$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f715dfe-c740-37cc-a340-7e4f3abceb66.roa File: 3f715dfe-c740-37cc-a340-7e4f3abceb66.roa (raw, json) Hash identifier: 0iTs/VAw1OzITCjdrws+D6t7MicDVLmu6aDO5AV/DME= Subject key identifier: 58:29:BC:99:91:14:7C:93:50:52:C4:4B:89:BA:16:14:C0:5A:CA:00 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FEF25BA40446084E9F100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f715dfe-c740-37cc-a340-7e4f3abceb66.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397240 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ef:25:ba:40:44:60:84:e9:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=c689cc23-56a6-43ee-97a7-c7ff7a55330a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:7e:f0:19:b6:fa:b3:19:34:0b:99:ed:90: 8d:27:28:b1:6b:e1:96:95:d1:55:67:29:6e:08:61: 7f:ad:95:ed:2d:b6:35:9c:b1:11:bb:f1:95:73:82: c4:d9:82:fb:4a:f3:57:cd:13:b9:5f:95:52:a3:15: c0:b9:de:08:3a:c1:4d:87:06:18:45:e0:21:c8:bf: d1:56:ce:c5:7a:b8:68:36:89:86:26:14:e9:e5:ac: 1b:27:b9:63:00:b6:12:9c:31:c8:c1:7b:a5:77:3d: b4:9d:62:96:bf:a1:48:1b:d5:81:7f:26:f2:1a:ef: fd:99:0b:da:ed:e4:fa:e4:b7:e5:aa:0f:8e:bb:76: 96:9a:b4:9d:53:b3:31:c8:5b:4c:5b:53:9d:f2:ba: 73:23:85:c1:db:56:84:b1:ad:d3:53:86:a5:ba:4e: 89:79:84:e7:0e:a8:06:88:6b:4c:c4:7a:2e:cc:76: be:fb:c7:af:f0:6b:e2:af:e4:27:73:11:15:a3:92: 8a:7b:44:52:ac:ee:5e:71:25:64:c2:36:f4:71:ff: 45:2f:b9:97:f8:df:40:9a:8f:f9:e3:c3:92:1c:83: 90:c1:24:e2:b9:a8:dd:42:19:82:e9:9e:e1:58:b0: b7:53:6e:86:0d:f1:5b:06:7c:d0:d5:1f:05:7f:d8: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:29:BC:99:91:14:7C:93:50:52:C4:4B:89:BA:16:14:C0:5A:CA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f715dfe-c740-37cc-a340-7e4f3abceb66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:21:68:b0:bd:23:d5:89:3e:29:f7:6d:5c:af:02:58:fe:e6: d7:5d:87:1a:62:4a:09:1f:e2:d6:3a:7e:43:bb:b2:9c:e4:90: b0:a8:83:4c:a6:a3:18:fa:b3:0b:32:89:ca:4b:69:ed:b5:50: f2:84:3e:2c:47:6b:ac:fb:5c:25:d8:d0:45:91:ff:28:29:d9: 17:03:bd:46:c8:46:06:7a:64:ff:8d:12:a6:59:e6:fd:ac:ca: b7:ae:1e:19:dd:2e:51:75:76:9d:a7:ce:ae:1a:20:4a:20:f6: 78:a3:61:59:51:4a:af:4d:d0:b2:81:4f:f7:d2:72:72:24:09: b9:be:84:17:13:35:2e:36:86:1d:d1:10:23:f6:28:07:e0:15: 3c:02:e3:5f:15:8d:d1:b3:a8:f3:86:7f:f0:bb:aa:4a:60:ff: 87:37:d9:4d:da:30:81:01:ec:69:16:02:03:1b:99:88:00:4f: 20:06:b3:58:6a:6b:63:e6:13:02:b6:62:bc:0a:cb:61:14:7b: c0:94:eb:28:28:83:b4:71:a6:49:30:57:a4:17:82:21:c6:63: ba:5c:ea:0b:13:95:28:6d:70:b8:ba:7b:56:f0:01:f3:04:b7: b1:34:ba:9f:a4:48:83:ce:43:6d:d7:23:df:f8:cd:13:41:a8: c5:22:6a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+8lukBEYITp8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzY4OWNjMjMtNTZhNi00M2VlLTk3YTctYzdmZjdhNTUzMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDF+8Bm2+rMZNAuZ7ZCNJyixa+GWldFVZylu CGF/rZXtLbY1nLERu/GVc4LE2YL7SvNXzRO5X5VSoxXAud4IOsFNhwYYReAhyL/R Vs7FerhoNomGJhTp5awbJ7ljALYSnDHIwXuldz20nWKWv6FIG9WBfybyGu/9mQva 7eT65Lflqg+Ou3aWmrSdU7MxyFtMW1Od8rpzI4XB21aEsa3TU4aluk6JeYTnDqgG iGtMxHouzHa++8ev8Gvir+QncxEVo5KKe0RSrO5ecSVkwjb0cf9FL7mX+N9Amo/5 48OSHIOQwSTiuajdQhmC6Z7hWLC3U26GDfFbBnzQ1R8Ff9i08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgpvJmRFHyTUFLES4m6FhTAWsoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y3MTVkZmUtYzc0MC0z N2NjLWEzNDAtN2U0ZjNhYmNlYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEohaLC9I9WJPin3bVyvAlj+5tddhxpiSgkf4tY6fkO7spzkkLCog0ym oxj6swsyicpLae21UPKEPixHa6z7XCXY0EWR/ygp2RcDvUbIRgZ6ZP+NEqZZ5v2s yreuHhndLlF1dp2nzq4aIEog9nijYVlRSq9N0LKBT/fScnIkCbm+hBcTNS42hh3R ECP2KAfgFTwC418VjdGzqPOGf/C7qkpg/4c32U3aMIEB7GkWAgMbmYgATyAGs1hq a2PmEwK2YrwKy2EUe8CU6ygog7RxpkkwV6QXgiHGY7pc6gsTlShtcLi6e1bwAfME t7E0up+kSIPOQ23XI9/4zRNBqMUiakI= -----END CERTIFICATE-----Generated at Sun Apr 12 08:09:21 2026 by rpki-client