$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa File: 828ba51e-8e44-3e85-b79a-94a913c838e4.roa (raw, json) Hash identifier: VSq8ilvVnHq96m62wfRTheEXBR3sTGD02riZFfu+kNM= Subject key identifier: AB:F1:27:FF:39:77:31:B9:29:D2:4C:E3:B8:19:71:C0:C8:F6:87:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF6CD6A10FB49DF47C980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397239 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f6:cd:6a:10:fb:49:df:47:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=b79c762f-9a50-417d-a2d7-e1d05b06c087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a3:2e:27:36:56:c7:68:db:43:b7:e9:64:91: 24:a0:b4:72:e1:42:a8:4b:0d:1b:53:ec:d3:73:76: 74:7a:11:55:da:ca:9c:24:88:27:02:61:20:77:8c: a7:dd:21:bd:08:e1:98:f3:80:70:ce:1d:b6:36:f9: c0:e9:ba:ec:1c:3f:ab:1b:cf:4e:9a:58:ce:1e:70: a2:56:5b:3a:f6:97:62:77:bb:4f:a2:12:34:ab:20: 33:10:76:7e:b2:12:68:95:09:a8:17:67:2c:1e:ba: a3:18:f7:1e:fa:79:54:8f:f9:23:68:ee:4b:93:61: bc:36:44:48:f0:14:bb:bb:c3:83:1d:3f:89:62:83: bc:cf:23:49:df:54:bf:f4:71:12:8a:3d:91:10:1c: 88:93:4a:c6:97:cc:22:ec:fd:7b:ad:b0:59:7e:ab: 04:86:87:bc:51:1f:71:9b:39:da:21:ee:1a:94:43: 1f:b8:4e:fc:6a:e9:37:6b:9d:a7:44:91:1e:0f:90: 9d:b0:e2:cc:6c:96:88:f5:d6:ab:cf:24:06:a4:14: 9e:6b:0b:ff:aa:6d:9f:80:38:57:4b:75:56:8d:d6: 3c:93:d3:3b:c4:85:cf:6a:52:18:1b:05:0d:dc:c4: 4c:92:8b:21:e4:96:75:3c:af:b9:51:41:49:82:f3: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F1:27:FF:39:77:31:B9:29:D2:4C:E3:B8:19:71:C0:C8:F6:87:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/828ba51e-8e44-3e85-b79a-94a913c838e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c0:0f:65:b1:50:82:25:57:1d:25:4a:97:97:1d:76:4d:81: be:9c:62:d5:06:1e:a4:71:9e:4e:4c:64:8b:64:74:4d:bf:d1: 7c:d2:ce:22:bc:f4:4e:4e:7a:62:82:c8:4a:d7:00:b8:c2:d6: af:a2:a1:50:8d:59:d8:67:6b:04:d8:57:a8:92:bc:4e:26:01: 92:71:b9:7d:9c:bb:ad:9f:66:0b:2b:c0:d4:6a:77:90:b1:51: 55:39:3e:e7:0f:a8:99:25:93:7c:20:70:cc:de:1a:94:98:af: 9e:0d:f6:4b:32:eb:2a:1a:bb:19:8c:e7:e2:b9:9b:a2:03:71: 0e:53:5b:db:77:84:c0:97:ac:71:bc:b4:ae:9d:30:be:b2:b2: b2:1d:0e:3a:6e:6b:8e:da:d2:ea:32:2c:2d:99:27:52:77:eb: 4b:4f:4c:40:af:8a:fe:23:47:61:ab:02:f9:92:02:0d:d9:be: 9f:82:46:f4:64:48:44:93:f3:03:f7:75:c3:3c:66:13:88:7f: e1:af:a2:77:28:7a:01:fb:3d:e6:5a:9e:33:1c:ab:d7:01:57: be:46:1a:bc:5b:db:32:62:09:75:2a:5f:74:bf:94:82:88:91: c1:c0:25:20:24:c6:f3:d3:9d:50:0e:79:c8:f0:59:d7:fc:2e: db:12:45:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/bNahD7Sd9HyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk Yjc5Yzc2MmYtOWE1MC00MTdkLWEyZDctZTFkMDViMDZjMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaMuJzZWx2jbQ7fpZJEkoLRy4UKoSw0bU+zT c3Z0ehFV2sqcJIgnAmEgd4yn3SG9COGY84Bwzh22NvnA6brsHD+rG89OmljOHnCi Vls69pdid7tPohI0qyAzEHZ+shJolQmoF2csHrqjGPce+nlUj/kjaO5Lk2G8NkRI 8BS7u8ODHT+JYoO8zyNJ31S/9HESij2REByIk0rGl8wi7P17rbBZfqsEhoe8UR9x mznaIe4alEMfuE78auk3a52nRJEeD5CdsOLMbJaI9darzyQGpBSeawv/qm2fgDhX S3VWjdY8k9M7xIXPalIYGwUN3MRMkosh5JZ1PK+5UUFJgvN20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvxJ/85dzG5KdJM47gZccDI9oewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODI4YmE1MWUtOGU0NC0z ZTg1LWI3OWEtOTRhOTEzYzgzOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPAD2WxUIIlVx0lSpeXHXZNgb6cYtUGHqRxnk5MZItkdE2/0XzSziK8 9E5OemKCyErXALjC1q+ioVCNWdhnawTYV6iSvE4mAZJxuX2cu62fZgsrwNRqd5Cx UVU5PucPqJklk3wgcMzeGpSYr54N9ksy6yoauxmM5+K5m6IDcQ5TW9t3hMCXrHG8 tK6dML6ysrIdDjpua47a0uoyLC2ZJ1J360tPTECviv4jR2GrAvmSAg3Zvp+CRvRk SEST8wP3dcM8ZhOIf+GvoncoegH7PeZanjMcq9cBV75GGrxb2zJiCXUqX3S/lIKI kcHAJSAkxvPTnVAOecjwWdf8LtsSRQ4= -----END CERTIFICATE-----Generated at Sun Apr 12 08:09:23 2026 by rpki-client