$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa File: afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa (raw, json) Hash identifier: omp88mhPzlcQoqGZkMV37ataMl446EiWrRV+4v21t3E= Subject key identifier: 84:C3:3F:7F:67:C8:4A:11:86:28:C9:96:78:96:5B:07:24:B4:B4:61 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178A8EE6A991D4128CAE40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397240 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8a:8e:e6:a9:91:d4:12:8c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=e891912e-02cc-4f9a-b041-b5caae27e140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:c9:58:19:0a:ee:48:b4:a8:01:01:de:72: 79:19:3b:4b:df:1a:5e:b1:f0:6e:97:a2:af:7f:f2: 1b:4d:46:8d:da:d1:11:43:82:28:ff:38:2d:b6:c6: d4:91:35:71:3b:42:e0:20:22:47:95:14:ac:f1:b1: 8b:7b:08:12:0e:76:02:ce:a8:a6:dc:47:51:31:3d: 3b:a5:a8:8b:74:6c:9f:2e:ac:39:9c:57:23:c9:75: 1f:01:c4:31:61:2e:a2:f3:ec:b9:32:3b:46:6c:aa: 7c:37:65:f4:dc:ed:07:a4:1b:b0:af:94:ef:70:84: ae:20:fd:d2:c3:a0:ca:b6:f1:59:50:40:5a:ee:88: 47:1c:f4:92:ba:7e:26:35:d7:f1:6c:c5:81:3d:39: fc:11:8b:e1:6c:98:22:60:31:40:95:ad:8c:13:67: 80:38:cd:ab:67:45:3d:35:21:07:ee:de:71:09:66: 62:48:be:58:34:89:69:63:6d:6e:46:5b:2a:55:0c: a4:47:9b:c0:11:1b:a9:44:b2:8f:ba:d1:41:10:f9: a5:6a:42:c2:30:a4:74:3a:f7:c9:14:af:06:65:e1: 6d:80:40:06:e6:c1:60:e7:e7:c1:95:3d:65:8e:2c: 64:9b:6f:af:fb:44:da:d1:79:d6:dc:4e:af:7d:c0: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C3:3F:7F:67:C8:4A:11:86:28:C9:96:78:96:5B:07:24:B4:B4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4b:ac:b6:5a:95:d1:e3:38:96:a1:51:e2:6b:e5:46:a8:60: 1c:1e:da:d3:cf:84:b4:db:11:73:2f:7f:d6:67:ed:ba:fd:34: ef:cc:70:72:39:c0:5c:6c:ff:a4:bd:31:54:78:a5:5f:be:fa: a2:6e:e6:2f:5c:1e:77:dd:28:ff:2a:69:3f:b6:56:f0:12:39: 5d:e6:80:83:72:10:88:77:4d:33:3e:9a:aa:c3:3a:a2:cd:fa: 50:21:0e:2f:9e:1d:07:75:e8:a7:46:78:49:56:45:86:f8:62: 8c:cc:ba:3f:4b:b0:92:b4:29:b3:00:f7:fe:00:8f:2b:35:d5: ff:fd:59:eb:f3:c1:6c:8c:d0:d9:98:71:04:d6:ae:e0:75:52: a1:8e:71:35:72:ae:de:bf:0e:4d:cd:62:a7:6d:9c:77:c1:18: eb:50:f7:0c:6b:95:2b:7b:00:1e:94:bb:ff:90:eb:26:3c:14: 69:86:18:1d:56:97:21:b9:36:28:06:80:1f:4f:73:8d:60:33: 70:e5:6e:73:ff:27:3f:b8:ed:21:96:4b:6e:02:8a:5a:af:22: 35:13:e7:71:ae:b4:4e:28:59:ae:fa:69:a6:bc:13:71:01:c1: be:34:df:d8:f9:88:79:93:9d:ee:ff:af:09:f3:bb:29:bc:f7: 5b:24:5a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4qO5qmR1BKMrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTg5MTkxMmUtMDJjYy00ZjlhLWIwNDEtYjVjYWFlMjdlMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh83JWBkK7ki0qAEB3nJ5GTtL3xpesfBul6Kv f/IbTUaN2tERQ4Io/zgttsbUkTVxO0LgICJHlRSs8bGLewgSDnYCzqim3EdRMT07 paiLdGyfLqw5nFcjyXUfAcQxYS6i8+y5MjtGbKp8N2X03O0HpBuwr5TvcISuIP3S w6DKtvFZUEBa7ohHHPSSun4mNdfxbMWBPTn8EYvhbJgiYDFAla2ME2eAOM2rZ0U9 NSEH7t5xCWZiSL5YNIlpY21uRlsqVQykR5vAERupRLKPutFBEPmlakLCMKR0OvfJ FK8GZeFtgEAG5sFg5+fBlT1ljixkm2+v+0Ta0XnW3E6vfcAEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITDP39nyEoRhijJlniWWwcktLRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWZhYzQwZTctOWNjYy0z YjA5LThmNTgtNWI3M2UzMTJmOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpLrLZaldHjOJahUeJr5UaoYBwe2tPPhLTbEXMvf9Zn7br9NO/McHI5 wFxs/6S9MVR4pV+++qJu5i9cHnfdKP8qaT+2VvASOV3mgINyEIh3TTM+mqrDOqLN +lAhDi+eHQd16KdGeElWRYb4YozMuj9LsJK0KbMA9/4Ajys11f/9WevzwWyM0NmY cQTWruB1UqGOcTVyrt6/Dk3NYqdtnHfBGOtQ9wxrlSt7AB6Uu/+Q6yY8FGmGGB1W lyG5NigGgB9Pc41gM3DlbnP/Jz+47SGWS24CilqvIjUT53GutE4oWa76aaa8E3EB wb4039j5iHmTne7/rwnzuym891skWuc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:55:53 2026 by rpki-client