$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeb95855-3a83-352b-ac70-a5f445efeba4.roa File: aeb95855-3a83-352b-ac70-a5f445efeba4.roa (raw, json) Hash identifier: 3zOnPHDJ7tUvqZAwfR4Q+B50EE0RUN83dp4ESRpF1OA= Subject key identifier: F0:D9:AA:B7:29:17:88:6F:F8:DC:D5:70:C4:43:9A:95:06:FD:AC:46 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF71796A7ED1431945E5EF780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeb95855-3a83-352b-ac70-a5f445efeba4.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397238 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:96:a7:ed:14:31:94:5e:5e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=585d4481-99a4-41a0-b9fa-54c5d5ca6e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:3e:bc:c7:31:bb:d2:2d:a3:23:dd:1d:d9: fb:a9:35:ad:e1:89:95:8a:5e:14:f3:9a:83:e1:60: fc:d9:a7:56:98:3e:cd:cc:89:58:70:ff:a2:60:ef: 2a:86:c4:7d:8d:b9:8b:92:e3:d0:63:c3:20:d8:2a: af:bc:b5:d3:58:dc:97:f3:17:79:69:8c:5a:d9:d0: 03:32:5c:18:d3:3a:7c:97:23:ec:d6:fd:de:52:3b: 75:bc:9a:d4:c3:21:2a:ad:e5:34:31:b2:98:1c:57: ff:a9:67:59:1c:12:64:52:50:be:51:84:e0:1e:ea: 89:bb:17:b6:a9:6a:89:36:c3:f4:a4:b3:72:65:a3: c2:cb:77:6f:47:e5:30:ea:04:cc:2f:87:33:73:ec: dc:48:60:bd:92:24:55:55:7d:75:8a:fe:d1:55:7e: 82:43:7a:d8:32:84:20:09:ad:c3:da:e0:8d:d4:3f: 08:7d:02:82:9d:72:5f:d5:78:e8:ba:b5:dc:59:64: 55:11:fa:e3:14:eb:d6:eb:3c:2b:b6:14:6d:0a:60: f8:a4:9e:d4:20:13:7d:32:df:71:59:36:89:79:9f: e3:d4:50:7c:36:f5:75:f6:22:69:87:74:4b:cc:43: 01:f1:bb:3a:99:10:8c:bd:88:98:94:35:ee:b1:fb: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:AA:B7:29:17:88:6F:F8:DC:D5:70:C4:43:9A:95:06:FD:AC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeb95855-3a83-352b-ac70-a5f445efeba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:da:6a:26:7f:4f:96:42:1e:da:c2:89:de:ab:18:fd:3d:fb: e1:1b:a5:42:88:6c:f5:6e:cb:4a:28:2e:bc:56:7e:e5:02:62: 8b:37:43:7e:18:a8:aa:81:5d:21:f6:bc:0a:5c:63:de:73:54: d5:1d:d1:67:96:07:c7:92:7d:07:d2:ee:74:8b:63:62:ef:b6: 3b:4b:15:25:45:b2:aa:92:41:f8:eb:55:04:56:16:4b:28:9e: 1b:bd:02:13:1d:7c:09:0d:c7:89:5d:d2:88:72:7c:2c:e7:07: 82:2b:d1:9a:c7:35:14:63:48:62:97:07:04:8f:a2:8c:09:c5: 5c:0c:22:71:0e:bd:d0:08:3e:16:88:95:3f:34:e8:da:72:bc: 69:30:3b:8d:e1:bc:6d:f8:14:7c:b7:b7:53:1b:96:63:af:0b: 2d:83:89:5d:f5:86:5a:23:39:28:73:39:69:02:f7:f0:53:a1: 4a:17:ed:ac:14:47:a0:e8:f0:b9:44:d2:eb:1d:eb:a2:eb:dc: c6:e8:0c:e9:9e:5b:a2:46:ee:45:a0:74:fe:90:32:8f:74:a7: c2:45:2a:da:3e:e0:f4:ae:4f:9d:07:ed:ca:8d:a2:84:18:be: 72:68:98:db:40:e9:f7:82:1f:d8:53:3d:6b:9a:fb:f1:f4:4e: d6:46:37:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5an7RQxlF5e94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTg1ZDQ0ODEtOTlhNC00MWEwLWI5ZmEtNTRjNWQ1Y2E2ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikA+vMcxu9ItoyPdHdn7qTWt4YmVil4U85qD 4WD82adWmD7NzIlYcP+iYO8qhsR9jbmLkuPQY8Mg2CqvvLXTWNyX8xd5aYxa2dAD MlwY0zp8lyPs1v3eUjt1vJrUwyEqreU0MbKYHFf/qWdZHBJkUlC+UYTgHuqJuxe2 qWqJNsP0pLNyZaPCy3dvR+Uw6gTML4czc+zcSGC9kiRVVX11iv7RVX6CQ3rYMoQg Ca3D2uCN1D8IfQKCnXJf1XjourXcWWRVEfrjFOvW6zwrthRtCmD4pJ7UIBN9Mt9x WTaJeZ/j1FB8NvV19iJph3RLzEMB8bs6mRCMvYiYlDXusfskcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDZqrcpF4hv+NzVcMRDmpUG/axGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWViOTU4NTUtM2E4My0z NTJiLWFjNzAtYTVmNDQ1ZWZlYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjaaiZ/T5ZCHtrCid6rGP09++EbpUKIbPVuy0ooLrxWfuUCYos3Q34Y qKqBXSH2vApcY95zVNUd0WeWB8eSfQfS7nSLY2LvtjtLFSVFsqqSQfjrVQRWFkso nhu9AhMdfAkNx4ld0ohyfCznB4Ir0ZrHNRRjSGKXBwSPoowJxVwMInEOvdAIPhaI lT806NpyvGkwO43hvG34FHy3t1MblmOvCy2DiV31hlojOShzOWkC9/BToUoX7awU R6Do8LlE0usd66Lr3MboDOmeW6JG7kWgdP6QMo90p8JFKto+4PSuT50H7cqNooQY vnJomNtA6feCH9hTPWua+/H0TtZGN6k= -----END CERTIFICATE-----Generated at Fri Sep 25 23:22:34 2026 by rpki-client