$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45b4dfff-4220-3dc5-824a-ef7ece598f3e.roa File: 45b4dfff-4220-3dc5-824a-ef7ece598f3e.roa (raw, json) Hash identifier: 573ehxvWWVBSc637zPEbFImPL8MxGPL5MK0rL8hwry0= Subject key identifier: 7F:01:5D:FA:4F:71:97:BA:2A:3F:38:BA:94:9C:AD:6F:FF:58:23:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497C126AA4570F78BF865580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45b4dfff-4220-3dc5-824a-ef7ece598f3e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397224 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:12:6a:a4:57:0f:78:bf:86:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b090369e-71a8-4c59-8e12-b40e01adedde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:1c:a4:33:53:ee:d1:7f:71:a1:3e:5e:82: 97:a4:48:fc:84:87:4c:20:93:4a:cc:4a:a4:99:c2: 02:fb:a3:a8:68:e1:d1:8a:d3:14:d4:5a:58:0f:66: 73:3b:d3:f8:4a:f9:31:c2:ad:38:5f:b1:83:b2:47: a4:96:fe:6a:be:57:57:7e:98:25:cc:b4:8a:19:bc: 15:42:22:37:2e:b6:ac:5e:30:ea:01:9e:92:de:a4: 5d:f9:20:d4:ad:d2:85:a0:d6:fc:2f:98:51:26:dd: e5:b8:c8:de:43:de:34:b7:05:8b:1a:2c:56:f6:7c: fd:07:ae:e7:a1:1a:1d:24:9e:4f:ae:c9:0d:97:35: 42:47:c6:d1:b6:ad:fe:3c:c8:7e:3a:f5:e9:73:6f: e2:14:79:dc:75:50:0f:4a:c1:8d:63:aa:a2:99:1c: 5b:cb:c6:96:f4:4b:1a:23:6c:7b:f0:d6:75:0d:3c: 67:55:f0:10:e6:14:40:6f:32:a9:99:b1:fc:f0:77: 2a:e7:d4:84:6f:9f:7a:b3:7a:fe:aa:e3:d4:cb:c1: 0e:fe:b1:a0:3f:f5:ad:73:63:ad:47:18:d6:15:be: 11:6b:23:4b:a3:7b:f9:be:18:ba:7d:2e:95:dd:f4: 9d:0a:a2:aa:34:10:1a:e0:c8:44:81:34:51:bb:01: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:01:5D:FA:4F:71:97:BA:2A:3F:38:BA:94:9C:AD:6F:FF:58:23:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45b4dfff-4220-3dc5-824a-ef7ece598f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ba:8e:15:77:6f:98:9f:55:ae:f8:8c:25:ed:6a:fc:99:17: 3d:e7:fb:a9:f9:9b:e8:96:40:a8:34:32:50:57:c7:7e:f9:4a: f2:60:23:cc:d0:c6:56:92:d2:b6:f5:ee:e7:e8:c0:0a:d8:b3: 22:b2:9c:76:76:17:88:9e:11:63:7e:76:76:1a:86:d5:93:ca: 44:1f:ab:fb:45:6d:5f:69:a0:d7:3a:29:16:0e:ee:08:08:73: 04:4d:a6:45:65:b3:43:d1:8a:c3:0d:fb:1b:cf:46:db:67:35: 51:d1:00:c5:75:3b:6e:ef:75:22:dd:75:4c:b5:35:84:fb:44: 66:36:52:07:12:a4:3b:8f:46:c4:40:9c:d3:f8:40:bc:5c:a7: 04:ce:d3:a8:b8:bd:18:20:f8:ad:51:79:f4:fb:92:24:14:82: 7c:5e:10:0a:f1:5f:f9:40:ec:9d:89:48:2d:aa:17:1c:a4:8a: cd:be:c4:ae:ce:0e:1f:c6:c5:29:e8:ef:87:3c:3d:c0:18:e7: d9:7c:a1:51:e0:b6:16:e7:b5:8c:c4:7d:08:18:c6:ef:f2:08: 1d:6e:71:3b:b2:1f:98:a5:21:91:ca:df:2f:6c:70:cc:74:34: cf:0d:5c:d9:ef:21:af:d4:31:87:a4:7b:57:db:4a:0e:37:74: 2f:db:03:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfBJqpFcPeL+GVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjA5MDM2OWUtNzFhOC00YzU5LThlMTItYjQwZTAxYWRlZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XwcpDNT7tF/caE+XoKXpEj8hIdMIJNKzEqk mcIC+6OoaOHRitMU1FpYD2ZzO9P4Svkxwq04X7GDskeklv5qvldXfpglzLSKGbwV QiI3LrasXjDqAZ6S3qRd+SDUrdKFoNb8L5hRJt3luMjeQ940twWLGixW9nz9B67n oRodJJ5PrskNlzVCR8bRtq3+PMh+OvXpc2/iFHncdVAPSsGNY6qimRxby8aW9Esa I2x78NZ1DTxnVfAQ5hRAbzKpmbH88Hcq59SEb596s3r+quPUy8EO/rGgP/Wtc2Ot RxjWFb4RayNLo3v5vhi6fS6V3fSdCqKqNBAa4MhEgTRRuwHc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8BXfpPcZe6Kj84upScrW//WCPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDViNGRmZmYtNDIyMC0z ZGM1LTgyNGEtZWY3ZWNlNTk4ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe6jhV3b5ifVa74jCXtavyZFz3n+6n5m+iWQKg0MlBXx375SvJgI8zQ xlaS0rb17ufowArYsyKynHZ2F4ieEWN+dnYahtWTykQfq/tFbV9poNc6KRYO7ggI cwRNpkVls0PRisMN+xvPRttnNVHRAMV1O27vdSLddUy1NYT7RGY2UgcSpDuPRsRA nNP4QLxcpwTO06i4vRgg+K1RefT7kiQUgnxeEArxX/lA7J2JSC2qFxykis2+xK7O Dh/GxSno74c8PcAY59l8oVHgthbntYzEfQgYxu/yCB1ucTuyH5ilIZHK3y9scMx0 NM8NXNnvIa/UMYeke1fbSg43dC/bA1g= -----END CERTIFICATE-----Generated at Fri Sep 25 13:36:02 2026 by rpki-client