$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa File: 34343666-2d52-3393-8ab1-1eb7a039d51e.roa (raw, json) Hash identifier: IiYSIoq+NiZYUQcP8o+VxsNEbokCRE9PL38lGo53yrk= Subject key identifier: 3C:B4:A7:D4:94:AA:5D:F1:A0:01:C3:3B:2C:AE:6D:8E:EB:08:78:9B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E085FE4C63CDE52335800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397231 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:08:5f:e4:c6:3c:de:52:33:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81d6d08e-c7b5-4b96-8014-c138f4b8b12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:ac:58:c8:c8:fd:78:66:d3:00:72:b8:33: 59:19:f6:6e:4d:76:73:05:3e:73:bd:8c:fc:e3:34: c6:4d:de:fa:92:83:64:05:a0:0c:22:28:71:d2:7c: 99:25:02:79:1d:25:43:3e:85:69:c6:1f:5a:40:e8: ac:b3:3f:0e:ae:29:2d:67:7b:96:60:d6:40:91:8f: e7:7d:bd:74:89:c3:1f:64:9b:a7:83:3b:f3:f3:5d: 91:69:d6:f5:f1:19:c9:14:84:c9:d0:41:ae:f5:17: ca:f3:e2:3c:02:9d:69:fc:5d:01:5f:37:67:4d:2f: 32:84:02:86:60:87:dd:67:d3:a2:39:87:5f:08:61: e1:de:b1:f7:57:f5:cc:9e:f7:d5:aa:ea:86:ba:4c: bf:75:7d:cc:b5:d1:9d:00:bb:1c:76:7b:03:82:ec: 77:60:f0:f3:4a:e0:35:90:44:26:06:55:b7:78:fc: 29:2f:5e:45:41:5b:08:83:ce:87:54:40:71:76:c2: 87:fe:60:97:ae:3e:05:b2:25:d6:c5:3a:a9:de:7a: 1d:01:35:ac:39:6f:57:64:7d:b7:22:5f:fd:99:d3: 5b:fa:53:94:26:b6:c9:2c:66:64:9d:ac:f0:77:7c: 68:75:00:fc:4a:67:38:db:4a:eb:9e:20:ce:0b:2e: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B4:A7:D4:94:AA:5D:F1:A0:01:C3:3B:2C:AE:6D:8E:EB:08:78:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5b:49:9f:5f:d7:65:85:c7:8f:b4:18:09:c1:3f:73:e7:c2: da:ed:91:06:9b:22:61:d7:53:1c:d2:63:4a:ad:ab:97:6b:3e: 28:e9:c3:ca:7a:3c:74:04:61:ef:b2:0e:1f:6c:a9:bd:a2:9f: 00:66:1a:ea:fb:ee:1a:04:d1:33:b8:d1:69:0c:9a:93:d5:ba: 6c:ca:1e:3e:ad:4b:10:c3:ce:38:ee:3f:38:61:f4:d6:02:6d: ff:9c:70:0f:e1:ae:7a:ce:c2:a9:95:3a:5f:79:c6:d8:0b:a0: d4:f7:92:31:1d:df:eb:b4:39:e3:6a:35:a9:53:76:e1:81:ee: 7b:4c:68:1d:bf:0f:91:f8:d2:70:af:9c:32:4a:95:1f:0d:21: ed:19:16:9a:ec:ec:c9:af:8a:13:b1:5e:e1:73:4f:f1:87:f5: ec:ef:8c:bc:76:8a:89:9c:e1:2d:d1:69:a9:3e:ac:f5:0f:f0: bd:d9:d8:24:d9:df:96:84:c5:5e:bb:6b:47:d5:c4:1c:c7:87: 31:2a:05:b6:cb:3b:22:21:d5:35:6d:9c:48:b4:7d:ae:da:8e: e3:1b:6f:17:c7:b4:6b:32:4f:9d:cd:c4:3a:62:0e:2d:8a:ab: 78:58:b8:02:10:16:67:79:b3:48:4a:9b:25:8b:46:5f:dc:c2: 37:ac:78:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfghf5MY83lIzWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFkNmQwOGUtYzdiNS00Yjk2LTgwMTQtYzEzOGY0YjhiMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lmsWMjI/Xhm0wByuDNZGfZuTXZzBT5zvYz8 4zTGTd76koNkBaAMIihx0nyZJQJ5HSVDPoVpxh9aQOissz8OriktZ3uWYNZAkY/n fb10icMfZJungzvz812Radb18RnJFITJ0EGu9RfK8+I8Ap1p/F0BXzdnTS8yhAKG YIfdZ9OiOYdfCGHh3rH3V/XMnvfVquqGuky/dX3MtdGdALscdnsDgux3YPDzSuA1 kEQmBlW3ePwpL15FQVsIg86HVEBxdsKH/mCXrj4FsiXWxTqp3nodATWsOW9XZH23 Il/9mdNb+lOUJrbJLGZknazwd3xodQD8Smc420rrniDOCy6r1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy0p9SUql3xoAHDOyyubY7rCHibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzQzNDM2NjYtMmQ1Mi0z MzkzLThhYjEtMWViN2EwMzlkNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERbSZ9f12WFx4+0GAnBP3PnwtrtkQabImHXUxzSY0qtq5drPijpw8p6 PHQEYe+yDh9sqb2inwBmGur77hoE0TO40WkMmpPVumzKHj6tSxDDzjjuPzhh9NYC bf+ccA/hrnrOwqmVOl95xtgLoNT3kjEd3+u0OeNqNalTduGB7ntMaB2/D5H40nCv nDJKlR8NIe0ZFprs7MmvihOxXuFzT/GH9ezvjLx2iomc4S3Raak+rPUP8L3Z2CTZ 35aExV67a0fVxBzHhzEqBbbLOyIh1TVtnEi0fa7ajuMbbxfHtGsyT53NxDpiDi2K q3hYuAIQFmd5s0hKmyWLRl/cwjeseOA= -----END CERTIFICATE-----Generated at Sat Oct 3 11:33:09 2026 by rpki-client