$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa File: af970f38-b9fd-394b-953e-9631e8030666.roa (raw, json) Hash identifier: myJPSY06eIywuU5jP9MI9W5iwY6la9SiciUioa+cyTE= Subject key identifier: 1B:90:B9:B6:CB:93:A0:19:5B:71:21:1B:BA:D2:03:CA:18:80:D4:FC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FE91EE26DD0349F901A30 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397213 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:e9:1e:e2:6d:d0:34:9f:90:1a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=399eff3a-349a-4364-8d79-1dafa7ac5296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:18:7c:7e:b5:71:f7:7b:2c:c5:29:05:03: 5b:e7:eb:f2:9a:e4:92:91:17:d6:fd:dd:a8:02:8f: cd:af:96:ec:54:58:0c:84:aa:88:3e:1c:0d:a1:62: f4:2f:52:a5:9f:66:29:2e:83:0c:12:02:1d:95:7c: bc:2b:c0:26:5f:62:77:f1:d1:cb:20:4a:4e:1d:6a: 67:35:0d:08:1b:b6:e7:aa:dc:0b:d2:ff:30:f5:1b: 6a:ed:72:62:98:ce:d6:4a:91:45:63:22:95:59:5a: 56:47:cd:b0:6a:de:ca:47:22:4c:1e:e3:43:bd:60: 2e:4b:5d:b2:82:e1:04:20:7a:78:58:cc:db:ff:27: 12:f1:da:22:03:c3:29:5e:8e:06:48:4f:4c:2e:d6: c4:a5:c9:2e:84:11:c9:ea:71:b9:62:60:0b:df:a8: 36:a3:54:78:ea:23:d4:b1:03:f0:19:a0:0a:00:25: 9e:bf:ed:c3:a3:e7:92:71:a8:ac:0b:0a:3e:12:94: 62:db:21:9f:4c:0b:12:8a:19:2f:4c:ca:68:57:66: d7:66:68:8f:b7:bf:22:a6:1d:03:1b:75:4c:71:7c: 10:70:a4:49:f4:8d:04:41:ca:49:09:8a:73:4b:5e: 1d:7a:a6:f5:ee:a1:2e:e7:ae:6f:c8:cb:ee:2c:c0: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:90:B9:B6:CB:93:A0:19:5B:71:21:1B:BA:D2:03:CA:18:80:D4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a4:4c:60:bb:7a:82:fe:4c:a7:b0:b7:7b:be:af:1d:9e:53: 04:96:68:9a:b8:6d:57:a3:ee:a5:15:83:2a:76:42:30:db:1d: 54:7e:3a:9d:ae:23:e5:29:24:c7:75:8e:cb:e5:3c:ab:6f:a8: 4d:f7:71:87:a6:c3:cd:58:98:95:b4:d0:4f:c1:bf:e9:50:b3: fd:e7:24:fd:3f:3c:1d:6f:22:c9:da:72:31:19:48:b0:33:bb: c8:58:78:a2:d1:78:31:4c:25:12:12:1d:30:6a:20:43:11:39: 9f:67:dd:24:b3:1d:8b:b8:80:1c:95:8a:07:ae:52:ef:e9:f0: 31:25:2e:fc:16:c6:05:fa:ad:b3:28:57:03:40:d8:0f:54:6b: 69:41:dd:23:97:6f:5c:44:1f:9d:4e:34:c6:ae:34:d7:6d:1e: 76:97:90:98:da:ee:d0:83:e3:6f:2e:de:27:85:ad:f4:42:f6: 6f:bc:73:97:b0:df:95:3b:b1:c6:27:3a:45:06:8a:85:09:09: d2:a3:c7:2f:ec:d5:9b:85:f7:25:6c:67:43:c8:d1:34:6e:2d: 4c:b4:4d:38:60:2b:26:28:5d:c7:2c:f3:a9:08:b5:0f:64:1e: bb:af:02:d6:81:7b:a4:89:4c:af:c1:3e:37:ae:21:aa:49:a6: f1:49:44:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+ke4m3QNJ+QGjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk Mzk5ZWZmM2EtMzQ5YS00MzY0LThkNzktMWRhZmE3YWM1Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN0YfH61cfd7LMUpBQNb5+vymuSSkRfW/d2o Ao/Nr5bsVFgMhKqIPhwNoWL0L1Kln2YpLoMMEgIdlXy8K8AmX2J38dHLIEpOHWpn NQ0IG7bnqtwL0v8w9Rtq7XJimM7WSpFFYyKVWVpWR82wat7KRyJMHuNDvWAuS12y guEEIHp4WMzb/ycS8doiA8MpXo4GSE9MLtbEpckuhBHJ6nG5YmAL36g2o1R46iPU sQPwGaAKACWev+3Do+eScaisCwo+EpRi2yGfTAsSihkvTMpoV2bXZmiPt78iph0D G3VMcXwQcKRJ9I0EQcpJCYpzS14deqb17qEu565vyMvuLMC9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuQubbLk6AZW3EhG7rSA8oYgNT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY5NzBmMzgtYjlmZC0z OTRiLTk1M2UtOTYzMWU4MDMwNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSkTGC7eoL+TKewt3u+rx2eUwSWaJq4bVej7qUVgyp2QjDbHVR+Op2u I+UpJMd1jsvlPKtvqE33cYemw81YmJW00E/Bv+lQs/3nJP0/PB1vIsnacjEZSLAz u8hYeKLReDFMJRISHTBqIEMROZ9n3SSzHYu4gByVigeuUu/p8DElLvwWxgX6rbMo VwNA2A9Ua2lB3SOXb1xEH51ONMauNNdtHnaXkJja7tCD428u3ieFrfRC9m+8c5ew 35U7scYnOkUGioUJCdKjxy/s1ZuF9yVsZ0PI0TRuLUy0TThgKyYoXccs86kItQ9k HruvAtaBe6SJTK/BPjeuIapJpvFJRAk= -----END CERTIFICATE-----Generated at Sun Apr 12 08:12:20 2026 by rpki-client