$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa File: 43b56133-f5e5-3e4f-9019-2f81eabec217.roa (raw, json) Hash identifier: Wk3jrLO35wdz+QB9VOKolyUj1vGphxxzrws4EKy3+9c= Subject key identifier: 33:2C:94:BC:5D:B1:6F:08:5C:D0:EB:4F:92:04:04:FF:FD:21:3E:F4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178B4D33A6DBB0860BEB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397223 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8b:4d:33:a6:db:b0:86:0b:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=56ddd09a-d265-4e0b-882a-a080a7756bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:ae:3b:85:0b:c0:3e:75:1a:da:89:10:82: 84:f3:40:1a:fb:45:5b:f4:d5:5e:71:c6:d3:dd:3d: 70:29:91:9d:7e:11:b1:4b:21:9d:68:a7:04:bf:ca: 14:70:fd:2a:1d:ab:da:43:88:48:4e:38:19:3d:9c: b1:e9:d0:2a:64:ed:20:ed:3a:3e:71:a0:c2:1e:01: a0:a3:33:69:6c:a5:3b:a6:9c:8c:80:df:c9:0a:a3: a4:e0:92:b1:69:b7:ac:fb:c2:60:d0:34:e7:6f:18: 5d:43:2d:e0:68:c8:8f:6c:37:fd:68:81:14:83:ca: d4:6a:9a:41:a1:1b:6d:bb:0a:23:aa:c0:3b:a5:45: d2:2e:70:b5:90:42:22:52:9d:28:d2:50:75:ba:15: 4a:08:e7:76:a3:61:e4:25:cc:b7:7c:d7:41:71:f7: c3:2b:e9:dd:bd:80:ac:a1:ba:9b:fa:88:b9:f9:0d: f1:79:f8:4c:f2:91:35:c3:90:8e:43:00:ad:c4:b5: 19:bc:b0:f2:db:91:86:25:ad:e4:5b:73:0a:23:66: b7:7b:96:e4:dc:f7:7f:38:3a:71:bc:19:8f:0b:e9: 2e:fc:b8:ba:f6:36:01:24:4e:bc:7d:bb:20:fd:e7: 5a:13:de:7e:72:f1:a8:a1:7d:95:ae:a5:bf:11:71: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2C:94:BC:5D:B1:6F:08:5C:D0:EB:4F:92:04:04:FF:FD:21:3E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7b:76:69:66:08:68:1f:a9:cd:9d:c1:6c:b1:71:43:ef:55: a1:7c:14:ff:ed:ef:d2:c5:2b:df:b3:f9:48:34:a7:bb:cb:32: bb:2a:9e:f8:8d:b3:fe:85:ee:5f:8e:82:0d:7f:4a:ce:72:16: 05:56:70:24:b0:db:e5:56:99:d1:ec:90:e8:6a:af:51:31:78: 27:c2:76:d3:4a:45:25:58:a3:13:e1:8c:b5:bc:b3:ff:1a:a9: af:31:31:99:7f:cf:70:2d:fb:32:80:7c:87:e6:75:43:12:27: 95:c8:7f:f2:b8:57:c0:2e:d5:d7:64:54:33:c7:8d:0d:8c:4f: 87:51:b8:af:39:0f:b4:bf:d8:61:95:28:7d:12:4c:21:35:99: 47:45:1a:57:6d:75:69:2a:d7:34:72:aa:2d:5e:8c:8c:fc:65: 0f:37:ab:b7:23:60:31:b0:ab:61:e1:68:82:20:ed:e8:7d:f3: 53:bb:1c:ec:e5:70:2f:a6:5b:aa:4d:6b:36:d5:4c:61:48:89: f9:ed:1b:4d:82:93:29:b4:bd:cd:a2:8e:c3:d7:8a:f2:cd:58: bb:ea:ea:4d:bd:29:b1:14:fa:ec:98:a2:dc:c5:c4:73:c0:06: 65:9d:44:b9:ca:3f:ec:b8:3e:b2:e4:f0:a9:df:61:6d:6b:8a: 33:e6:df:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4tNM6bbsIYL6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTZkZGQwOWEtZDI2NS00ZTBiLTg4MmEtYTA4MGE3NzU2YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopOuO4ULwD51GtqJEIKE80Aa+0Vb9NVeccbT 3T1wKZGdfhGxSyGdaKcEv8oUcP0qHavaQ4hITjgZPZyx6dAqZO0g7To+caDCHgGg ozNpbKU7ppyMgN/JCqOk4JKxabes+8Jg0DTnbxhdQy3gaMiPbDf9aIEUg8rUappB oRttuwojqsA7pUXSLnC1kEIiUp0o0lB1uhVKCOd2o2HkJcy3fNdBcffDK+ndvYCs obqb+oi5+Q3xefhM8pE1w5COQwCtxLUZvLDy25GGJa3kW3MKI2a3e5bk3Pd/ODpx vBmPC+ku/Li69jYBJE68fbsg/edaE95+cvGooX2VrqW/EXEIwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMslLxdsW8IXNDrT5IEBP/9IT70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNiNTYxMzMtZjVlNS0z ZTRmLTkwMTktMmY4MWVhYmVjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA97dmlmCGgfqc2dwWyxcUPvVaF8FP/t79LFK9+z+Ug0p7vLMrsqnviN s/6F7l+Ogg1/Ss5yFgVWcCSw2+VWmdHskOhqr1ExeCfCdtNKRSVYoxPhjLW8s/8a qa8xMZl/z3At+zKAfIfmdUMSJ5XIf/K4V8Au1ddkVDPHjQ2MT4dRuK85D7S/2GGV KH0STCE1mUdFGldtdWkq1zRyqi1ejIz8ZQ83q7cjYDGwq2HhaIIg7eh981O7HOzl cC+mW6pNazbVTGFIifntG02Ckym0vc2ijsPXivLNWLvq6k29KbEU+uyYotzFxHPA BmWdRLnKP+y4PrLk8KnfYW1rijPm38s= -----END CERTIFICATE-----Generated at Sun Sep 27 05:57:56 2026 by rpki-client