$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa File: d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa (raw, json) Hash identifier: k191I3GKSa98Z4LutQ836E30RGNNJH6wPCGjhqSBMJA= Subject key identifier: AC:A2:82:55:4B:22:28:34:FE:63:B4:7A:A7:58:75:4A:DF:CB:1D:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497EA484CB59B8C8605E7D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12008 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:a4:84:cb:59:b8:c8:60:5e:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f2ebf91-3d11-495f-b840-e1afd8cb40db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:26:4b:9e:7d:2e:75:5c:73:48:c1:bf:48: 1e:b5:39:17:cb:81:a9:40:de:41:0e:ca:be:5b:c7: 66:e9:7d:73:3d:fa:2b:00:ed:94:ad:8e:6f:26:79: cb:88:9e:4b:8c:6c:fc:66:68:a3:3b:dd:73:4c:ff: 72:08:89:69:bb:f5:70:db:79:f4:17:79:e8:98:15: ee:c0:f1:92:d7:fd:4f:49:c6:b4:5b:cc:41:6e:50: 6c:89:d1:6a:ca:c2:45:bb:fd:32:9d:ba:a5:00:ec: 5d:24:65:f6:a2:84:79:85:3c:67:c2:99:3e:87:6d: b7:16:07:53:00:4f:67:51:95:12:ba:ad:60:16:cb: 6f:9a:d0:a6:5f:a8:e7:bf:d6:1c:e3:02:9b:87:17: fc:19:08:3a:25:da:76:36:68:57:f3:1b:cc:2a:49: 6f:5c:27:a4:89:79:6a:75:24:fc:48:de:ce:38:3a: 33:de:ff:04:66:10:3a:26:80:18:6d:2d:3c:fe:a2: 00:5a:b1:8d:d6:96:da:87:5e:0a:b1:06:9b:d9:eb: db:30:40:12:e7:88:18:ea:01:1d:89:cc:4e:06:4a: 3c:9e:5e:3e:9e:af:d0:6a:59:2e:96:fe:42:0f:d1: 88:57:f3:9a:bd:0c:7d:32:cb:87:f3:4b:f0:c8:40: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A2:82:55:4B:22:28:34:FE:63:B4:7A:A7:58:75:4A:DF:CB:1D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:aa:fb:ed:38:f1:fc:74:a1:dc:2e:5f:bc:9d:4a:f6:3a:7d: 41:4e:92:24:17:52:74:13:f9:e8:69:ad:33:c4:21:48:86:6c: 7f:2a:84:15:2c:51:a4:79:ef:6d:d1:25:6f:7b:57:3a:72:4c: 88:c2:04:d2:e8:b1:21:77:b5:bc:7d:79:5d:11:f9:73:17:d6: 80:e7:5a:c3:9e:e2:f6:27:ff:27:3b:cb:03:69:4a:20:27:55: eb:f2:3e:85:4c:12:e9:84:87:c5:56:c8:5c:6d:a8:8a:d4:aa: 54:a1:9e:0a:40:08:45:cc:cc:b9:dd:e2:32:b3:68:37:90:27: a7:c7:26:8e:dd:90:ba:ed:05:1a:08:c4:4e:ac:74:08:51:1f: 50:41:9c:8e:8e:5d:a3:50:9c:e9:f8:93:c1:f8:5c:ee:99:2c: b4:e6:a9:a9:88:b8:03:ef:19:40:0e:21:44:8d:14:1f:fb:51: 4e:06:d1:ae:0f:e1:0d:ac:a3:01:cb:9b:af:e5:e5:d6:13:97: d9:68:dc:d9:c8:3e:4c:02:15:aa:e8:d1:e7:5b:9f:4f:ce:7e: b2:b6:db:9a:5b:5e:ce:2f:52:b9:bf:a5:7c:d6:80:80:57:e5: 88:4f:c6:f9:77:72:9e:64:3e:c7:ce:be:f6:f1:f1:20:97:83: 8c:c4:ed:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfqSEy1m4yGBefQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGYyZWJmOTEtM2QxMS00OTVmLWI4NDAtZTFhZmQ4Y2I0MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztwmS559LnVcc0jBv0getTkXy4GpQN5BDsq+ W8dm6X1zPforAO2UrY5vJnnLiJ5LjGz8ZmijO91zTP9yCIlpu/Vw23n0F3nomBXu wPGS1/1PSca0W8xBblBsidFqysJFu/0ynbqlAOxdJGX2ooR5hTxnwpk+h223FgdT AE9nUZUSuq1gFstvmtCmX6jnv9Yc4wKbhxf8GQg6Jdp2NmhX8xvMKklvXCekiXlq dST8SN7OODoz3v8EZhA6JoAYbS08/qIAWrGN1pbah14KsQab2evbMEAS54gY6gEd icxOBko8nl4+nq/Qalkulv5CD9GIV/OavQx9MsuH80vwyEAZLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyiglVLIig0/mO0eqdYdUrfyx2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDhlYmNhYWYtM2VhNy0z Nzg0LThkZWQtZjllNjgzNTc0ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmq++048fx0odwuX7ydSvY6fUFOkiQXUnQT+ehprTPEIUiGbH8qhBUs UaR5723RJW97VzpyTIjCBNLosSF3tbx9eV0R+XMX1oDnWsOe4vYn/yc7ywNpSiAn VevyPoVMEumEh8VWyFxtqIrUqlShngpACEXMzLnd4jKzaDeQJ6fHJo7dkLrtBRoI xE6sdAhRH1BBnI6OXaNQnOn4k8H4XO6ZLLTmqamIuAPvGUAOIUSNFB/7UU4G0a4P 4Q2sowHLm6/l5dYTl9lo3NnIPkwCFaro0edbn0/OfrK225pbXs4vUrm/pXzWgIBX 5YhPxvl3cp5kPsfOvvbx8SCXg4zE7QY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:33:00 2026 by rpki-client