$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa File: 059909f6-5a49-3860-891a-cb16260d9885.roa (raw, json) Hash identifier: JJZmYmQprwH1KtKr1QtOMkc40KB9YF4ewJOJHKoyugo= Subject key identifier: 79:8E:35:34:4A:94:C1:E3:39:10:2F:4F:9D:D3:BC:7C:33:99:CA:E3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E0E178CCD81CD2AC301B8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397242 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:0e:17:8c:cd:81:cd:2a:c3:01:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03e15f2d-c5ef-4f6e-b4f9-170302a43e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:46:6e:a4:9b:24:c0:13:f7:1c:ad:f5:4b: 49:be:63:c6:ba:70:19:c6:f3:2d:f5:4b:49:97:67: d6:55:12:ec:75:f3:d8:41:e5:ed:98:0f:d1:2e:e0: 05:69:30:68:2b:53:6e:8a:44:b5:51:e5:c2:63:b2: 30:54:dd:13:ed:22:03:5b:70:19:90:aa:7d:ce:31: 29:ef:74:8c:c3:b4:b0:25:7a:b7:23:af:1e:ac:ad: d8:41:1b:5c:1c:23:4c:f6:cb:ff:ed:e8:83:e4:66: b6:b3:1f:00:52:13:96:1a:b0:bb:18:4d:64:e5:67: 22:db:02:fe:a4:46:de:66:8a:02:d5:79:5c:fa:eb: b3:1f:63:e6:4e:2d:5d:c8:97:58:e6:3e:5c:28:48: 92:f9:15:ac:32:c1:4c:ad:1d:8e:d9:db:86:10:5d: 6b:cb:5b:ef:2b:79:23:d8:fa:52:9b:1f:19:fd:63: e9:cf:07:2d:ad:ee:1d:e6:d2:2e:d4:79:1f:8f:54: 37:c3:24:3e:1a:e9:09:50:aa:d4:dd:28:ad:02:4f: 49:5b:68:80:6c:ff:c5:1c:72:29:38:06:92:94:97: ef:6e:f0:80:ea:e1:fc:a9:cd:d5:13:b0:86:da:d2: 9c:16:e8:c6:8b:89:a5:fd:1d:0d:23:4a:1a:80:9c: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8E:35:34:4A:94:C1:E3:39:10:2F:4F:9D:D3:BC:7C:33:99:CA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/059909f6-5a49-3860-891a-cb16260d9885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5d:0e:d1:db:f0:71:9c:01:0e:d0:0c:82:03:5e:86:52:d4: e9:0a:d1:3b:47:1a:d9:fa:a1:1f:e0:c1:5f:df:ca:b8:e1:3f: 1c:e5:e4:f3:a4:dc:34:41:e5:96:c1:82:80:69:bf:8d:9f:86: 3b:5b:3a:05:53:5c:cd:92:cb:e1:d7:02:ed:b3:18:1e:e1:65: 05:81:b3:3d:b3:21:1d:93:c5:a4:b2:ad:bf:ac:8a:20:b3:53: 6c:31:3a:9e:b6:56:e7:5a:3a:a0:af:e9:aa:e2:64:f1:ef:6e: ad:b4:62:49:3f:03:08:97:02:a8:4f:b0:b5:8a:24:2e:a7:86: 76:b3:27:14:ee:b9:a5:2d:c8:0b:05:29:ed:a8:5b:0d:d6:db: fd:6b:ed:18:54:33:c9:08:4c:9b:20:77:31:89:7a:c9:58:b7: dd:ba:4f:fa:ac:7c:c5:da:ab:ee:58:b0:5e:98:a5:0c:3b:87: b6:3f:79:23:fe:4d:c6:12:82:b9:86:1f:61:f0:f0:27:ef:a3: 9b:ce:83:e9:59:d7:90:76:b1:f3:11:08:5a:55:c7:a7:bc:5f: c4:a9:37:f1:4e:e1:84:3d:8f:66:75:f6:6d:bf:c1:6c:e3:0d: 84:e0:17:84:ca:34:d4:c9:cc:0d:79:2c:ec:4e:1e:4d:45:92: b0:f0:3f:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfg4XjM2BzSrDAbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNlMTVmMmQtYzVlZi00ZjZlLWI0ZjktMTcwMzAyYTQzZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKpGbqSbJMAT9xyt9UtJvmPGunAZxvMt9UtJ l2fWVRLsdfPYQeXtmA/RLuAFaTBoK1NuikS1UeXCY7IwVN0T7SIDW3AZkKp9zjEp 73SMw7SwJXq3I68erK3YQRtcHCNM9sv/7eiD5Ga2sx8AUhOWGrC7GE1k5Wci2wL+ pEbeZooC1Xlc+uuzH2PmTi1dyJdY5j5cKEiS+RWsMsFMrR2O2duGEF1ry1vvK3kj 2PpSmx8Z/WPpzwctre4d5tIu1Hkfj1Q3wyQ+GukJUKrU3SitAk9JW2iAbP/FHHIp OAaSlJfvbvCA6uH8qc3VE7CG2tKcFujGi4ml/R0NI0oagJxyVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmONTRKlMHjORAvT53TvHwzmcrjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDU5OTA5ZjYtNWE0OS0z ODYwLTg5MWEtY2IxNjI2MGQ5ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9dDtHb8HGcAQ7QDIIDXoZS1OkK0TtHGtn6oR/gwV/fyrjhPxzl5POk 3DRB5ZbBgoBpv42fhjtbOgVTXM2Sy+HXAu2zGB7hZQWBsz2zIR2TxaSyrb+siiCz U2wxOp62VudaOqCv6ariZPHvbq20Ykk/AwiXAqhPsLWKJC6nhnazJxTuuaUtyAsF Ke2oWw3W2/1r7RhUM8kITJsgdzGJeslYt926T/qsfMXaq+5YsF6YpQw7h7Y/eSP+ TcYSgrmGH2Hw8Cfvo5vOg+lZ15B2sfMRCFpVx6e8X8SpN/FO4YQ9j2Z19m2/wWzj DYTgF4TKNNTJzA15LOxOHk1FkrDwPyU= -----END CERTIFICATE-----Generated at Tue Sep 29 16:42:19 2026 by rpki-client