$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa File: d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa (raw, json) Hash identifier: bP88cmGGJ7JcDdlwGd9PA/vq6CCqYpEOK3YFT6av+ho= Subject key identifier: DB:A7:82:0A:B6:4F:43:8A:98:73:02:13:A7:5A:2B:5B:93:70:61:03 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF0D424AFC0EF3D6F8680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397243 IP address blocks: 156.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f0:d4:24:af:c0:ef:3d:6f:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ebdb4364-b8c8-44f0-bcb8-3afe766f72bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:77:e4:dc:b0:69:de:47:9c:63:f5:aa:6e: 17:dc:21:0c:98:28:44:c1:14:10:8f:d3:b4:e1:d9: 5c:fb:5a:35:63:27:c5:02:03:ad:1a:a9:11:9a:a1: e2:29:ab:90:13:dc:d7:44:df:1b:5f:61:6b:13:5f: e3:0f:78:e5:b6:c9:9b:0b:1d:d9:6e:a3:19:4f:32: 47:e1:17:c7:22:7f:31:a7:4f:5b:b9:f3:b9:eb:ee: 22:c5:85:fd:d3:92:37:64:f8:8a:89:6f:a8:69:e7: d1:2d:89:82:fe:2e:d7:72:e8:25:9d:87:3d:98:65: 4a:84:f7:c0:66:f0:73:dd:80:6d:8b:29:75:1e:74: d3:33:ce:c5:38:33:cc:12:56:45:8f:c6:be:b4:f4: 04:c8:9e:6c:07:9f:c6:18:4d:0e:2d:52:00:bd:31: 04:d6:a7:e7:18:fb:85:e2:42:71:98:48:36:fe:6e: 25:57:bc:f2:b9:3a:8c:b0:f0:4d:bc:d8:77:3e:d7: 84:4c:d5:14:ba:72:d6:9f:fb:3b:22:04:5c:88:ee: aa:53:54:6f:97:27:9d:c0:3d:c5:2c:31:e3:1d:16: 5b:4c:f4:22:f5:64:f1:4d:12:e0:f5:eb:00:87:73: 25:27:c9:b2:be:88:ec:d7:fe:a5:2f:0a:24:f0:0a: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:82:0A:B6:4F:43:8A:98:73:02:13:A7:5A:2B:5B:93:70:61:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d9deeaa9-8a1d-3c01-b5a2-534753e269b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0a:8f:54:ad:07:a1:34:c9:f3:62:e6:e5:6b:d2:de:6d:c8: b6:84:0a:a3:4a:5e:eb:9c:bd:c9:ca:14:33:83:e5:de:b3:4c: bb:e5:82:00:2e:fb:7f:1e:a1:c0:62:b2:26:af:f7:da:c3:9a: a7:02:05:e7:d1:af:b3:49:d7:77:65:6d:66:43:0d:27:94:01: a8:c3:59:b9:9b:b0:76:08:5a:af:95:02:80:6e:96:f9:5f:bf: 49:f3:6b:65:f8:26:f9:d4:a8:84:89:20:04:91:f4:a0:d3:80: 42:d1:ad:ff:a2:14:92:63:2f:f1:9f:cd:3b:64:83:78:73:da: 1d:36:8e:67:ec:8d:d6:50:82:9b:12:06:de:69:cc:8b:42:5f: 92:38:4e:52:92:82:2b:07:8a:86:0f:eb:db:fb:42:32:79:df: 6e:cf:9a:90:57:39:0e:ee:8d:b0:49:c4:ad:b4:db:0e:a3:cf: 0f:13:a4:d5:f4:f3:87:23:e1:93:b7:77:36:d2:cc:a8:97:ae: 81:f7:d3:7f:9d:2e:1c:d5:41:6a:6a:d4:ad:82:e9:28:9d:d7: d1:81:69:5b:83:52:03:e3:58:fc:fa:1a:f0:66:c7:d5:d9:e5: c5:2e:6c:c7:5e:f6:21:cc:c4:42:62:4e:0b:0d:b9:67:98:16: a0:e6:db:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/DUJK/A7z1vhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWJkYjQzNjQtYjhjOC00NGYwLWJjYjgtM2FmZTc2NmY3MmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSh35Nywad5HnGP1qm4X3CEMmChEwRQQj9O0 4dlc+1o1YyfFAgOtGqkRmqHiKauQE9zXRN8bX2FrE1/jD3jltsmbCx3ZbqMZTzJH 4RfHIn8xp09bufO56+4ixYX905I3ZPiKiW+oaefRLYmC/i7XcuglnYc9mGVKhPfA ZvBz3YBtiyl1HnTTM87FODPMElZFj8a+tPQEyJ5sB5/GGE0OLVIAvTEE1qfnGPuF 4kJxmEg2/m4lV7zyuTqMsPBNvNh3PteETNUUunLWn/s7IgRciO6qU1RvlyedwD3F LDHjHRZbTPQi9WTxTRLg9esAh3MlJ8myvojs1/6lLwok8AqX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNunggq2T0OKmHMCE6daK1uTcGEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDlkZWVhYTktOGExZC0z YzAxLWI1YTItNTM0NzUzZTI2OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMKj1StB6E0yfNi5uVr0t5tyLaECqNKXuucvcnKFDOD5d6zTLvlggAu +38eocBisiav99rDmqcCBefRr7NJ13dlbWZDDSeUAajDWbmbsHYIWq+VAoBulvlf v0nza2X4JvnUqISJIASR9KDTgELRrf+iFJJjL/GfzTtkg3hz2h02jmfsjdZQgpsS Bt5pzItCX5I4TlKSgisHioYP69v7QjJ5327PmpBXOQ7ujbBJxK202w6jzw8TpNX0 84cj4ZO3dzbSzKiXroH303+dLhzVQWpq1K2C6Sid19GBaVuDUgPjWPz6GvBmx9XZ 5cUubMde9iHMxEJiTgsNuWeYFqDm248= -----END CERTIFICATE-----Generated at Sun Apr 12 08:07:47 2026 by rpki-client