$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa File: 325dc012-39aa-3c49-baab-0ada77a47052.roa (raw, json) Hash identifier: AEndhBdzZBr081oZnPlZkiTaiVBYxRQ8GJylkx7UglM= Subject key identifier: 1E:B6:96:E5:80:3A:35:29:03:EF:45:59:6D:1C:E6:54:87:0E:8C:6E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FE7A9F21086BE27280400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397216 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:e7:a9:f2:10:86:be:27:28:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3505a3e4-4a89-4880-baa5-94a23d2c512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:6e:20:d2:85:2f:3e:cd:4a:a7:31:c0:37: ec:0f:9a:26:c6:bd:d5:35:d4:ba:6c:55:94:5c:ab: 17:3d:47:19:2b:d2:02:9b:3c:4b:95:48:3f:60:d4: 2a:64:6a:df:c0:11:5b:9d:81:d9:3b:ce:f0:e1:d1: 60:79:0d:49:5e:ab:09:82:ae:d7:1b:b1:43:ad:0b: 02:7d:9c:36:73:64:4f:21:27:e8:f9:bf:48:11:c5: 3c:42:68:ab:d2:54:0b:e8:9b:a4:28:01:8c:e6:0a: 93:bb:d5:35:d1:95:91:ca:12:12:2e:1d:ed:ad:78: 6e:ca:17:63:1c:a8:65:38:24:58:7c:1f:e0:6e:cc: ce:b5:5b:43:6c:84:a1:b9:ab:9a:38:8c:53:19:55: f9:d2:95:5c:ec:02:ca:00:a8:33:c1:c2:c7:0b:55: c7:89:4e:96:c5:4f:af:88:98:e5:04:0c:22:00:51: da:0c:84:15:41:f4:65:00:08:dc:08:3e:c5:f4:ad: 98:17:94:6e:69:f2:fb:56:0b:f0:d0:84:1b:b1:36: 78:21:c6:fe:63:c2:c1:be:50:60:18:31:a8:f7:71: 48:b7:e4:c9:54:a5:b9:f0:40:cc:10:60:99:ac:ec: 5f:ce:0e:6d:59:48:e1:d2:21:10:83:8c:95:b8:9c: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B6:96:E5:80:3A:35:29:03:EF:45:59:6D:1C:E6:54:87:0E:8C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/325dc012-39aa-3c49-baab-0ada77a47052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1f:00:b0:1e:f8:2d:33:50:5b:c7:3a:20:35:8e:6e:d0:fe: e1:e4:57:22:91:95:8e:f6:fb:19:0a:33:9a:dc:12:e4:a2:bf: ae:73:71:d8:b1:7e:b7:98:60:8a:35:d2:db:3d:f9:33:c8:63: df:c4:63:be:b5:c1:07:d6:24:c6:9c:8c:a4:db:e0:17:5e:b3: b6:fd:43:af:5f:53:dd:0d:81:cc:01:7f:e3:78:fc:92:88:11: e1:70:21:50:b8:70:0a:12:84:f3:90:47:e2:dc:58:f9:fc:45: b7:ed:69:ee:f9:df:3b:fc:98:cf:32:48:3b:e3:d1:d8:97:03: ad:95:f1:91:24:df:49:66:84:22:0b:5c:2a:9c:93:81:4e:e9: 62:33:3e:99:7b:52:c2:d9:cf:90:78:77:99:c7:a4:50:f5:0b: 9b:ef:f2:2a:7f:f3:45:4d:11:42:54:d6:71:fb:0c:91:39:18: 22:43:8c:62:0f:0d:23:55:00:89:64:52:ee:cc:a9:23:f7:95: 03:b4:9e:ef:1a:47:e8:eb:e6:61:92:15:b5:4e:3f:5b:b1:50: ea:36:73:4d:07:49:e9:61:ea:68:28:6f:a1:8c:b4:0a:85:fe: 09:47:2d:f2:53:27:0d:00:b2:1e:57:0e:8a:ce:38:8e:f5:98: a7:78:fd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+ep8hCGvicoBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzUwNWEzZTQtNGE4OS00ODgwLWJhYTUtOTRhMjNkMmM1MTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfduINKFLz7NSqcxwDfsD5omxr3VNdS6bFWU XKsXPUcZK9ICmzxLlUg/YNQqZGrfwBFbnYHZO87w4dFgeQ1JXqsJgq7XG7FDrQsC fZw2c2RPISfo+b9IEcU8Qmir0lQL6JukKAGM5gqTu9U10ZWRyhISLh3trXhuyhdj HKhlOCRYfB/gbszOtVtDbIShuauaOIxTGVX50pVc7ALKAKgzwcLHC1XHiU6WxU+v iJjlBAwiAFHaDIQVQfRlAAjcCD7F9K2YF5RuafL7Vgvw0IQbsTZ4Icb+Y8LBvlBg GDGo93FIt+TJVKW58EDMEGCZrOxfzg5tWUjh0iEQg4yVuJzvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB62luWAOjUpA+9FWW0c5lSHDoxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzI1ZGMwMTItMzlhYS0z YzQ5LWJhYWItMGFkYTc3YTQ3MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQfALAe+C0zUFvHOiA1jm7Q/uHkVyKRlY72+xkKM5rcEuSiv65zcdix freYYIo10ts9+TPIY9/EY761wQfWJMacjKTb4Bdes7b9Q69fU90NgcwBf+N4/JKI EeFwIVC4cAoShPOQR+LcWPn8Rbftae753zv8mM8ySDvj0diXA62V8ZEk30lmhCIL XCqck4FO6WIzPpl7UsLZz5B4d5nHpFD1C5vv8ip/80VNEUJU1nH7DJE5GCJDjGIP DSNVAIlkUu7MqSP3lQO0nu8aR+jr5mGSFbVOP1uxUOo2c00HSelh6mgob6GMtAqF /glHLfJTJw0Ash5XDorOOI71mKd4/ak= -----END CERTIFICATE-----Generated at Sun Apr 12 08:11:53 2026 by rpki-client