$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa File: 33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa (raw, json) Hash identifier: i+F3LQaN3wgn2Z6q1JfT0TaxfO+UvuHWDKgRbCvXnCQ= Subject key identifier: DC:9A:68:60:24:77:FF:CB:E0:49:E5:8F:90:1D:AF:FF:08:19:2E:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584E54B4C9EEC546C3FDE356EF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 397219 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:c9:ee:c5:46:c3:fd:e3:56:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=9e5a48e7-8e89-4f40-9ef7-9453cdefe556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:90:a5:f6:10:57:3e:76:e2:25:88:90:ed: 21:52:0f:ba:c4:cd:73:10:fb:5f:c1:c0:1c:8e:be: de:74:a3:fe:6f:56:cf:ea:d1:cc:50:54:9d:5d:b7: ab:20:5f:bb:ec:4b:91:25:cd:8b:f5:dc:3f:6a:86: 29:a6:4b:cd:f6:9e:0e:29:32:05:5f:59:50:c0:00: b1:1c:8e:29:d0:bb:e2:e3:5b:c2:22:b8:d8:5d:70: 29:ad:3b:3e:49:e2:55:8f:0d:18:a8:bc:5f:e8:92: f6:9e:0e:a7:fe:d2:a9:49:b9:04:53:9d:61:ec:42: 46:51:93:c0:ad:e8:62:06:a7:c0:23:05:2e:48:b9: cb:33:da:22:b7:44:e9:b9:68:01:df:1b:a4:01:56: 0d:0b:44:2d:7e:d4:3a:df:6e:bc:f2:e8:e6:ec:3e: 80:4d:bd:93:51:ed:e4:2a:dd:cf:65:f5:47:f8:e5: 09:44:53:12:46:b2:e7:1d:2a:8e:64:73:0c:c8:3d: ef:7e:71:96:fc:b4:cf:7d:35:69:12:19:c0:75:a6: 5f:ae:26:78:a7:b2:ef:b1:f2:28:74:35:28:f6:27: 9f:0f:56:7b:4d:d2:cf:30:51:98:62:98:ad:3c:b9: f7:27:50:60:7f:95:54:da:f7:d5:b0:bb:5c:5a:83: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:68:60:24:77:FF:CB:E0:49:E5:8F:90:1D:AF:FF:08:19:2E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33054a7b-2f1f-32e8-aa4b-e8271e1f3839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fa:8c:f1:1c:2a:39:e6:4e:72:b6:9c:45:e0:5b:b2:6f:cb: 26:fe:fc:80:d6:9e:cd:f7:7d:64:6c:0f:ad:25:e8:52:c3:36: e9:b7:88:4c:6d:c3:ab:f4:ea:ad:2b:9b:21:42:7f:af:ca:6a: d6:51:37:3a:2f:16:c3:52:33:a0:9f:88:df:d0:7f:37:8a:3a: 28:d9:6f:e3:79:9c:36:48:74:23:92:54:76:cb:33:85:3d:40: ae:9a:7f:75:0b:54:49:2d:e2:06:10:fd:b5:5c:a8:88:07:bf: e3:d6:ab:7b:09:1c:a7:db:df:5e:e0:28:1a:1a:1e:0f:1e:57: 19:3f:38:8e:a5:4e:d4:cc:1f:2f:87:28:66:dc:dd:2f:0d:c9: 84:c2:ad:e3:75:70:78:4e:ef:1f:d6:b7:fe:7c:7e:2c:29:f0: 7c:d3:f0:4e:a1:9f:6d:61:1d:b2:74:f2:f1:43:4e:8f:00:bc: 5d:24:47:69:bd:d6:a5:4b:4b:99:bf:78:33:01:e2:25:b0:1d: 59:bf:cf:64:fb:ec:c6:57:71:da:cf:5e:5f:ec:66:2e:2b:26: f5:f1:ed:86:4c:02:38:37:66:52:2f:a1:93:d7:96:c1:7f:f1: 43:cd:32:50:f2:a7:6f:5c:3c:e7:93:dd:fe:dd:4c:e7:f6:1d: 7d:61:59:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtMnuxUbD/eNW7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk OWU1YTQ4ZTctOGU4OS00ZjQwLTllZjctOTQ1M2NkZWZlNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodyQpfYQVz524iWIkO0hUg+6xM1zEPtfwcAc jr7edKP+b1bP6tHMUFSdXberIF+77EuRJc2L9dw/aoYppkvN9p4OKTIFX1lQwACx HI4p0Lvi41vCIrjYXXAprTs+SeJVjw0YqLxf6JL2ng6n/tKpSbkEU51h7EJGUZPA rehiBqfAIwUuSLnLM9oit0TpuWgB3xukAVYNC0QtftQ632688ujm7D6ATb2TUe3k Kt3PZfVH+OUJRFMSRrLnHSqOZHMMyD3vfnGW/LTPfTVpEhnAdaZfriZ4p7LvsfIo dDUo9iefD1Z7TdLPMFGYYpitPLn3J1Bgf5VU2vfVsLtcWoNI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyaaGAkd//L4Enlj5Adr/8IGS4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzMwNTRhN2ItMmYxZi0z MmU4LWFhNGItZTgyNzFlMWYzODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH6jPEcKjnmTnK2nEXgW7Jvyyb+/IDWns33fWRsD60l6FLDNum3iExt w6v06q0rmyFCf6/KatZRNzovFsNSM6CfiN/QfzeKOijZb+N5nDZIdCOSVHbLM4U9 QK6af3ULVEkt4gYQ/bVcqIgHv+PWq3sJHKfb317gKBoaHg8eVxk/OI6lTtTMHy+H KGbc3S8NyYTCreN1cHhO7x/Wt/58fiwp8HzT8E6hn21hHbJ08vFDTo8AvF0kR2m9 1qVLS5m/eDMB4iWwHVm/z2T77MZXcdrPXl/sZi4rJvXx7YZMAjg3ZlIvoZPXlsF/ 8UPNMlDyp29cPOeT3f7dTOf2HX1hWfQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:10:43 2026 by rpki-client