$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce24405-3b01-39a9-a0c1-c236b21c01f6.roa File: fce24405-3b01-39a9-a0c1-c236b21c01f6.roa (raw, json) Hash identifier: 8Io+FP+sBZl8Tw+2424JEa9i5SBS+Qd4zd95ahXuM5U= Subject key identifier: 52:E6:9A:D0:68:AC:0C:CC:AC:79:14:A8:E1:90:C7:03:CD:B3:37:B9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D1B1A4EA62DB91A15E1B5D980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce24405-3b01-39a9-a0c1-c236b21c01f6.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397222 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:4e:a6:2d:b9:1a:15:e1:b5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=649224fd-7b25-405c-997e-f44e6b037f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:fe:73:dd:fc:5f:a1:14:3c:b1:08:dd:64: 03:d7:f3:22:ec:6c:6a:cf:fd:ad:c9:a2:f8:44:21: a5:d0:11:a2:86:8f:49:a8:23:31:dc:90:2b:6e:80: 29:9e:2b:1d:74:b1:f4:95:13:ad:a9:49:f7:ee:3b: 6c:75:c3:00:02:2a:07:18:c0:58:4e:c4:e5:5b:6c: 27:24:99:43:b7:fe:2b:ed:05:0c:64:66:58:29:c3: 1e:8a:bb:5a:39:42:61:9a:4e:8e:d6:e8:e0:4e:cb: 36:03:84:a6:40:c3:94:b6:d4:9a:b4:c0:97:d0:8a: 68:39:d0:1e:09:7d:1c:84:b7:1f:ca:d5:6b:9b:e1: 4b:4a:bb:e2:12:8f:84:48:85:9c:14:6e:83:e8:a8: 6d:ce:ea:cd:a9:ee:0e:62:2f:04:5f:79:6a:ca:12: b9:14:ce:40:52:89:bc:2f:74:22:8e:64:8a:df:aa: 63:e8:78:f1:4a:bf:08:1b:b2:f3:ce:3f:39:4f:47: ac:50:22:5f:12:12:dd:88:a1:ab:8c:95:1b:9c:97: d8:13:b6:2d:87:b3:e8:6a:30:21:c2:72:a3:4c:fa: 2d:05:e4:c2:96:60:cc:f5:88:06:92:a2:35:59:e7: 77:53:95:36:60:19:a3:46:a1:90:3b:61:0a:73:bf: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:9A:D0:68:AC:0C:CC:AC:79:14:A8:E1:90:C7:03:CD:B3:37:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fce24405-3b01-39a9-a0c1-c236b21c01f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c5:3f:c5:3a:87:45:59:2c:c1:48:76:2e:00:6f:b2:0d:30: 5c:69:91:9e:77:f9:b9:6f:4e:9d:7b:a2:89:1d:f7:8d:a0:87: 7c:d9:f7:5e:be:95:7e:23:c5:d1:5f:04:6a:50:76:05:a7:f2: 53:7a:67:b3:38:33:2f:f8:cf:2f:ff:6c:b5:03:45:33:fb:5f: c7:35:45:c7:30:74:a3:47:b2:2b:bd:bb:b4:35:a3:79:0e:61: d2:fe:a3:c1:b8:20:de:a6:8b:83:56:be:06:0e:78:05:6e:e5: 66:df:43:f6:48:e1:06:6c:6f:af:04:36:95:8e:a8:a7:95:5b: fa:b9:5a:7e:e0:0f:a3:50:7f:66:9b:f4:45:7e:cd:ca:90:f9: cb:b9:40:a9:cc:18:29:13:f4:1b:3c:a8:33:ba:a3:07:b1:fe: 76:9d:c0:9f:03:f7:93:52:d4:0f:74:95:32:5b:8a:c4:c6:9e: 94:60:7b:6d:e7:9b:14:3c:b8:91:33:a3:f1:c0:d7:08:b0:41: b0:2d:68:96:6f:a2:f6:2b:4a:aa:ae:d0:fb:9c:25:cf:12:1b: cb:42:27:b4:0b:3a:f9:52:69:c8:35:59:99:6a:e7:00:b5:d7: 46:e7:72:cb:79:d4:15:da:90:12:34:de:35:67:91:ee:1a:24: db:9f:eb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGk6mLbkaFeG12YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NjQ5MjI0ZmQtN2IyNS00MDVjLTk5N2UtZjQ0ZTZiMDM3ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujT+c938X6EUPLEI3WQD1/Mi7Gxqz/2tyaL4 RCGl0BGiho9JqCMx3JArboApnisddLH0lROtqUn37jtsdcMAAioHGMBYTsTlW2wn JJlDt/4r7QUMZGZYKcMeirtaOUJhmk6O1ujgTss2A4SmQMOUttSatMCX0IpoOdAe CX0chLcfytVrm+FLSrviEo+ESIWcFG6D6KhtzurNqe4OYi8EX3lqyhK5FM5AUom8 L3QijmSK36pj6HjxSr8IG7Lzzj85T0esUCJfEhLdiKGrjJUbnJfYE7Yth7PoajAh wnKjTPotBeTClmDM9YgGkqI1Wed3U5U2YBmjRqGQO2EKc7+qTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLmmtBorAzMrHkUqOGQxwPNsze5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmNlMjQ0MDUtM2IwMS0z OWE5LWEwYzEtYzIzNmIyMWMwMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfFP8U6h0VZLMFIdi4Ab7INMFxpkZ53+blvTp17ookd942gh3zZ916+ lX4jxdFfBGpQdgWn8lN6Z7M4My/4zy//bLUDRTP7X8c1RccwdKNHsiu9u7Q1o3kO YdL+o8G4IN6mi4NWvgYOeAVu5WbfQ/ZI4QZsb68ENpWOqKeVW/q5Wn7gD6NQf2ab 9EV+zcqQ+cu5QKnMGCkT9Bs8qDO6owex/nadwJ8D95NS1A90lTJbisTGnpRge23n mxQ8uJEzo/HA1wiwQbAtaJZvovYrSqqu0PucJc8SG8tCJ7QLOvlSacg1WZlq5wC1 10bncst51BXakBI03jVnke4aJNuf604= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:40 2026 by rpki-client