$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa File: 3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa (raw, json) Hash identifier: gnzygYMIBcAOci1YUnjjMtTs2IpMfnViF/MC/Nb+Xr0= Subject key identifier: FC:63:53:D4:75:1A:B8:1D:3E:D4:58:60:63:08:B9:C6:2F:3B:1B:63 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497EAFDE781357B444A1FE40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397234 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:af:de:78:13:57:b4:44:a1:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8b90ad2-31e0-4fef-ab68-9ac2310f3e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:87:2d:0f:0f:8d:c7:d0:e9:c9:6c:80:5f: f6:19:2f:15:34:5c:10:d1:ba:16:22:c7:8a:8a:b2: 64:44:5e:3e:54:eb:98:ec:7a:4e:27:3b:0d:75:ea: 9c:8d:fb:bc:94:a7:55:db:90:a6:2b:9e:ee:d5:fb: 3f:a6:f2:55:37:41:cb:11:84:84:63:8e:c7:fb:fc: 74:4f:4c:cf:52:0f:91:d0:ad:4a:86:d2:d8:3d:81: 19:a6:cf:bb:0f:15:ba:3b:96:eb:10:8e:43:45:78: 21:e8:af:df:3b:b8:81:f6:98:a9:ab:58:84:39:89: 7a:12:a4:fb:89:4c:60:9e:41:9a:16:e7:d8:74:35: 14:58:ba:a8:ba:7b:3a:6a:6c:69:9b:ab:b9:c8:53: ca:ca:a9:f6:50:05:62:6e:43:da:cd:23:e0:d5:bb: 72:66:25:59:bb:c9:01:68:d8:bd:b6:28:37:fd:88: f1:78:3d:dd:90:ad:44:09:0d:3f:61:f7:28:6d:78: f9:d5:98:20:ac:8b:07:e6:2b:89:5d:70:3b:75:87: 1a:96:7a:b6:ff:48:0c:d3:c2:6b:d7:86:68:05:c1: ba:8f:9a:76:be:0f:c8:b8:f2:0f:7c:d7:e7:da:14: 7e:7c:42:d0:39:2d:dc:0e:9a:66:82:ff:c0:69:37: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:63:53:D4:75:1A:B8:1D:3E:D4:58:60:63:08:B9:C6:2F:3B:1B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3947437d-803d-39b9-9d48-b4f3ec90c6c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:df:67:9e:f1:fc:7a:e0:bc:a1:52:40:05:b3:d5:75:fd:39: bf:06:90:84:3b:d6:11:f0:53:97:86:ba:e3:12:3f:b1:b2:ea: 02:fe:08:f3:b3:f6:9e:88:10:5d:3a:8c:50:f8:9a:10:8f:9c: e5:33:3d:bd:3e:0d:3f:f8:06:ec:47:6a:ed:27:d4:3c:8e:dd: d0:c7:8e:fd:be:32:85:dd:f3:45:76:fb:70:87:78:d1:64:b5: c8:ba:29:e9:cf:d2:b0:1c:88:92:71:8e:51:63:81:16:42:60: 30:74:34:3b:84:0f:2f:f8:bb:65:de:75:b9:f8:f3:a9:22:b4: d7:58:3e:e4:17:48:08:59:de:6f:78:0e:42:46:5c:a6:6a:1f: 0f:5a:c6:36:4f:be:a0:e1:6b:91:2e:ee:0a:77:68:53:a2:70: 01:9a:65:26:d5:4b:f9:03:33:67:2d:77:ee:28:11:9f:b5:a5: d4:b1:3e:f6:bb:3b:45:97:80:54:ea:4b:86:99:b9:66:46:bf: 4e:ba:04:18:8e:68:8a:c3:75:ba:61:46:fd:92:3a:40:bc:ee: dd:79:44:b2:82:23:bb:e7:91:0b:66:d1:3a:6b:21:4b:bc:38: 7a:07:c1:7d:49:2a:c4:f4:f0:ef:1f:95:3b:32:1d:21:54:bb: 32:e9:29:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfq/eeBNXtESh/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThiOTBhZDItMzFlMC00ZmVmLWFiNjgtOWFjMjMxMGYzZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2qHLQ8PjcfQ6clsgF/2GS8VNFwQ0boWIseK irJkRF4+VOuY7HpOJzsNdeqcjfu8lKdV25CmK57u1fs/pvJVN0HLEYSEY47H+/x0 T0zPUg+R0K1KhtLYPYEZps+7DxW6O5brEI5DRXgh6K/fO7iB9pipq1iEOYl6EqT7 iUxgnkGaFufYdDUUWLqouns6amxpm6u5yFPKyqn2UAVibkPazSPg1btyZiVZu8kB aNi9tig3/YjxeD3dkK1ECQ0/YfcobXj51ZggrIsH5iuJXXA7dYcalnq2/0gM08Jr 14ZoBcG6j5p2vg/IuPIPfNfn2hR+fELQOS3cDppmgv/AaTdxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxjU9R1GrgdPtRYYGMIucYvOxtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk0NzQzN2QtODAzZC0z OWI5LTlkNDgtYjRmM2VjOTBjNmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7fZ57x/HrgvKFSQAWz1XX9Ob8GkIQ71hHwU5eGuuMSP7Gy6gL+CPOz 9p6IEF06jFD4mhCPnOUzPb0+DT/4BuxHau0n1DyO3dDHjv2+MoXd80V2+3CHeNFk tci6KenP0rAciJJxjlFjgRZCYDB0NDuEDy/4u2Xedbn486kitNdYPuQXSAhZ3m94 DkJGXKZqHw9axjZPvqDha5Eu7gp3aFOicAGaZSbVS/kDM2ctd+4oEZ+1pdSxPva7 O0WXgFTqS4aZuWZGv066BBiOaIrDdbphRv2SOkC87t15RLKCI7vnkQtm0TprIUu8 OHoHwX1JKsT08O8flTsyHSFUuzLpKTk= -----END CERTIFICATE-----Generated at Mon Sep 28 16:32:23 2026 by rpki-client