$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa File: 21b27889-d1bf-37f1-875c-637accb009ac.roa (raw, json) Hash identifier: E0zmb8U7bmVHnrFNii3vWwmUD3dc9p9auPpjCYPl7l4= Subject key identifier: EC:22:45:5D:E0:6C:E7:F7:70:68:A0:FD:3C:38:D9:A5:3A:63:91:D6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DC3ED8FC1BBBB539AED40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397214 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:c3:ed:8f:c1:bb:bb:53:9a:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b7df78f-88a0-493a-8ee4-793533f1f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:db:69:89:63:05:22:cf:bd:96:9f:ce:75: e8:e5:6f:98:a5:6a:a8:04:ec:c8:4f:a4:25:1b:02: a1:34:30:8f:ab:b8:20:03:1d:be:d2:73:0d:a5:01: c8:cb:1d:f7:1d:9d:15:68:6b:87:00:8e:b1:54:58: 89:2a:34:fd:bd:f3:6a:18:ff:77:f4:61:87:2f:78: 6f:5b:3d:a1:4a:a0:94:8c:29:a1:ba:18:91:ef:91: ac:ce:6a:af:23:ee:d1:44:3c:8e:f1:fa:be:e6:7d: 7d:55:a2:f9:4f:9d:c9:98:4c:62:98:15:e8:d3:e4: 21:2a:a9:9e:06:fb:17:47:04:57:01:db:89:76:80: 7b:a8:a7:36:89:20:18:4d:0f:66:16:9a:40:23:5b: e5:cf:d4:04:9a:7d:6d:91:55:76:d6:3d:f8:94:1e: 18:8b:4c:36:87:48:51:0f:fc:96:8b:09:83:dc:f2: e2:9f:e7:db:e5:0d:10:cc:fa:01:59:62:24:09:d5: c7:05:3a:f0:9b:58:7e:c7:83:a0:a4:f1:80:87:5b: 9e:d4:85:f0:e6:20:9f:fb:40:1d:05:4a:eb:02:6e: 8a:95:27:ec:52:f8:ca:f3:76:02:03:20:4a:0e:31: df:e2:90:d2:bd:0a:68:f2:ad:30:fe:4a:fb:c3:61: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:22:45:5D:E0:6C:E7:F7:70:68:A0:FD:3C:38:D9:A5:3A:63:91:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21b27889-d1bf-37f1-875c-637accb009ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:79:99:b4:e5:33:e3:67:a7:a4:ce:12:d1:60:1b:b2:e3:b6: 86:d9:93:69:fd:fe:a3:e3:12:c9:6e:25:17:cc:d7:52:d6:53: eb:22:52:4c:6e:16:70:44:cd:7a:c0:cd:bd:56:9c:24:dc:f7: 7b:04:bd:38:eb:37:e4:b7:63:ba:a1:4a:9e:9f:1b:c8:79:71: b8:07:e3:9d:2b:74:8d:4b:16:e9:fb:12:08:f8:52:db:e3:54: 8a:1b:33:07:18:ed:39:0b:35:9a:ad:02:76:aa:6c:4e:1a:ef: 06:d6:47:24:a7:0d:47:7f:4f:7a:9b:23:50:66:14:5f:68:ad: ed:59:38:9f:33:ad:a8:57:39:37:14:bf:93:8a:a7:54:0e:5f: 65:26:2e:6a:1b:55:db:09:1b:98:41:0d:59:2a:18:6c:f6:77: f1:20:9e:2d:bb:0b:4c:ec:5d:56:9f:3b:fe:f8:86:43:be:bd: bf:74:26:97:49:68:84:94:d7:a5:43:d4:8f:8b:24:f8:33:f2: 46:a9:b4:1e:42:07:bd:66:74:c9:de:19:d3:41:ef:ec:7b:2e: e9:ba:c8:57:a8:0f:a1:c7:1a:96:db:e0:9b:5b:a9:db:0c:ac: 86:18:15:6f:bb:ba:65:8f:70:0f:1c:f7:bf:35:f8:d0:0d:9e: 4f:54:92:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfcPtj8G7u1Oa7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI3ZGY3OGYtODhhMC00OTNhLThlZTQtNzkzNTMzZjFmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4rbaYljBSLPvZafznXo5W+YpWqoBOzIT6Ql GwKhNDCPq7ggAx2+0nMNpQHIyx33HZ0VaGuHAI6xVFiJKjT9vfNqGP939GGHL3hv Wz2hSqCUjCmhuhiR75GszmqvI+7RRDyO8fq+5n19VaL5T53JmEximBXo0+QhKqme BvsXRwRXAduJdoB7qKc2iSAYTQ9mFppAI1vlz9QEmn1tkVV21j34lB4Yi0w2h0hR D/yWiwmD3PLin+fb5Q0QzPoBWWIkCdXHBTrwm1h+x4OgpPGAh1ue1IXw5iCf+0Ad BUrrAm6KlSfsUvjK83YCAyBKDjHf4pDSvQpo8q0w/kr7w2HsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwiRV3gbOf3cGig/Tw42aU6Y5HWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFiMjc4ODktZDFiZi0z N2YxLTg3NWMtNjM3YWNjYjAwOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB5mbTlM+Nnp6TOEtFgG7LjtobZk2n9/qPjEsluJRfM11LWU+siUkxu FnBEzXrAzb1WnCTc93sEvTjrN+S3Y7qhSp6fG8h5cbgH450rdI1LFun7Egj4Utvj VIobMwcY7TkLNZqtAnaqbE4a7wbWRySnDUd/T3qbI1BmFF9ore1ZOJ8zrahXOTcU v5OKp1QOX2UmLmobVdsJG5hBDVkqGGz2d/Egni27C0zsXVafO/74hkO+vb90JpdJ aISU16VD1I+LJPgz8kaptB5CB71mdMneGdNB7+x7Lum6yFeoD6HHGpbb4JtbqdsM rIYYFW+7umWPcA8c9781+NANnk9Ukp0= -----END CERTIFICATE-----Generated at Sat Sep 26 16:13:49 2026 by rpki-client