$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a5550df-eb75-3e38-b63a-4b451fcfb5a3.roa File: 3a5550df-eb75-3e38-b63a-4b451fcfb5a3.roa (raw, json) Hash identifier: f8cTuDxRPcOZxJIjewWTNLoMZEbKzJ34OLJ13PMyB2s= Subject key identifier: E3:78:23:AD:E7:62:7A:C6:A8:B7:46:80:ED:D5:35:7A:D8:FB:C1:B8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E78BBCF0C0FE2C85DF280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a5550df-eb75-3e38-b63a-4b451fcfb5a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397235 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:78:bb:cf:0c:0f:e2:c8:5d:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=73292b3c-0c92-481f-87b3-1f87caa31b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:f5:a1:3e:f0:3d:ab:db:78:2d:5e:ee:2d: 1c:3e:62:97:2a:f7:79:90:84:46:e7:86:c0:96:f1: 7b:7a:f1:15:19:87:69:20:b4:43:49:02:ee:27:cd: 1b:2d:e1:00:02:28:c4:33:95:bc:3a:8b:3d:52:f2: bd:32:0c:b3:f3:e1:5e:48:50:16:b0:48:b4:d1:d1: 15:a2:2e:00:5a:f6:9d:2c:0a:e7:04:0d:96:08:27: 39:1c:06:33:7d:d5:fe:dc:29:64:93:75:f4:b1:e8: 5d:09:d5:6b:0c:1d:d2:2c:9b:e3:16:80:40:40:11: 1d:cb:31:bd:ab:a5:36:55:66:29:8e:39:57:9d:bf: 12:bb:1b:ef:5d:62:37:f5:6d:77:c3:ce:f6:1b:bf: 7c:64:f7:62:1b:bd:1c:63:e0:0f:c9:ec:9c:72:8a: f1:7a:0d:29:0d:47:90:c9:66:18:2b:09:7a:54:fd: b5:91:43:5e:87:6a:d7:8b:3a:d5:11:52:76:fb:2b: fc:2a:ee:53:6d:b1:05:68:8c:01:7f:1c:01:36:82: 5a:0d:92:b8:22:f9:87:91:2d:30:ba:d9:78:cf:2d: e5:2d:54:60:16:eb:85:f1:1b:c9:a4:6f:67:1f:19: 4e:b3:99:00:6e:c2:eb:93:33:86:9f:28:d0:a9:30: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:23:AD:E7:62:7A:C6:A8:B7:46:80:ED:D5:35:7A:D8:FB:C1:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3a5550df-eb75-3e38-b63a-4b451fcfb5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c4:dd:2f:ed:56:d5:14:ce:93:14:36:79:2b:10:a5:14:21: 46:2b:0f:b4:97:3b:33:3b:d5:a4:7c:84:ab:fd:5e:b6:2b:b5: 86:d9:74:5e:ce:a0:3f:b0:f9:34:00:5f:e9:39:74:36:26:10: aa:79:f2:cb:e0:d5:34:46:9d:0a:f3:36:91:15:97:e8:0b:9d: b7:91:f1:18:b8:a6:fe:a0:ae:23:44:ba:d0:a5:bc:a3:68:32: 19:11:dd:79:7e:73:37:27:61:fc:7f:c3:b3:47:dc:30:89:c1: 4f:26:00:27:9f:dc:86:1a:55:29:72:cf:34:ee:4f:6a:59:d8: 5f:cc:7e:3b:1a:73:5b:e3:2a:8a:d7:61:b4:f4:a9:6b:0c:15: e5:a9:b6:d1:82:e6:a2:53:90:e0:27:c1:bc:46:88:31:d0:0b: 20:58:5a:81:bf:21:d0:fd:7e:86:bb:f5:c0:4b:67:12:7b:15: ae:05:72:f0:71:ba:1c:44:b2:f0:24:21:33:8c:01:78:a2:2b: fe:ca:24:19:de:f2:da:89:06:76:f5:8b:2c:b4:65:77:cd:2a: 61:8e:9e:a7:cf:7c:d7:30:20:33:d4:c5:42:53:c9:e0:87:22: 56:6a:7e:19:e0:e7:4e:ab:aa:5a:9e:9e:54:74:92:4e:4d:52: 71:77:aa:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfni7zwwP4shd8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMyOTJiM2MtMGM5Mi00ODFmLTg3YjMtMWY4N2NhYTMxYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyz1oT7wPavbeC1e7i0cPmKXKvd5kIRG54bA lvF7evEVGYdpILRDSQLuJ80bLeEAAijEM5W8Oos9UvK9Mgyz8+FeSFAWsEi00dEV oi4AWvadLArnBA2WCCc5HAYzfdX+3Clkk3X0sehdCdVrDB3SLJvjFoBAQBEdyzG9 q6U2VWYpjjlXnb8SuxvvXWI39W13w872G798ZPdiG70cY+APyeyccorxeg0pDUeQ yWYYKwl6VP21kUNeh2rXizrVEVJ2+yv8Ku5TbbEFaIwBfxwBNoJaDZK4IvmHkS0w utl4zy3lLVRgFuuF8RvJpG9nHxlOs5kAbsLrkzOGnyjQqTBjAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON4I63nYnrGqLdGgO3VNXrY+8G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2E1NTUwZGYtZWI3NS0z ZTM4LWI2M2EtNGI0NTFmY2ZiNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzE3S/tVtUUzpMUNnkrEKUUIUYrD7SXOzM71aR8hKv9XrYrtYbZdF7O oD+w+TQAX+k5dDYmEKp58svg1TRGnQrzNpEVl+gLnbeR8Ri4pv6griNEutClvKNo MhkR3Xl+czcnYfx/w7NH3DCJwU8mACef3IYaVSlyzzTuT2pZ2F/Mfjsac1vjKorX YbT0qWsMFeWpttGC5qJTkOAnwbxGiDHQCyBYWoG/IdD9foa79cBLZxJ7Fa4FcvBx uhxEsvAkITOMAXiiK/7KJBne8tqJBnb1iyy0ZXfNKmGOnqfPfNcwIDPUxUJTyeCH IlZqfhng506rqlqenlR0kk5NUnF3qt0= -----END CERTIFICATE-----Generated at Sat Sep 26 10:23:16 2026 by rpki-client