$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa File: b41f483d-dd97-38f4-88da-3301a8ee0520.roa (raw, json) Hash identifier: q9UVPiZ2uAOvI41fG3MQjmh/440Oq1PpGXXDJT24sFA= Subject key identifier: 5C:DD:F0:1D:20:68:48:F3:85:7E:A5:D8:3F:99:34:03:24:A7:95:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F3FAD66283343169E2E514280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 397243 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:66:28:33:43:16:9e:2e:51:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=62656c61-2fc1-4f6b-afcd-e339b37c0c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:7d:b2:a1:db:2e:99:2a:58:a4:12:06:dc: 1d:b9:f4:9b:bc:43:7b:45:3b:48:c0:a0:e9:49:bb: b7:1c:5a:9c:d0:00:14:f4:f6:b5:70:e3:e7:0b:8e: 98:9f:fe:e1:3a:6b:2a:88:bb:5a:76:05:43:e8:0d: ad:f4:4e:35:b1:46:07:00:a9:a3:85:5a:59:a9:e9: 19:23:f5:81:d8:55:62:33:e7:6f:2a:93:4e:d5:41: b1:95:81:84:ac:e7:f0:11:78:e8:22:bb:7e:65:27: 3f:d3:31:5c:6d:86:32:fb:ce:f1:45:a6:ff:c5:8d: aa:7e:d2:0f:1d:fa:34:a4:5c:72:bc:a6:f1:6e:d8: f0:63:9a:07:18:90:98:86:74:bd:c7:fe:e8:11:43: b0:8a:14:66:27:e6:e8:aa:49:f3:67:71:60:50:5d: b2:cb:73:be:e3:32:b8:e2:6b:86:61:b1:25:a1:8b: 76:30:0f:ab:aa:80:4d:3e:8d:ab:0d:a4:5c:98:89: 4c:3c:d5:18:00:72:81:60:1f:20:96:55:7b:c1:ac: 91:5e:a7:5a:7f:ae:57:71:e8:1b:81:95:6a:a7:3f: 92:00:3d:38:06:3c:16:38:74:5f:a9:c2:aa:f8:3a: 3d:da:74:02:ec:9b:d1:1a:cc:34:cd:f5:9b:ad:8c: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:F0:1D:20:68:48:F3:85:7E:A5:D8:3F:99:34:03:24:A7:95:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2a:92:85:8e:48:3c:1e:fd:d2:e5:77:14:fa:25:94:ec:85: 32:84:60:27:a3:3b:d5:a5:a0:e7:8e:b8:52:24:8c:c4:06:3c: 77:ca:2f:4f:86:ec:7b:f0:0a:ff:b9:f5:c6:b5:ba:25:ab:e2: 5d:f3:95:50:ea:f0:97:27:a1:e1:71:36:92:f8:ec:f6:9d:60: 10:67:fb:74:fc:60:d9:81:f7:d7:c4:a8:ce:28:8e:dc:82:3f: 62:83:8b:30:a2:e1:b1:9a:47:5b:4c:14:ca:10:3c:c2:8b:8d: 1f:cf:b3:a5:ab:7b:32:a3:b5:79:5d:d5:c8:e2:d8:0c:f5:c5: 0f:d1:bf:a3:e1:f1:6d:8d:7f:d4:c4:93:75:5e:34:34:b8:3c: 04:6c:43:db:ce:46:52:e3:28:c9:97:e4:a1:1e:e9:83:fb:4e: 29:20:d6:ef:99:13:00:04:06:15:9a:66:6c:e2:c9:36:86:f2: 1d:25:fc:0a:43:dc:9c:12:12:dd:50:4e:b5:10:74:d0:32:67: ac:5f:c9:db:08:cc:1c:cd:c8:35:60:ab:88:bf:bf:90:9f:e0: 7a:67:b0:41:f6:ad:4d:c8:9f:44:57:db:13:d3:02:d9:c4:e3: a3:aa:50:cf:09:97:11:21:b5:cb:40:e4:4a:60:32:a2:74:90: 8e:5f:04:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rWYoM0MWni5RQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjI2NTZjNjEtMmZjMS00ZjZiLWFmY2QtZTMzOWIzN2MwYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozN9sqHbLpkqWKQSBtwdufSbvEN7RTtIwKDp Sbu3HFqc0AAU9Pa1cOPnC46Yn/7hOmsqiLtadgVD6A2t9E41sUYHAKmjhVpZqekZ I/WB2FViM+dvKpNO1UGxlYGErOfwEXjoIrt+ZSc/0zFcbYYy+87xRab/xY2qftIP Hfo0pFxyvKbxbtjwY5oHGJCYhnS9x/7oEUOwihRmJ+boqknzZ3FgUF2yy3O+4zK4 4muGYbEloYt2MA+rqoBNPo2rDaRcmIlMPNUYAHKBYB8gllV7wayRXqdaf65Xcegb gZVqpz+SAD04BjwWOHRfqcKq+Do92nQC7JvRGsw0zfWbrYz5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzd8B0gaEjzhX6l2D+ZNAMkp5WdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjQxZjQ4M2QtZGQ5Ny0z OGY0LTg4ZGEtMzMwMWE4ZWUwNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYqkoWOSDwe/dLldxT6JZTshTKEYCejO9WloOeOuFIkjMQGPHfKL0+G 7HvwCv+59ca1uiWr4l3zlVDq8JcnoeFxNpL47PadYBBn+3T8YNmB99fEqM4ojtyC P2KDizCi4bGaR1tMFMoQPMKLjR/Ps6WrezKjtXld1cji2Az1xQ/Rv6Ph8W2Nf9TE k3VeNDS4PARsQ9vORlLjKMmX5KEe6YP7Tikg1u+ZEwAEBhWaZmziyTaG8h0l/ApD 3JwSEt1QTrUQdNAyZ6xfydsIzBzNyDVgq4i/v5Cf4HpnsEH2rU3In0RX2xPTAtnE 46OqUM8JlxEhtctA5EpgMqJ0kI5fBLQ= -----END CERTIFICATE-----Generated at Sun Sep 27 11:58:23 2026 by rpki-client