$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa File: 685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa (raw, json) Hash identifier: d3uz7k9O04ePVSkPEG7od3zQoZ2L27N/EzCrST79TfY= Subject key identifier: 65:68:CC:DB:E4:24:3B:F3:98:30:B4:BA:7C:68:A8:B5:37:46:19:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF41BE2FE7B5C3DC06580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397213 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f4:1b:e2:fe:7b:5c:3d:c0:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=4a8c723c-a225-4cfc-8945-a119cd599711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:11:64:f1:09:24:c8:9f:08:50:b1:df:92: 48:89:8c:c9:23:8e:c9:09:b1:70:db:3c:ca:cb:6e: 5a:cc:71:3e:2e:5c:fa:2a:be:9a:db:9c:9b:b8:e9: 4b:60:7d:b7:1a:b3:f1:d3:2b:51:49:81:dc:fa:72: b2:83:3f:16:97:d7:13:c9:5e:dd:95:ae:3e:1d:65: b0:92:5e:06:e3:3b:b3:55:53:13:d7:87:1f:14:5c: 4b:eb:e5:c1:b0:e6:0b:b3:8d:25:d5:5c:6b:24:56: 51:79:3b:57:c7:54:24:ed:b2:85:bc:11:24:6d:bb: ee:80:35:ee:3b:e2:1e:5c:d3:ff:c8:20:ab:1d:8b: e6:8a:45:0d:a6:5b:99:77:23:b9:1b:bc:87:13:c2: 57:d1:cc:61:37:06:62:c2:6d:53:68:c5:2c:28:d0: 41:44:fb:1d:94:21:27:9f:ee:aa:f4:e3:1b:3c:28: d2:c0:cd:47:94:4d:6e:75:e8:b3:34:4c:75:42:b7: 15:c4:6a:2c:7a:76:70:57:9c:d8:c8:c5:08:02:20: 65:bd:cb:46:70:24:72:9c:20:4f:a3:55:6d:5c:03: 3b:3f:00:e6:5d:73:5c:78:21:ec:fb:df:bf:93:15: c2:8d:4d:d3:62:5f:75:59:2f:5c:c1:aa:57:02:ff: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:68:CC:DB:E4:24:3B:F3:98:30:B4:BA:7C:68:A8:B5:37:46:19:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/685a98f8-74c0-36da-aace-55ad0ff6a2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:46:98:d7:d4:2a:69:64:da:23:36:b1:77:ec:01:9c:d1:2a: 35:60:a0:08:9a:08:8d:2f:e0:c8:09:f4:84:9e:98:a4:3f:f1: ec:c7:43:19:5d:4a:f9:6c:a1:e7:02:cc:52:d0:dc:16:ef:ed: 1f:e7:1f:2c:f7:19:47:37:fd:d5:49:c8:a7:91:18:a2:0c:ca: ac:f2:5b:0c:1b:03:11:14:86:a1:dc:0b:3a:00:59:91:d8:7e: 1e:8d:c7:be:3b:37:c3:01:f5:18:f0:0c:66:c6:f3:a0:4a:3a: ed:60:73:8a:51:33:bc:16:c1:5b:78:f9:28:27:1f:1f:ed:1e: 67:ab:4e:b4:99:a0:59:64:f2:0d:66:3e:8d:f2:7e:b2:05:13: f3:72:b8:b4:2a:4a:55:e3:a8:2f:7f:52:82:7b:8f:eb:73:d7: e2:33:22:c0:0b:bf:51:4c:65:0a:3b:c0:cf:8b:75:b3:dc:c8: 55:a5:55:f3:3c:8b:7e:34:39:a6:45:39:65:c1:97:04:7d:ad: 79:6e:ae:97:88:12:23:e9:6f:90:16:e1:16:45:3d:4c:42:2e: 16:8a:89:04:a1:da:ca:e0:80:90:33:57:f3:fb:28:6c:c0:f2: 55:21:99:4f:36:98:62:df:51:ce:4b:79:61:04:8c:0a:e8:c3: fd:2d:51:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/Qb4v57XD3AZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NGE4YzcyM2MtYTIyNS00Y2ZjLTg5NDUtYTExOWNkNTk5NzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70RZPEJJMifCFCx35JIiYzJI47JCbFw2zzK y25azHE+Llz6Kr6a25ybuOlLYH23GrPx0ytRSYHc+nKygz8Wl9cTyV7dla4+HWWw kl4G4zuzVVMT14cfFFxL6+XBsOYLs40l1VxrJFZReTtXx1Qk7bKFvBEkbbvugDXu O+IeXNP/yCCrHYvmikUNpluZdyO5G7yHE8JX0cxhNwZiwm1TaMUsKNBBRPsdlCEn n+6q9OMbPCjSwM1HlE1udeizNEx1QrcVxGosenZwV5zYyMUIAiBlvctGcCRynCBP o1VtXAM7PwDmXXNceCHs+9+/kxXCjU3TYl91WS9cwapXAv+ZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVozNvkJDvzmDC0unxoqLU3RhnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjg1YTk4ZjgtNzRjMC0z NmRhLWFhY2UtNTVhZDBmZjZhMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9GmNfUKmlk2iM2sXfsAZzRKjVgoAiaCI0v4MgJ9ISemKQ/8ezHQxld SvlsoecCzFLQ3Bbv7R/nHyz3GUc3/dVJyKeRGKIMyqzyWwwbAxEUhqHcCzoAWZHY fh6Nx747N8MB9RjwDGbG86BKOu1gc4pRM7wWwVt4+SgnHx/tHmerTrSZoFlk8g1m Po3yfrIFE/NyuLQqSlXjqC9/UoJ7j+tz1+IzIsALv1FMZQo7wM+LdbPcyFWlVfM8 i340OaZFOWXBlwR9rXlurpeIEiPpb5AW4RZFPUxCLhaKiQSh2srggJAzV/P7KGzA 8lUhmU82mGLfUc5LeWEEjArow/0tUc8= -----END CERTIFICATE-----Generated at Sun Apr 12 08:10:12 2026 by rpki-client