 0BjYQ2GbXWTdiT5DfkEwAlZEP+VA1hboaW7CiYIgrvSCu3AGzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABtb/fpHkn5mkMI1BJaMc3lBzwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5ZGE1MDMtM2E1Ni0z YTNlLTgwMzEtMzUzMTA3NjI2NjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDByJnxvb8SvjtRmugrJjNEaVcgyCulxZld2BFBiZinWFiFKoToIlNo AHSZUgNUd5nRbIVBcDKy1kWHQz6QZJM1VdkzdvTA55CKVGoBOUgSHFMjb9Hmudz4 9LzUZBfZGUotpaFeJMu9Ddzn7lRX2kwzTLmmY5Llvd/Y7e24yArTHhOLHwpYPDO3 7iuF1ldyeilMzCegeskIq6QDkV7LMJLOEJUN1s7jefh5kn56RpUuBGFzzMtJn62r kK/MLg3bEPd5PiUw9Jnm6EC8BbeQXJRodOAi5PF0CG9oHp0U7yGFl3aUNofGGDMD KkfdyCL3n+cUJFyBphOyKLEeU3NDJ30= -----END CERTIFICATE-----Generated at Sun Apr 12 08:10:20 2026 by rpki-client