$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa File: 21a673b3-386d-3a68-b3c5-63677fc40890.roa (raw, json) Hash identifier: ajA3mvE8TiXHysXKaSxTMc2apKsk12Wop1wrZkCco7I= Subject key identifier: 03:15:29:81:A8:14:28:6F:23:92:26:10:AA:A7:3F:A1:81:B5:44:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E6F42F0C3F123F6B86E10 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12008 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:6f:42:f0:c3:f1:23:f6:b8:6e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff89f298-b738-4764-bf59-38d1c684ff1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:85:f1:19:bd:1b:67:a4:31:bc:bb:5d:cd: 17:75:0a:e6:0a:24:ae:e2:9f:f6:ce:dd:d5:c1:b4: bd:2d:b9:4c:d6:b3:6d:37:e6:38:24:b2:3a:86:ec: 36:1b:39:f2:78:2a:ea:45:f7:09:be:ea:4c:9d:66: e8:cb:62:27:7b:a2:4a:d5:01:8b:70:9c:69:3c:f7: c4:cc:45:65:de:98:1d:42:5c:5b:b2:2d:56:6e:0a: 16:2a:08:34:6b:aa:54:d2:0f:1e:8b:02:e6:b1:02: 73:73:be:d3:fb:3f:b7:f6:3e:ab:a8:4c:4f:10:12: c9:73:94:b2:7b:de:2b:58:2d:d3:2d:bf:78:48:9d: 71:25:a6:81:8a:58:99:47:b7:fa:ec:93:ec:f5:86: d2:b4:e9:71:19:9b:e5:44:e6:df:f0:36:64:bb:89: 56:32:2f:b6:86:41:e5:5f:91:90:09:25:e8:03:02: 8a:db:38:60:0a:88:9b:0f:74:5d:01:86:00:d7:76: 60:62:64:57:a8:f8:c3:7d:1c:50:39:bf:8f:17:49: 8e:6f:a6:25:4f:94:3d:74:a6:fd:a1:a8:f1:f6:dc: 06:15:05:fd:e9:d2:34:67:14:ca:3b:f9:a0:b1:9c: 5b:5b:db:be:4b:09:e8:3b:20:1b:d7:e3:e7:ba:17: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:15:29:81:A8:14:28:6F:23:92:26:10:AA:A7:3F:A1:81:B5:44:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:97:8e:49:9b:fe:63:25:a2:7b:52:84:86:5a:26:3c:5c:c3: b3:ab:57:53:fd:6a:14:c0:b2:ae:6f:5c:d2:db:25:26:0c:81: 65:5a:c4:6f:0e:47:83:3c:8d:a8:07:67:19:db:6c:b6:c2:7e: e8:4a:9b:4a:10:18:c1:a2:97:e3:06:d5:b7:85:67:63:fd:da: 45:a8:1f:10:41:a1:5d:88:40:ea:e6:7c:f9:2a:46:45:43:a5: c9:22:1f:a8:59:63:a9:93:85:d1:48:f8:a3:32:2e:2d:66:c4: 4e:65:79:ac:ec:67:0f:99:41:d0:90:e9:3c:20:1a:30:8d:d0: ea:62:fd:b7:ae:e7:af:73:6e:a0:fa:25:cb:0e:be:8a:7f:27: ea:ce:97:63:99:56:e6:b0:cf:ca:cf:12:27:30:8d:ba:d7:04: 14:ce:0e:95:32:d7:2c:60:b9:bb:9b:e0:60:f8:15:13:cc:ed: 83:b4:08:cb:2c:fa:3c:fa:da:15:e8:8c:b8:bc:d4:ce:89:05: df:d3:6f:fa:b8:93:58:4d:67:e1:6e:4b:3e:65:00:ae:39:8e: a1:25:e7:0f:14:7b:42:83:f6:2b:f8:f6:80:4d:eb:aa:93:9f: 08:28:22:26:4e:b8:95:c2:8c:bc:0a:08:80:c1:34:be:6d:ad: 78:9f:fa:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfm9C8MPxI/a4bhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY4OWYyOTgtYjczOC00NzY0LWJmNTktMzhkMWM2ODRmZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/6F8Rm9G2ekMby7Xc0XdQrmCiSu4p/2zt3V wbS9LblM1rNtN+Y4JLI6huw2GznyeCrqRfcJvupMnWboy2Ine6JK1QGLcJxpPPfE zEVl3pgdQlxbsi1WbgoWKgg0a6pU0g8eiwLmsQJzc77T+z+39j6rqExPEBLJc5Sy e94rWC3TLb94SJ1xJaaBiliZR7f67JPs9YbStOlxGZvlRObf8DZku4lWMi+2hkHl X5GQCSXoAwKK2zhgCoibD3RdAYYA13ZgYmRXqPjDfRxQOb+PF0mOb6YlT5Q9dKb9 oajx9twGFQX96dI0ZxTKO/mgsZxbW9u+SwnoOyAb1+Pnuhd9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMVKYGoFChvI5ImEKqnP6GBtUTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFhNjczYjMtMzg2ZC0z YTY4LWIzYzUtNjM2NzdmYzQwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGXjkmb/mMlontShIZaJjxcw7OrV1P9ahTAsq5vXNLbJSYMgWVaxG8O R4M8jagHZxnbbLbCfuhKm0oQGMGil+MG1beFZ2P92kWoHxBBoV2IQOrmfPkqRkVD pckiH6hZY6mThdFI+KMyLi1mxE5leazsZw+ZQdCQ6TwgGjCN0Opi/beu569zbqD6 JcsOvop/J+rOl2OZVuawz8rPEicwjbrXBBTODpUy1yxgubub4GD4FRPM7YO0CMss +jz62hXojLi81M6JBd/Tb/q4k1hNZ+FuSz5lAK45jqEl5w8Ue0KD9iv49oBN66qT nwgoIiZOuJXCjLwKCIDBNL5trXif+nA= -----END CERTIFICATE-----Generated at Sun Oct 4 08:40:38 2026 by rpki-client