$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa File: a2707dd2-bde3-3ef1-b848-193229d6439a.roa (raw, json) Hash identifier: NMFuQ3Q5jwrZvQNCl3hyX0XM8wHU9Kfp3b1XTgchaCw= Subject key identifier: 2A:19:58:BA:91:81:34:B0:96:0E:E8:3F:47:EE:C8:B9:8B:2C:07:B0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584E54B4C4C48F1F24EEF7637C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 397232 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:c4:c4:8f:1f:24:ee:f7:63:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=425360d5-ef49-42ac-aa6e-65fc9b43a7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:83:83:57:b5:de:62:42:67:ed:fb:e4:df: 59:6a:c0:cd:99:11:1b:87:ed:c9:67:b8:27:23:30: e3:af:59:f2:28:e7:58:ae:43:dc:36:62:2a:5c:7b: a2:04:e6:ba:e9:ed:4b:14:0e:b8:67:78:76:ff:51: 78:0f:35:98:ef:d0:9d:0d:d1:38:8b:fb:5b:2a:c2: a3:20:d9:ac:2e:59:ee:c9:12:9d:14:87:98:eb:dc: c8:50:46:09:ee:01:ef:e2:cd:a8:68:be:17:10:10: c0:53:5e:86:41:aa:e6:2b:85:b5:08:68:bd:49:5c: e4:d5:db:38:9d:28:7a:50:28:81:31:6c:60:3d:18: 12:38:a8:81:8c:01:f5:da:eb:a1:e4:7a:97:b9:02: 40:a0:01:ba:1a:8f:51:06:3f:b2:33:73:c2:a6:c0: ad:8b:85:b9:1c:1a:12:b6:db:43:9a:38:91:28:82: 8b:65:e5:ee:e9:81:6e:cd:23:a0:d1:6f:f3:b5:6e: ad:28:9c:bc:3d:bb:c7:5d:b8:39:da:5c:bd:f0:cc: 56:31:c2:aa:13:f3:72:1c:8f:12:6d:a6:85:df:84: 99:6a:e8:25:04:0a:5e:1f:d7:dc:bf:99:c3:df:af: e7:2b:36:74:9e:d3:f4:6a:3b:32:fc:c3:1f:cc:9b: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:58:BA:91:81:34:B0:96:0E:E8:3F:47:EE:C8:B9:8B:2C:07:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:38:47:f3:bb:cf:56:cd:4a:21:ae:1b:24:d7:89:05:9b:32: ac:61:9e:f4:24:26:a2:50:9a:7d:c3:a8:66:2d:62:39:04:b5: 27:89:b4:82:31:16:46:8d:82:81:91:18:4f:a7:70:7e:eb:eb: dc:ba:e3:a2:d0:ca:57:fd:9f:2c:83:f9:e0:1f:6c:62:fe:be: db:73:6f:18:ae:d8:c2:14:7d:1b:a7:22:f6:77:37:2d:77:1e: 9d:10:13:11:1c:2b:67:22:47:9f:02:d8:99:c9:89:13:5d:48: db:11:97:76:df:b7:bf:9f:db:a2:07:88:78:33:90:f3:1a:c9: 20:c9:a5:54:7b:79:21:5e:57:aa:0b:75:42:4f:fd:83:13:41: ab:1d:7d:58:73:c1:29:96:f8:ce:52:4f:dd:7b:e9:74:06:4e: 7f:cc:70:38:1c:89:6d:12:7d:0e:d3:3f:cc:38:b2:ff:3a:fb: 16:23:6f:3c:64:06:27:34:39:44:62:da:7a:86:52:02:0e:88: 23:b1:fa:4d:bb:d1:39:90:11:2a:9e:41:51:ac:1a:7f:46:4a: 7c:9e:e1:71:2b:23:13:1d:d5:b3:d3:1a:f8:3b:4e:35:be:39: 7c:90:39:79:56:08:4d:40:32:49:2d:77:e6:cc:ee:37:62:ac: 04:96:bf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtMTEjx8k7vdjfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk NDI1MzYwZDUtZWY0OS00MmFjLWFhNmUtNjVmYzliNDNhN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNKDg1e13mJCZ+375N9ZasDNmREbh+3JZ7gn IzDjr1nyKOdYrkPcNmIqXHuiBOa66e1LFA64Z3h2/1F4DzWY79CdDdE4i/tbKsKj INmsLlnuyRKdFIeY69zIUEYJ7gHv4s2oaL4XEBDAU16GQarmK4W1CGi9SVzk1ds4 nSh6UCiBMWxgPRgSOKiBjAH12uuh5HqXuQJAoAG6Go9RBj+yM3PCpsCti4W5HBoS tttDmjiRKIKLZeXu6YFuzSOg0W/ztW6tKJy8PbvHXbg52ly98MxWMcKqE/NyHI8S baaF34SZauglBApeH9fcv5nD36/nKzZ0ntP0ajsy/MMfzJtRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoZWLqRgTSwlg7oP0fuyLmLLAewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTI3MDdkZDItYmRlMy0z ZWYxLWI4NDgtMTkzMjI5ZDY0MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH04R/O7z1bNSiGuGyTXiQWbMqxhnvQkJqJQmn3DqGYtYjkEtSeJtIIx FkaNgoGRGE+ncH7r69y646LQylf9nyyD+eAfbGL+vttzbxiu2MIUfRunIvZ3Ny13 Hp0QExEcK2ciR58C2JnJiRNdSNsRl3bft7+f26IHiHgzkPMaySDJpVR7eSFeV6oL dUJP/YMTQasdfVhzwSmW+M5ST9176XQGTn/McDgciW0SfQ7TP8w4sv86+xYjbzxk Bic0OURi2nqGUgIOiCOx+k270TmQESqeQVGsGn9GSnye4XErIxMd1bPTGvg7TjW+ OXyQOXlWCE1AMkktd+bM7jdirASWvwo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:58:00 2026 by rpki-client