$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa File: f0e6f290-2156-3a96-867b-1bba2c3f9768.roa (raw, json) Hash identifier: rKFE8kXnW0WLtJX9FVP34NU177yYkFPNr4HbnWUp4Qo= Subject key identifier: 61:20:50:7D:42:19:E4:2C:7C:7F:9F:FD:37:60:6E:FD:C0:1F:2B:75 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D746FF886B132C65A906C6880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397243 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:f8:86:b1:32:c6:5a:90:6c:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=61faa5a0-c947-4c33-8e9e-eabc672968d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:46:9e:7a:08:d5:05:59:c8:a2:25:15:4a: fb:ae:66:71:22:00:6f:15:5a:77:56:fa:9e:01:35: 5b:b2:86:34:fd:3c:71:b3:82:6f:58:e8:65:fc:06: d5:86:25:59:d7:a3:ff:f1:32:89:c4:64:06:bb:e2: 3b:1b:ed:86:b9:7f:e5:64:95:6c:8f:79:07:e6:0f: 6f:2b:85:28:db:f6:d8:71:16:22:38:82:65:18:83: 5d:7c:5a:34:35:0b:05:61:30:0c:6c:25:13:86:3d: b7:8c:fd:17:3c:97:07:0f:48:18:d1:13:69:86:44: 2d:31:79:86:f0:97:b6:7b:0d:06:32:45:0a:f9:41: 18:df:4d:5b:bb:4d:8d:3a:16:fb:76:d9:8a:98:58: ef:21:35:15:d2:be:cf:0e:5a:42:84:81:e4:4b:8a: d0:ac:48:38:3c:05:d8:08:8d:b5:5d:aa:62:ff:a1: b4:04:e0:07:61:a5:b3:b0:16:b6:57:cc:a7:13:fc: 02:3c:f6:e6:e7:e0:42:e2:47:ee:0a:9f:08:25:f2: 4a:d4:69:0d:98:ee:fe:61:e6:d4:d0:79:79:d8:05: f4:d7:f6:f3:98:e7:2f:3d:03:7b:83:d5:93:c8:98: 0e:34:ce:c8:ec:87:e1:5d:e8:a6:35:a3:30:6c:e9: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:20:50:7D:42:19:E4:2C:7C:7F:9F:FD:37:60:6E:FD:C0:1F:2B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f0e6f290-2156-3a96-867b-1bba2c3f9768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9b:a4:e0:b9:96:4e:de:c7:b5:e6:c1:fa:68:3b:7d:09:74: c8:85:20:ef:7c:97:9c:f1:c2:10:2c:00:dd:69:dc:9c:0a:78: 93:a2:d6:d0:7e:e1:86:1f:6a:5d:e9:d6:2b:d6:b9:65:b9:56: 5f:7b:54:50:a3:aa:42:c4:1f:e6:5a:77:d4:fa:b5:a3:18:b9: da:3f:58:ff:99:98:69:a6:69:60:ea:aa:8c:e0:b3:a8:75:be: dc:3f:2b:8f:04:26:12:47:1e:36:51:9e:41:b7:3e:69:ad:9d: 98:1c:4e:0b:07:d8:93:bd:79:e8:79:65:a7:ab:64:8f:dd:6e: 73:e4:f8:47:1c:b9:32:97:2b:08:fc:0f:1e:cb:a0:c2:13:af: 1d:d4:60:5a:cf:46:3e:06:a2:f9:bb:a8:48:28:3d:75:90:32: 30:01:a3:6e:bc:f7:98:9b:34:b2:6b:bd:d1:63:79:c1:4b:9f: 5e:aa:4d:22:05:55:43:97:f3:a8:83:8e:a8:2e:7f:91:db:62: 06:e3:7a:e5:bf:f2:24:86:da:a6:bb:91:cc:a2:27:45:7a:70: 5c:02:89:0c:90:a7:95:19:e9:97:46:31:2d:04:b9:06:77:b4: 9a:26:74:48:af:77:11:28:da:7b:72:ff:e2:a6:fb:e4:16:6d: 7e:9e:d1:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/iGsTLGWpBsaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NjFmYWE1YTAtYzk0Ny00YzMzLThlOWUtZWFiYzY3Mjk2OGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiNGnnoI1QVZyKIlFUr7rmZxIgBvFVp3Vvqe ATVbsoY0/Txxs4JvWOhl/AbVhiVZ16P/8TKJxGQGu+I7G+2GuX/lZJVsj3kH5g9v K4Uo2/bYcRYiOIJlGINdfFo0NQsFYTAMbCUThj23jP0XPJcHD0gY0RNphkQtMXmG 8Je2ew0GMkUK+UEY301bu02NOhb7dtmKmFjvITUV0r7PDlpChIHkS4rQrEg4PAXY CI21Xapi/6G0BOAHYaWzsBa2V8ynE/wCPPbm5+BC4kfuCp8IJfJK1GkNmO7+YebU 0Hl52AX01/bzmOcvPQN7g9WTyJgONM7I7IfhXeimNaMwbOkdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEgUH1CGeQsfH+f/Tdgbv3AHyt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjBlNmYyOTAtMjE1Ni0z YTk2LTg2N2ItMWJiYTJjM2Y5NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2bpOC5lk7ex7XmwfpoO30JdMiFIO98l5zxwhAsAN1p3JwKeJOi1tB+ 4YYfal3p1ivWuWW5Vl97VFCjqkLEH+Zad9T6taMYudo/WP+ZmGmmaWDqqozgs6h1 vtw/K48EJhJHHjZRnkG3PmmtnZgcTgsH2JO9eeh5ZaerZI/dbnPk+EccuTKXKwj8 Dx7LoMITrx3UYFrPRj4Govm7qEgoPXWQMjABo26895ibNLJrvdFjecFLn16qTSIF VUOX86iDjqguf5HbYgbjeuW/8iSG2qa7kcyiJ0V6cFwCiQyQp5UZ6ZdGMS0EuQZ3 tJomdEivdxEo2nty/+Km++QWbX6e0UY= -----END CERTIFICATE-----Generated at Sun Apr 12 08:09:16 2026 by rpki-client