$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa File: 4053a2ad-b648-3e8e-a65a-3efaf8888534.roa (raw, json) Hash identifier: SpFDMkQ3IS9whH4KlPsdiYemJWmCcQ5W/DuGmhqZn7c= Subject key identifier: 3E:41:0B:18:77:6E:96:39:C5:E0:2E:00:EE:53:2B:59:B9:5B:8E:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF5BDCE29041FDB970410 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397216 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f5:bd:ce:29:04:1f:db:97:04:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=44f78348-bbda-4dd8-8bfb-636c2b7b6c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:22:a2:e3:33:2b:12:1d:95:5f:36:07:dd: fa:ed:5b:31:a7:ad:e4:8a:ae:f8:eb:4b:4c:19:2e: a0:16:04:66:98:92:9e:28:7e:29:d2:d9:83:87:6d: 69:6e:b6:f7:17:fe:9f:a7:20:bb:3f:d6:fd:b4:5c: 6a:60:f5:1f:dd:70:90:c5:9a:df:02:82:cf:14:47: e1:2e:a8:9b:2f:59:be:01:d7:10:d2:b9:5a:d1:e5: 13:da:3a:0e:7f:5e:1a:b8:7d:d0:7a:42:4c:f9:59: 24:ae:ae:06:8e:9a:0a:a0:1f:db:39:72:2c:ae:59: fc:05:6b:89:39:6d:29:8f:27:2a:bb:32:e1:48:72: be:aa:21:f7:ef:93:14:35:f5:a3:fe:0c:ef:c8:59: 4e:06:79:34:cf:ba:13:6a:cc:12:2b:99:05:83:83: 79:e4:51:9b:a9:42:c5:da:93:79:ea:1c:80:ac:fa: 27:77:8b:d1:2e:b7:f9:f9:46:33:3f:d2:19:90:a6: d2:52:75:bd:ae:c5:ff:fa:62:78:92:62:48:0b:1f: e3:82:a7:33:1f:48:df:04:41:01:67:ed:98:1a:87: d1:76:37:aa:89:69:2a:33:d4:b4:08:6f:92:60:bb: b4:c0:27:ae:44:5c:93:83:5f:f3:1b:7b:8f:98:7b: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:0B:18:77:6E:96:39:C5:E0:2E:00:EE:53:2B:59:B9:5B:8E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:11:e3:6a:d6:7d:2a:93:ff:95:3e:d6:54:14:88:20:d2:ee: 49:ae:ba:10:4a:73:44:f9:5d:f9:26:44:70:82:fc:e6:3a:e0: 40:6f:5d:75:fc:0a:c8:f7:c2:7f:c5:70:a0:89:1f:04:f9:2b: 01:11:10:06:37:45:28:00:8d:d4:e8:c2:d6:b4:8e:67:72:ef: 29:86:7e:9e:47:67:39:6c:a3:01:6f:19:97:f9:1e:de:80:46: fd:39:46:47:5f:12:02:ae:63:51:91:3f:56:80:10:6c:df:2b: 18:31:53:10:0f:04:50:f7:4f:13:0b:72:45:3a:69:40:7d:9f: 56:a0:b3:8b:a7:74:f0:6a:57:23:c7:b7:57:0f:6a:fe:65:68: 63:cf:c8:2b:18:4e:f8:25:f4:0d:ad:4f:e8:83:03:98:c5:77: c4:77:18:4d:ca:aa:29:c1:7d:67:09:ee:be:53:1a:15:e8:1e: a0:93:80:ee:e0:c0:fa:51:35:44:0d:69:97:43:48:41:ed:34: 48:c9:89:89:96:fa:15:45:f8:f5:96:4f:b1:94:d4:1c:23:18: 32:52:61:29:d3:f1:c2:e8:04:ee:e6:21:2c:85:59:d1:4d:c1: c2:c8:d7:1e:d0:eb:9a:19:fc:29:4a:46:52:3d:9c:41:7f:db: 78:c0:f7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/W9zikEH9uXBBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NDRmNzgzNDgtYmJkYS00ZGQ4LThiZmItNjM2YzJiN2I2YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nMiouMzKxIdlV82B9367Vsxp63kiq7460tM GS6gFgRmmJKeKH4p0tmDh21pbrb3F/6fpyC7P9b9tFxqYPUf3XCQxZrfAoLPFEfh LqibL1m+AdcQ0rla0eUT2joOf14auH3QekJM+Vkkrq4GjpoKoB/bOXIsrln8BWuJ OW0pjycquzLhSHK+qiH375MUNfWj/gzvyFlOBnk0z7oTaswSK5kFg4N55FGbqULF 2pN56hyArPond4vRLrf5+UYzP9IZkKbSUnW9rsX/+mJ4kmJICx/jgqczH0jfBEEB Z+2YGofRdjeqiWkqM9S0CG+SYLu0wCeuRFyTg1/zG3uPmHuK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5BCxh3bpY5xeAuAO5TK1m5W46SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDA1M2EyYWQtYjY0OC0z ZThlLWE2NWEtM2VmYWY4ODg4NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8R42rWfSqT/5U+1lQUiCDS7kmuuhBKc0T5XfkmRHCC/OY64EBvXXX8 Csj3wn/FcKCJHwT5KwEREAY3RSgAjdTowta0jmdy7ymGfp5HZzlsowFvGZf5Ht6A Rv05RkdfEgKuY1GRP1aAEGzfKxgxUxAPBFD3TxMLckU6aUB9n1ags4undPBqVyPH t1cPav5laGPPyCsYTvgl9A2tT+iDA5jFd8R3GE3KqinBfWcJ7r5TGhXoHqCTgO7g wPpRNUQNaZdDSEHtNEjJiYmW+hVF+PWWT7GU1BwjGDJSYSnT8cLoBO7mISyFWdFN wcLI1x7Q65oZ/ClKRlI9nEF/23jA99o= -----END CERTIFICATE-----Generated at Sun Apr 12 08:10:51 2026 by rpki-client