$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32b1b522-b895-3027-a709-7015a8ff3a0d.roa File: 32b1b522-b895-3027-a709-7015a8ff3a0d.roa (raw, json) Hash identifier: W7orjmCjNvUuKWYMX4Ooo7r4yZvDvGFp6y2u4YjHZlQ= Subject key identifier: 3E:20:F7:0F:30:7A:F9:3C:B4:83:D9:00:23:8D:48:E7:20:88:22:68 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F119F8ECDFF011FE645E58BC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32b1b522-b895-3027-a709-7015a8ff3a0d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 399157 IP address blocks: 156.154.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:8e:cd:ff:01:1f:e6:45:e5:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4f00ca62-b23a-4065-bfbe-201ffe75f5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:f3:0e:5b:3a:df:73:34:64:8b:be:0a:f2: 38:13:aa:bc:0a:f8:80:c2:4e:cf:1b:d6:c1:9d:b9: 6a:db:06:73:68:c5:7d:54:f6:20:ad:85:68:2a:8e: 11:f5:79:8a:80:e1:5a:9f:af:6e:80:e6:d4:0f:a9: bb:bd:fe:b5:ff:84:89:36:63:f3:f1:a9:e8:17:e3: 9e:d7:b5:4f:1a:ed:82:6b:39:50:cc:19:e6:a7:92: da:18:31:fe:22:ba:91:78:6d:b5:37:b9:97:26:44: 57:e0:aa:e7:fa:96:d2:5f:16:93:0c:45:1e:83:1f: 0d:5a:68:03:a2:52:cb:6a:96:06:3f:a7:fd:06:39: 86:b9:94:a1:35:27:6e:98:a9:52:d2:55:91:fc:95: 35:e0:ec:ad:c5:6c:e6:85:b9:4c:00:2b:b6:39:9b: a4:7d:87:29:67:00:fc:de:d0:61:19:c7:f1:cb:7a: 01:ea:f8:f1:e6:3d:01:8e:cd:87:2f:66:df:3a:ee: 31:79:1d:89:f9:35:b9:92:f5:16:d9:05:71:77:0e: b6:14:75:ac:ef:f5:c9:66:1b:bc:86:40:d2:7b:68: 2f:62:a3:cf:6f:67:52:df:91:9e:89:27:ad:e2:3f: d0:c5:0e:9c:d7:9f:f6:9e:59:be:40:59:23:9e:0e: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:F7:0F:30:7A:F9:3C:B4:83:D9:00:23:8D:48:E7:20:88:22:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/32b1b522-b895-3027-a709-7015a8ff3a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:80:88:c5:53:e1:9a:16:58:9b:a6:43:45:93:20:5f:7f:0d: c5:9f:97:6b:57:4a:2c:47:9c:4d:15:81:ff:d6:e8:e9:c7:e6: 2d:ac:86:e4:13:bb:26:00:06:38:be:cb:eb:92:f4:c3:60:80: f6:e3:23:73:86:ee:89:b1:4b:ad:ea:06:53:75:c4:4b:ac:43: 26:58:cd:6f:9d:47:db:f1:93:41:2c:35:5e:79:84:5d:e0:5b: 4f:54:4b:39:3a:d0:e4:55:da:12:56:4d:d1:a5:c8:25:df:75: 55:45:b3:75:59:d9:d6:b0:2d:48:87:a4:cf:12:75:9b:cd:d0: 1a:14:95:40:86:0b:1f:51:71:5c:55:14:5b:46:80:4a:23:f1: 62:e6:77:fd:2f:69:4b:04:9e:1e:73:2c:12:e4:23:2a:08:99: bf:65:ff:4e:e0:89:b1:57:e4:a1:ef:87:ed:e5:67:f2:ad:3e: 40:3f:84:79:c6:83:7f:0c:ac:87:00:e7:0a:36:99:a7:79:32: 82:74:8c:c5:0b:c9:3e:3f:40:76:12:70:97:32:10:7c:68:c9: e1:dd:51:7d:97:20:ea:88:0f:73:ac:e8:73:73:b7:18:e7:bd: 2e:9b:fb:26:66:80:ef:98:36:e1:25:5b:24:62:f3:c6:0e:df: ce:ea:28:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn47N/wEf5kXli8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGYwMGNhNjItYjIzYS00MDY1LWJmYmUtMjAxZmZlNzVmNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHzDls633M0ZIu+CvI4E6q8CviAwk7PG9bB nblq2wZzaMV9VPYgrYVoKo4R9XmKgOFan69ugObUD6m7vf61/4SJNmPz8anoF+Oe 17VPGu2CazlQzBnmp5LaGDH+IrqReG21N7mXJkRX4Krn+pbSXxaTDEUegx8NWmgD olLLapYGP6f9BjmGuZShNSdumKlS0lWR/JU14OytxWzmhblMACu2OZukfYcpZwD8 3tBhGcfxy3oB6vjx5j0Bjs2HL2bfOu4xeR2J+TW5kvUW2QVxdw62FHWs7/XJZhu8 hkDSe2gvYqPPb2dS35GeiSet4j/QxQ6c15/2nlm+QFkjng4I9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4g9w8wevk8tIPZACONSOcgiCJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzJiMWI1MjItYjg5NS0z MDI3LWE3MDktNzAxNWE4ZmYzYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeAiMVT4ZoWWJumQ0WTIF9/DcWfl2tXSixHnE0Vgf/W6OnH5i2shuQT uyYABji+y+uS9MNggPbjI3OG7omxS63qBlN1xEusQyZYzW+dR9vxk0EsNV55hF3g W09USzk60ORV2hJWTdGlyCXfdVVFs3VZ2dawLUiHpM8SdZvN0BoUlUCGCx9RcVxV FFtGgEoj8WLmd/0vaUsEnh5zLBLkIyoImb9l/07gibFX5KHvh+3lZ/KtPkA/hHnG g38MrIcA5wo2mad5MoJ0jMULyT4/QHYScJcyEHxoyeHdUX2XIOqID3Os6HNztxjn vS6b+yZmgO+YNuElWyRi88YO387qKFc= -----END CERTIFICATE-----Generated at Sun Sep 27 05:53:20 2026 by rpki-client