$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b1b857-47a0-39b2-a857-07f638110d0c.roa File: d4b1b857-47a0-39b2-a857-07f638110d0c.roa (raw, json) Hash identifier: oT86Ew4qnS3oOh/zBlJyjEZxzXo5VjRdzcm0GNMXF8U= Subject key identifier: 73:69:12:A9:7B:79:D7:70:FD:5C:0B:ED:FF:50:10:AF:09:42:F5:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F119F8E62230AB35E07ED3D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b1b857-47a0-39b2-a857-07f638110d0c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 399156 IP address blocks: 156.154.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:8e:62:23:0a:b3:5e:07:ed:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=11dcd1f0-38e9-49a9-9462-90d6382996d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:11:7f:ca:c1:bd:43:84:64:2f:65:53:4a:f9: 11:b1:f8:77:0f:27:15:8d:e3:d3:25:30:eb:53:ab: 08:4a:c6:7e:12:45:7b:4b:7f:cf:0b:2f:bc:a4:b4: 67:37:96:8d:34:b9:c7:07:ee:79:d9:3b:cd:1d:9a: 99:1d:fb:de:03:79:8d:5b:25:18:63:78:c0:14:3c: 07:64:2e:3f:2c:02:c0:c6:de:4b:5b:f9:25:eb:5a: 10:db:58:49:20:4b:9d:29:8a:ef:d5:91:8a:b4:65: de:5d:23:6f:13:4a:e9:97:04:73:22:78:64:84:c5: e8:21:7f:b2:bd:08:8d:68:5c:6d:2f:fb:48:78:11: 3e:39:b0:a6:c4:74:e2:51:6b:df:17:68:ac:84:ab: 39:8a:d5:0e:89:d7:f7:40:0b:1a:b9:55:a3:68:f1: 4a:1a:10:84:27:6e:26:0e:5e:e5:65:c0:2b:bf:bc: 5b:e1:ff:45:37:2f:b7:fd:88:3b:6e:aa:9c:68:5a: 8a:bd:b8:6c:ae:3d:b3:82:32:f0:ec:76:20:69:34: db:f8:28:94:2c:37:6d:d5:10:30:48:20:af:33:4d: 1b:2b:31:77:7e:86:87:a7:a0:90:5d:bf:d0:7b:35: 62:84:f6:34:6a:5c:fd:28:5a:76:85:da:1e:c0:d1: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:12:A9:7B:79:D7:70:FD:5C:0B:ED:FF:50:10:AF:09:42:F5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4b1b857-47a0-39b2-a857-07f638110d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:52:96:47:e4:39:cf:f2:ce:f4:01:a9:1c:e8:23:e6:1a:e2: e9:b2:db:0c:e7:ee:95:b1:56:b3:1d:5f:70:8b:10:d4:a4:c9: 67:db:94:ac:fc:f3:64:79:43:80:98:1c:17:39:d1:34:af:58: a4:94:5b:5c:f3:bf:19:96:15:0a:d7:ab:02:8b:82:20:58:a5: 40:9b:a5:44:e8:3c:aa:4c:8c:09:c6:94:1d:01:cb:4a:44:53: a4:be:1d:ec:39:05:cd:d5:e7:47:09:59:a8:46:93:db:5f:b4: 2e:30:e8:a9:b9:8d:d0:ff:ba:ef:33:82:da:18:db:07:e1:05: f3:db:12:e5:ea:cb:f5:e2:c1:a7:18:04:a1:be:95:94:de:f9: 42:6f:af:c6:c6:9f:4e:8f:6e:d8:1a:b6:49:45:8f:c0:38:e2: ee:90:97:06:ba:b1:2c:ea:a7:1c:68:57:10:48:1f:6d:05:ae: 79:f0:09:21:3c:96:04:ea:de:75:a2:95:05:e7:e5:fa:98:2a: ed:bf:a3:66:b5:e2:c1:b7:93:40:2a:4f:c1:bb:72:38:4c:da: 4e:00:08:16:e8:9d:c2:af:cc:cb:d9:48:bd:0e:db:1b:0f:02: c8:75:3e:87:8e:9a:46:ec:be:d1:12:e1:02:42:c2:b8:c5:1c: 49:95:ad:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn45iIwqzXgftPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTFkY2QxZjAtMzhlOS00OWE5LTk0NjItOTBkNjM4Mjk5NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRF/ysG9Q4RkL2VTSvkRsfh3DycVjePTJTDr U6sISsZ+EkV7S3/PCy+8pLRnN5aNNLnHB+552TvNHZqZHfveA3mNWyUYY3jAFDwH ZC4/LALAxt5LW/kl61oQ21hJIEudKYrv1ZGKtGXeXSNvE0rplwRzInhkhMXoIX+y vQiNaFxtL/tIeBE+ObCmxHTiUWvfF2ishKs5itUOidf3QAsauVWjaPFKGhCEJ24m Dl7lZcArv7xb4f9FNy+3/Yg7bqqcaFqKvbhsrj2zgjLw7HYgaTTb+CiULDdt1RAw SCCvM00bKzF3foaHp6CQXb/QezVihPY0alz9KFp2hdoewNHvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNpEql7eddw/VwL7f9QEK8JQvV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRiMWI4NTctNDdhMC0z OWIyLWE4NTctMDdmNjM4MTEwZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhSlkfkOc/yzvQBqRzoI+Ya4umy2wzn7pWxVrMdX3CLENSkyWfblKz8 82R5Q4CYHBc50TSvWKSUW1zzvxmWFQrXqwKLgiBYpUCbpUToPKpMjAnGlB0By0pE U6S+Hew5Bc3V50cJWahGk9tftC4w6Km5jdD/uu8zgtoY2wfhBfPbEuXqy/XiwacY BKG+lZTe+UJvr8bGn06PbtgatklFj8A44u6Qlwa6sSzqpxxoVxBIH20FrnnwCSE8 lgTq3nWilQXn5fqYKu2/o2a14sG3k0AqT8G7cjhM2k4ACBboncKvzMvZSL0O2xsP Ash1PoeOmkbsvtES4QJCwrjFHEmVrdo= -----END CERTIFICATE-----Generated at Mon Sep 28 10:23:47 2026 by rpki-client