$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa File: d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa (raw, json) Hash identifier: Cp7RPhh+bx9TbbfvKLrCDphbvnzBwR40cpYDgYvbQHk= Subject key identifier: 8A:37:EB:53:98:86:59:FE:E7:4A:B9:C0:39:D4:79:A9:C3:DB:F3:D4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DC43CBC2E247177282680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397218 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:c4:3c:bc:2e:24:71:77:28:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dfd0ca75-f453-4099-a00c-bed47f38375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d7:3e:02:0a:fd:6a:53:a1:d2:b6:13:00:78: d4:82:33:bb:db:b6:53:09:32:c9:d5:34:77:45:9f: 85:74:55:9a:6d:67:65:a6:68:31:d1:94:1f:29:37: 3e:d5:71:f7:1e:d9:37:82:a8:fb:9e:4c:c4:9e:36: f9:39:03:4a:f5:43:34:78:37:9b:04:00:3f:da:70: 3f:5c:cb:ee:c6:83:00:b2:9b:df:87:39:3d:7f:8a: a9:72:e7:96:85:5c:67:ca:1f:d4:81:f9:9b:fc:c0: 6a:02:82:7c:84:bd:ba:fb:1c:8b:21:f2:df:50:eb: 62:d8:49:0f:7d:b5:24:7c:d5:8b:df:a0:4b:f5:e1: ee:5e:8c:5a:93:94:65:d9:01:4d:46:8d:6f:68:76: 58:01:1d:48:37:b8:33:0e:b3:1e:1e:82:21:26:30: 66:5d:03:2a:f2:7a:55:4a:c7:72:32:46:44:ee:ca: 87:71:78:22:e2:e2:54:ac:13:f9:d5:75:89:8e:30: 71:44:09:9c:60:71:11:fc:6c:b5:18:a3:be:8d:f4: d6:a9:2a:56:96:f6:a4:00:81:d4:2e:17:cb:6b:f5: a8:d8:2e:7b:13:6c:5b:44:2d:a5:c4:53:63:22:95: 6d:cd:ca:ca:a3:0b:84:e4:7a:ed:c1:53:db:6a:9b: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:EB:53:98:86:59:FE:E7:4A:B9:C0:39:D4:79:A9:C3:DB:F3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:50:50:8a:20:48:36:54:a4:34:4c:14:d8:56:a9:90:f9:b4: b8:91:33:10:cc:cc:5d:88:8e:7d:32:b9:84:d0:8d:d0:44:f6: ee:14:35:bf:42:a9:8f:55:08:db:72:e2:bb:f1:8e:22:61:62: e7:e5:12:79:49:28:0b:ff:9f:17:9e:6f:d3:dc:68:5d:1c:9f: 32:ee:68:e7:6a:ff:99:18:3f:2a:d1:bc:82:1e:89:a7:34:25: a5:9e:0d:62:68:3d:2f:98:be:9a:f8:5a:e8:10:74:11:b4:3d: 53:88:dd:81:9e:52:00:21:12:ba:99:c5:38:98:ad:03:55:ee: 61:8e:00:93:a2:f8:5a:71:7a:86:5f:2b:79:c3:3f:23:6f:43: 39:23:b3:a8:55:f2:27:1d:41:bf:a4:98:ef:d1:d0:bd:4d:f7: 8c:16:55:ef:a5:e5:7d:57:55:60:1c:2b:f2:f0:fa:e5:a0:30: b6:c2:7b:9a:34:95:44:98:35:91:8c:6a:7d:a4:7c:ba:c2:a7: 6e:e9:95:75:68:4f:18:b0:d1:30:fa:b9:54:af:06:f5:bb:8d: 6a:1d:d5:01:e1:f8:83:8a:1b:51:81:6e:72:d4:61:4b:9f:dc: 1e:80:0f:c4:0e:cd:16:e3:08:25:5c:5f:f0:9c:a7:59:6e:cf: a4:dc:12:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfcQ8vC4kcXcoJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZkMGNhNzUtZjQ1My00MDk5LWEwMGMtYmVkNDdmMzgzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tc+Agr9alOh0rYTAHjUgjO727ZTCTLJ1TR3 RZ+FdFWabWdlpmgx0ZQfKTc+1XH3Htk3gqj7nkzEnjb5OQNK9UM0eDebBAA/2nA/ XMvuxoMAspvfhzk9f4qpcueWhVxnyh/Ugfmb/MBqAoJ8hL26+xyLIfLfUOti2EkP fbUkfNWL36BL9eHuXoxak5Rl2QFNRo1vaHZYAR1IN7gzDrMeHoIhJjBmXQMq8npV SsdyMkZE7sqHcXgi4uJUrBP51XWJjjBxRAmcYHER/Gy1GKO+jfTWqSpWlvakAIHU LhfLa/Wo2C57E2xbRC2lxFNjIpVtzcrKowuE5HrtwVPbapsGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo361OYhln+50q5wDnUeanD2/PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRjZGE5ZDctNzlmNS0z Nzg4LWE4YmUtNTBkM2RkZTljMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBQUIogSDZUpDRMFNhWqZD5tLiRMxDMzF2Ijn0yuYTQjdBE9u4UNb9C qY9VCNty4rvxjiJhYuflEnlJKAv/nxeeb9PcaF0cnzLuaOdq/5kYPyrRvIIeiac0 JaWeDWJoPS+Yvpr4WugQdBG0PVOI3YGeUgAhErqZxTiYrQNV7mGOAJOi+FpxeoZf K3nDPyNvQzkjs6hV8icdQb+kmO/R0L1N94wWVe+l5X1XVWAcK/Lw+uWgMLbCe5o0 lUSYNZGMan2kfLrCp27plXVoTxiw0TD6uVSvBvW7jWod1QHh+IOKG1GBbnLUYUuf 3B6AD8QOzRbjCCVcX/Ccp1luz6TcEoA= -----END CERTIFICATE-----Generated at Wed Sep 30 00:20:13 2026 by rpki-client