$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa File: af970f38-b9fd-394b-953e-9631e8030666.roa (raw, json) Hash identifier: tYGBaubgRCsFWHRGkF+CQN378vzFelaKBKAYcHnvyV0= Subject key identifier: 7C:5D:FA:BF:DA:EA:77:9C:07:B3:7E:A0:7A:6D:EC:1D:45:51:4E:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF71787BCDA2374A8A9FB7B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397213 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:87:bc:da:23:74:a8:a9:fb:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=7c3dff16-195f-44c1-9d3c-9ae67e7eda02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:88:1c:53:45:ba:bf:ba:4a:e8:1c:d3:d6: 23:0a:22:de:45:ba:de:35:a3:33:74:97:15:cf:7f: 64:0d:35:6b:c3:7f:e7:86:be:02:d3:c3:98:d8:92: 7c:3e:b3:57:14:a4:cd:57:20:bc:b7:b7:37:2d:4c: 23:87:26:9d:7b:77:e3:ef:42:20:89:fe:0b:6b:59: e8:21:b3:e6:39:78:fb:91:fe:78:b5:7e:db:f5:d7: 74:fc:6c:e3:e9:eb:51:dd:0a:b4:e9:aa:24:cc:b4: 0e:fe:4e:ff:78:36:aa:5f:39:4b:ab:da:ed:f2:d4: cc:aa:10:6b:8c:64:42:c8:fa:b8:77:2f:c7:0f:45: 43:55:66:c0:58:93:3e:8c:8e:38:97:da:1c:47:b0: 4d:66:c0:d2:74:dc:66:9f:0d:53:2e:fe:e2:86:f0: ba:ea:57:8f:b8:81:05:b4:65:4a:85:03:a2:31:c1: e5:99:7a:e2:75:d8:f7:03:13:8b:3b:a6:7b:be:e2: 48:8b:67:b8:46:f7:00:a0:bc:0c:4d:12:0a:77:93: 98:4c:77:84:17:52:e0:c4:7f:02:73:e4:54:88:f2: d6:2f:7b:fb:92:d6:40:93:75:5b:7f:52:15:cb:e1: de:5e:42:00:35:7b:58:2f:ad:ba:2e:47:bc:28:d6: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:FA:BF:DA:EA:77:9C:07:B3:7E:A0:7A:6D:EC:1D:45:51:4E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af970f38-b9fd-394b-953e-9631e8030666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:be:c1:96:fa:69:05:fa:1a:5a:33:f1:f3:d9:fb:a6:67:e3: 19:f7:34:21:ed:f9:67:1e:15:7f:a9:e6:97:1d:a6:80:b4:d0: 01:ff:de:46:c2:95:e2:0b:83:4b:32:ea:3d:ac:4c:cf:42:44: e0:4a:1f:fd:02:35:da:11:55:5d:d1:a7:7e:b4:e1:5f:8c:83: e9:9e:ba:e2:5b:9b:d5:e6:88:a7:8a:17:84:b7:81:27:34:e4: 21:5d:84:94:ea:a3:d9:96:b5:fd:97:cc:1b:f3:b9:88:4f:b8: 88:d6:24:fd:f7:ee:30:bd:6e:ee:69:c3:da:38:f0:57:c3:4f: 9f:2b:38:3f:f1:ef:26:48:1b:72:e2:05:d9:34:31:5d:1c:bd: 76:9c:da:87:a1:26:5f:ef:d2:4c:f4:de:71:97:bc:69:17:f8: 70:43:db:c4:1a:22:8e:51:58:b8:52:ac:eb:cf:c2:1b:ed:57: 28:c7:dc:50:f7:fa:26:34:8a:c9:19:05:92:46:a8:45:c0:c1: 49:fd:c9:74:f4:c7:71:95:e7:6d:35:0a:39:5f:f7:ea:bd:f9: 1b:04:e2:0b:3a:48:cb:38:65:fb:4d:75:d9:08:b4:5f:85:cc: 20:82:12:81:1d:f6:6d:34:92:94:13:8b:27:dc:ab:81:eb:d2: b6:a8:a7:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4e82iN0qKn7ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk N2MzZGZmMTYtMTk1Zi00NGMxLTlkM2MtOWFlNjdlN2VkYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhOIHFNFur+6Sugc09YjCiLeRbreNaMzdJcV z39kDTVrw3/nhr4C08OY2JJ8PrNXFKTNVyC8t7c3LUwjhyade3fj70Igif4La1no IbPmOXj7kf54tX7b9dd0/Gzj6etR3Qq06aokzLQO/k7/eDaqXzlLq9rt8tTMqhBr jGRCyPq4dy/HD0VDVWbAWJM+jI44l9ocR7BNZsDSdNxmnw1TLv7ihvC66lePuIEF tGVKhQOiMcHlmXriddj3AxOLO6Z7vuJIi2e4RvcAoLwMTRIKd5OYTHeEF1LgxH8C c+RUiPLWL3v7ktZAk3Vbf1IVy+HeXkIANXtYL626Lke8KNYt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxd+r/a6necB7N+oHpt7B1FUU56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY5NzBmMzgtYjlmZC0z OTRiLTk1M2UtOTYzMWU4MDMwNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi+wZb6aQX6Gloz8fPZ+6Zn4xn3NCHt+WceFX+p5pcdpoC00AH/3kbC leILg0sy6j2sTM9CROBKH/0CNdoRVV3Rp3604V+Mg+meuuJbm9XmiKeKF4S3gSc0 5CFdhJTqo9mWtf2XzBvzuYhPuIjWJP337jC9bu5pw9o48FfDT58rOD/x7yZIG3Li Bdk0MV0cvXac2oehJl/v0kz03nGXvGkX+HBD28QaIo5RWLhSrOvPwhvtVyjH3FD3 +iY0iskZBZJGqEXAwUn9yXT0x3GV5201Cjlf9+q9+RsE4gs6SMs4ZftNddkItF+F zCCCEoEd9m00kpQTiyfcq4Hr0raopxE= -----END CERTIFICATE-----Generated at Mon Sep 28 14:27:10 2026 by rpki-client