$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa File: b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa (raw, json) Hash identifier: RXXOxP57s//0QMWv9vTTlovq0QjProkkJF2D8QJwpIo= Subject key identifier: 5D:7D:F8:D8:9E:73:80:F7:8D:B2:29:42:C4:10:52:62:7A:B1:EF:ED Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FE8D6CA16D950857F9620 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397240 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:e8:d6:ca:16:d9:50:85:7f:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=87cbb9b4-ada0-47f6-8d67-e4a4b3cf4c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:4f:84:ef:7f:93:48:6b:08:eb:1b:3d:b9: 79:29:43:1c:a7:74:4f:5f:da:83:0b:e8:c5:01:ea: 95:68:12:dc:74:5a:91:62:19:d2:5a:a0:db:69:c5: f6:69:13:87:bc:cd:db:f5:a5:de:a8:4c:0a:8e:b8: af:4a:bc:64:89:6b:1b:75:0d:3b:5d:7c:23:23:15: 9d:f7:d1:ee:7d:ba:cf:b3:3f:6c:11:97:42:36:a6: 2e:49:9d:4d:2a:49:ac:f6:32:4e:56:b9:3e:5d:83: 58:c7:f4:9b:b9:c6:a0:03:37:32:16:fa:f0:b8:9a: 44:06:0e:47:04:af:97:68:75:59:ce:97:15:75:2a: ca:68:c8:20:17:86:ad:00:dc:e4:70:a2:60:78:ae: 8a:cf:dd:4d:0b:dd:79:01:0b:11:44:79:7c:5c:3b: fc:28:cc:da:fb:02:ec:21:24:4f:49:93:62:64:5b: fd:05:ce:d5:71:a6:e5:c6:0d:e0:dc:09:9d:56:74: 57:b7:a6:90:14:82:44:8d:fa:86:bd:d2:96:22:76: ba:67:15:16:55:ac:08:97:3f:cb:63:d3:ae:e2:ee: 27:32:07:56:0c:9f:d0:ae:ed:bb:38:41:16:64:f6: 48:f9:6f:16:e3:63:14:97:72:55:7c:38:d4:74:89: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:F8:D8:9E:73:80:F7:8D:B2:29:42:C4:10:52:62:7A:B1:EF:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b2cf300a-ebc5-36f5-9098-f2abd0455ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:58:bc:0c:f1:91:9b:22:69:4b:9b:ec:05:a7:ba:bd:98:20: c1:37:39:e6:37:ad:4b:fe:2b:f7:88:fd:9f:da:df:e9:d0:57: 44:10:65:ab:91:1d:d0:e8:cd:bf:7f:a0:90:47:a1:a3:46:d6: c4:f3:01:40:98:99:9b:ab:35:84:ef:ef:66:d0:4a:82:9f:50: e3:09:c0:6c:85:98:bc:36:bf:c0:67:46:60:b1:71:8b:9a:be: 19:81:b3:21:36:3a:7c:7c:0d:cb:76:3c:28:37:ce:48:cd:83: 3e:6b:6c:93:7a:7b:70:68:b5:4d:12:a3:b5:a9:cc:95:fe:15: eb:6a:f5:f8:ed:ce:40:4f:d2:fd:64:7e:25:63:a4:0b:eb:0b: b2:d7:f5:ba:be:b8:11:d5:18:6a:1e:ca:2b:8c:aa:cd:c4:38: d9:00:58:23:ae:77:1b:ae:96:a4:7b:56:6e:6e:e7:50:fc:ed: 08:53:fc:38:31:02:38:46:4a:0e:31:b4:16:bd:71:23:13:fc: ee:d8:e2:69:27:a8:0c:5f:20:b5:a3:5c:b7:78:05:80:58:54: 23:cf:27:58:ae:4b:7b:9e:c9:18:d6:4c:3a:83:fc:23:89:af: 2b:45:5e:0b:bb:29:68:92:7a:4f:14:a9:a2:3a:29:e7:61:5d: fd:fb:55:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+jWyhbZUIV/liAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ODdjYmI5YjQtYWRhMC00N2Y2LThkNjctZTRhNGIzY2Y0YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidtPhO9/k0hrCOsbPbl5KUMcp3RPX9qDC+jF AeqVaBLcdFqRYhnSWqDbacX2aROHvM3b9aXeqEwKjrivSrxkiWsbdQ07XXwjIxWd 99HufbrPsz9sEZdCNqYuSZ1NKkms9jJOVrk+XYNYx/SbucagAzcyFvrwuJpEBg5H BK+XaHVZzpcVdSrKaMggF4atANzkcKJgeK6Kz91NC915AQsRRHl8XDv8KMza+wLs ISRPSZNiZFv9Bc7Vcablxg3g3AmdVnRXt6aQFIJEjfqGvdKWIna6ZxUWVawIlz/L Y9Ou4u4nMgdWDJ/Qru27OEEWZPZI+W8W42MUl3JVfDjUdImfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF19+Niec4D3jbIpQsQQUmJ6se/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjJjZjMwMGEtZWJjNS0z NmY1LTkwOTgtZjJhYmQwNDU1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtYvAzxkZsiaUub7AWnur2YIME3OeY3rUv+K/eI/Z/a3+nQV0QQZauR HdDozb9/oJBHoaNG1sTzAUCYmZurNYTv72bQSoKfUOMJwGyFmLw2v8BnRmCxcYua vhmBsyE2Onx8Dct2PCg3zkjNgz5rbJN6e3BotU0So7WpzJX+Fetq9fjtzkBP0v1k fiVjpAvrC7LX9bq+uBHVGGoeyiuMqs3EONkAWCOudxuulqR7Vm5u51D87QhT/Dgx AjhGSg4xtBa9cSMT/O7Y4mknqAxfILWjXLd4BYBYVCPPJ1iuS3ueyRjWTDqD/COJ rytFXgu7KWiSek8UqaI6KedhXf37VX0= -----END CERTIFICATE-----Generated at Sun Apr 12 08:11:50 2026 by rpki-client