$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa File: 2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa (raw, json) Hash identifier: MpO4/bG+iTOOdijqYfuiT/w4F+A2/enFjgPdV2AD1x4= Subject key identifier: B3:5F:69:CC:FF:DC:AE:AB:C4:4E:8B:50:30:40:45:3D:E0:67:6C:88 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DC2977E5EEB0C23FC0E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397235 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:c2:97:7e:5e:eb:0c:23:fc:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86cc4eb1-09df-4e19-88ae-c52bbc3da6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:b9:62:96:1d:54:be:25:c5:e7:6c:1c:f1: 6c:4c:17:5f:34:16:87:f3:d4:7c:07:bc:26:73:cd: af:70:6c:cb:72:14:bc:d6:27:86:16:dd:d1:e1:d3: 9a:29:6b:6d:1c:5f:65:b7:e7:47:6b:10:b6:ec:e1: 9d:07:14:fd:a5:5d:ab:2a:69:90:4c:71:fd:62:dd: 2f:e6:6d:9e:c9:2b:15:25:da:6e:ad:fa:01:c6:4b: 31:f5:7a:ce:68:68:72:79:41:ba:86:91:a5:84:46: 13:53:b7:70:05:87:00:98:a3:14:b8:11:b7:9e:2f: 50:89:53:ee:85:13:31:1d:1c:f1:32:94:e9:c0:21: 21:bb:47:0b:c9:62:92:9a:78:19:f2:1f:75:d3:91: 58:75:b3:04:88:5d:64:dd:ed:93:76:cd:75:74:0d: 4c:a4:43:a8:83:49:a9:29:b9:8b:0d:dc:4b:85:51: 02:22:d4:c9:4e:0b:d2:ce:81:8e:fd:b7:24:85:fc: 30:79:4d:f4:a9:6f:58:7f:c0:ba:f3:cf:2d:29:d2: fc:ce:f1:b3:bc:71:51:f4:63:82:e8:e6:5c:d8:f6: 5c:34:1a:03:60:6c:49:e5:b9:37:0f:ae:3a:ae:30: d2:8a:eb:ba:4f:1e:e4:e0:a3:d3:2a:02:66:88:5c: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5F:69:CC:FF:DC:AE:AB:C4:4E:8B:50:30:40:45:3D:E0:67:6C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a23ff0a-aad1-3d5d-b943-9455d21dc33f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:7e:1b:4c:5f:1d:68:76:35:1d:89:2e:de:5b:5e:ff:b1:73: ad:8b:40:ae:b1:c6:d9:59:e9:21:69:1b:25:5a:d6:8c:24:da: 20:3d:31:98:9b:8e:3e:51:cf:cb:d1:62:cd:e0:56:24:1f:56: c1:b5:ef:a0:0c:7c:4b:b1:d7:6e:1c:37:20:45:75:46:74:b7: 47:87:0a:c9:7f:a1:c7:ed:77:f4:d4:2e:72:13:30:d2:cc:af: d0:e3:5f:4c:02:59:e3:00:d5:c9:c2:ee:0a:35:92:63:86:09: 7c:6c:0a:ae:1c:a9:02:15:df:e0:ae:1f:71:cf:ce:07:d9:7c: ad:fa:a9:14:9f:99:56:2d:65:68:03:c0:20:62:68:14:19:a4: 71:f1:1c:51:8c:57:51:98:f0:29:e0:de:a9:3a:55:12:0f:48: 53:a0:83:45:32:de:4d:05:c0:3b:0e:f2:09:f7:35:22:cb:c6: 94:8b:82:01:08:68:fc:6c:47:97:37:c4:34:10:49:8a:ef:14: da:8d:2d:43:35:55:3a:39:68:a0:c3:1d:82:d8:2e:3e:5a:51: 06:5b:6a:ac:65:22:e6:58:1a:c4:dc:91:1d:12:8a:9a:be:f7: 3e:25:34:f6:e4:95:8d:66:7b:f6:01:a7:cd:b5:e2:f4:7d:da: ac:7d:42:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfcKXfl7rDCP8DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZjYzRlYjEtMDlkZi00ZTE5LTg4YWUtYzUyYmJjM2RhNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vu5YpYdVL4lxedsHPFsTBdfNBaH89R8B7wm c82vcGzLchS81ieGFt3R4dOaKWttHF9lt+dHaxC27OGdBxT9pV2rKmmQTHH9Yt0v 5m2eySsVJdpurfoBxksx9XrOaGhyeUG6hpGlhEYTU7dwBYcAmKMUuBG3ni9QiVPu hRMxHRzxMpTpwCEhu0cLyWKSmngZ8h9105FYdbMEiF1k3e2Tds11dA1MpEOog0mp KbmLDdxLhVECItTJTgvSzoGO/bckhfwweU30qW9Yf8C6888tKdL8zvGzvHFR9GOC 6OZc2PZcNBoDYGxJ5bk3D646rjDSiuu6Tx7k4KPTKgJmiFzbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNfacz/3K6rxE6LUDBART3gZ2yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmEyM2ZmMGEtYWFkMS0z ZDVkLWI5NDMtOTQ1NWQyMWRjMzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB+G0xfHWh2NR2JLt5bXv+xc62LQK6xxtlZ6SFpGyVa1owk2iA9MZib jj5Rz8vRYs3gViQfVsG176AMfEux124cNyBFdUZ0t0eHCsl/ocftd/TULnITMNLM r9DjX0wCWeMA1cnC7go1kmOGCXxsCq4cqQIV3+CuH3HPzgfZfK36qRSfmVYtZWgD wCBiaBQZpHHxHFGMV1GY8Cng3qk6VRIPSFOgg0Uy3k0FwDsO8gn3NSLLxpSLggEI aPxsR5c3xDQQSYrvFNqNLUM1VTo5aKDDHYLYLj5aUQZbaqxlIuZYGsTckR0Sipq+ 9z4lNPbklY1me/YBp8214vR92qx9Ql8= -----END CERTIFICATE-----Generated at Fri Sep 25 16:21:33 2026 by rpki-client