$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/3bf929d2-482a-3fe9-bd4b-e9141dae2281.roa File: 3bf929d2-482a-3fe9-bd4b-e9141dae2281.roa (raw, json) Hash identifier: RSXlXaXgr4PfcJLKro7yrdE016jcScDWd6EGJ2hl5Lk= Subject key identifier: C9:40:81:09:5A:AF:BD:69:8A:2E:7B:90:6C:10:F3:5D:B8:17:69:6E Certificate issuer: /CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Certificate serial: 010D0C9F4328584F3B7D1D9BBB3219DE7AB01C80 Authority key identifier: 48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/3bf929d2-482a-3fe9-bd4b-e9141dae2281.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 12217 IP address blocks: 156.134.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1d:9b:bb:32:19:de:7a:b0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=3a6162fc-da18-4c23-a7bb-067de1bad492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:c0:b2:17:dc:72:b2:de:b4:cb:4a:97:bc: 4e:5b:ec:43:81:7b:8c:b2:ca:ad:bf:38:9f:b5:09: d2:64:89:39:9e:fd:95:ce:11:71:69:0f:3f:be:1b: d2:f2:39:08:81:9c:3a:b6:83:f6:31:13:94:dd:9e: 92:54:00:fd:e1:91:b4:43:55:f7:f2:42:09:48:5c: 31:d4:37:f4:b8:db:e7:01:66:d8:c4:46:a7:2c:be: f9:11:a8:e5:4f:00:d1:89:37:16:45:f9:a4:e9:4d: 22:ca:61:e8:ec:f8:6e:19:1b:4f:b4:e8:1c:44:62: 69:80:18:f7:b1:67:af:09:8d:e1:32:3d:c8:be:58: ca:9a:24:e7:ab:41:88:8a:67:94:b2:8a:a5:e3:23: e0:7c:6d:c9:04:be:15:66:96:53:8f:b1:13:1e:3f: fa:72:92:16:31:31:57:1a:27:19:2b:eb:c4:f9:49: 25:30:8f:f3:ad:0c:88:13:b5:05:8a:af:80:4a:f9: 33:ec:a8:52:3c:3f:c1:8d:0f:0e:7f:53:c9:94:e5: ed:31:e7:cb:6a:1e:91:b2:f1:c1:bd:48:74:1c:eb: 02:45:0f:1d:3d:52:02:ae:65:e2:7f:f5:cb:5b:12: fa:07:62:6a:32:a0:fe:1e:ce:13:4f:06:60:2b:ad: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:81:09:5A:AF:BD:69:8A:2E:7B:90:6C:10:F3:5D:B8:17:69:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/3bf929d2-482a-3fe9-bd4b-e9141dae2281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl X509v3 Authority Key Identifier: keyid:48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer sbgp-ipAddrBlock: critical IPv4: 156.134.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b1:75:16:3a:27:be:64:b3:63:a3:ee:08:c8:19:c0:89:26: 37:99:eb:39:0a:c2:d5:6a:b4:42:5b:30:fe:62:54:ce:89:92: 02:ed:e4:eb:d4:1a:b5:ce:71:29:69:5f:96:83:03:6e:74:b0: c9:c6:80:4a:05:f5:bc:ff:c5:06:4b:dc:27:e6:87:79:00:53: 92:5a:05:9e:7c:0e:02:df:b2:f5:0b:1e:d5:6c:c6:20:be:23: 7f:f0:2c:2e:51:54:05:5f:c6:37:70:77:fb:ed:2d:71:72:3f: 48:2c:bb:37:fe:4a:a2:1e:ca:24:63:ef:c0:1f:e4:78:4b:1c: cc:b4:58:b5:ab:2a:0c:de:80:25:6f:ea:be:44:bb:66:f2:fb: 82:43:fe:38:9c:34:7a:c0:b6:b6:20:af:59:ad:41:27:c1:b8: c9:11:c9:3b:a7:40:47:54:42:8d:ba:12:b6:83:4c:f6:05:3e: 95:08:f5:34:99:e4:b4:92:29:41:d2:2b:73:6a:9d:de:5e:ba: 3b:8d:29:2d:5c:1b:37:9a:7e:93:ee:b0:0b:f0:09:44:44:6a: c2:5e:d3:25:33:87:ef:f0:56:1a:35:76:8b:bf:e8:5d:2b:6b: c2:39:16:94:4f:e4:51:20:c3:d4:64:5d:9d:5a:ec:dd:7c:a1: 80:44:2f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR2buzIZ3nqwHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzYzRiYjEtNjY3OS00ZDYxLWE3MmMtODllNThkNDQ3 OWUzMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk M2E2MTYyZmMtZGExOC00YzIzLWE3YmItMDY3ZGUxYmFkNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2jAshfccrLetMtKl7xOW+xDgXuMssqtvzif tQnSZIk5nv2VzhFxaQ8/vhvS8jkIgZw6toP2MROU3Z6SVAD94ZG0Q1X38kIJSFwx 1Df0uNvnAWbYxEanLL75EajlTwDRiTcWRfmk6U0iymHo7PhuGRtPtOgcRGJpgBj3 sWevCY3hMj3IvljKmiTnq0GIimeUsoql4yPgfG3JBL4VZpZTj7ETHj/6cpIWMTFX GicZK+vE+UklMI/zrQyIE7UFiq+ASvkz7KhSPD/BjQ8Of1PJlOXtMefLah6RsvHB vUh0HOsCRQ8dPVICrmXif/XLWxL6B2JqMqD+Hs4TTwZgK60vZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlAgQlar71pii57kGwQ8124F2luMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZTNj NGJiMS02Njc5LTRkNjEtYTcyYy04OWU1OGQ0NDc5ZTMvM2JmOTI5ZDItNDgyYS0z ZmU5LWJkNGItZTkxNDFkYWUyMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWUzYzRiYjEtNjY3OS00ZDYxLWE3 MmMtODllNThkNDQ3OWUzLzVlM2M0YmIxLTY2NzktNGQ2MS1hNzJjLTg5ZTU4ZDQ0 NzllMy5jcmwwHwYDVR0jBBgwFoAUSDO3M4nIHPvAWhBZonXddq9649IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZTNjNGJiMS02Njc5LTRkNjEtYTcyYy04OWU1 OGQ0NDc5ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnIb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2xdRY6J75ks2Oj7gjIGcCJJjeZ6zkKwtVqtEJbMP5iVM6JkgLt5OvU GrXOcSlpX5aDA250sMnGgEoF9bz/xQZL3Cfmh3kAU5JaBZ58DgLfsvULHtVsxiC+ I3/wLC5RVAVfxjdwd/vtLXFyP0gsuzf+SqIeyiRj78Af5HhLHMy0WLWrKgzegCVv 6r5Eu2by+4JD/jicNHrAtrYgr1mtQSfBuMkRyTunQEdUQo26EraDTPYFPpUI9TSZ 5LSSKUHSK3Nqnd5eujuNKS1cGzeafpPusAvwCUREasJe0yUzh+/wVho1dou/6F0r a8I5FpRP5FEgw9RkXZ1a7N18oYBEL9U= -----END CERTIFICATE-----Generated at Sun Sep 27 08:08:32 2026 by rpki-client