$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa File: ff9e99f7-8bab-3800-8937-4159b66efd0c.roa (raw, json) Hash identifier: OWQ18BN7yeNeGE7Y35LpdyCDVrMXMkrhqSVwI2Lws6w= Subject key identifier: A2:7B:B4:F7:1D:EE:8F:24:A7:6F:58:7C:4B:EA:30:F0:40:B1:06:F0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E1AECB527A0146007DC40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397225 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:1a:ec:b5:27:a0:14:60:07:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21854d0c-04e0-45b8-994d-1a6a50a1f110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:77:bd:73:e1:4c:c4:10:d8:e9:9b:9a:e0: ae:61:91:5d:c7:c6:e7:18:79:d7:7c:04:ab:34:14: 25:8f:3e:46:d5:ef:e5:57:17:a8:f7:09:c8:56:ae: f6:35:3e:2e:fb:26:87:e9:d9:d2:02:06:61:2f:f1: f1:ba:5b:62:a6:6e:85:3e:c3:c7:b5:13:fa:25:43: 88:cc:76:e0:5c:6e:8a:0b:d5:dc:d3:fc:fb:57:c6: ad:56:61:85:8a:7e:90:df:4b:cf:63:c3:28:ac:31: e2:2a:c7:06:ba:61:b3:57:23:03:5e:b1:68:63:e5: 8d:ec:82:e9:68:05:1d:70:9a:4a:a0:da:4e:f7:a9: a6:b0:1d:fd:34:44:b9:06:5c:09:29:1b:68:a6:d9: 19:25:fb:31:93:17:9f:44:49:26:2a:3a:4e:9b:12: 03:b3:c6:ee:66:ea:64:7b:d7:7b:86:d3:dc:82:39: 01:8b:59:c9:85:5c:dc:e0:a8:b4:8f:ff:58:80:6c: 44:96:2b:9c:39:72:41:1d:2a:97:88:ae:56:d7:9e: 47:cf:41:cd:19:45:ef:86:c3:bf:4a:a6:e1:0b:01: 75:73:fb:6e:3a:1f:02:5b:4f:8e:ed:63:af:b5:0a: d8:03:13:56:7b:c9:43:59:dc:95:23:68:bd:02:37: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7B:B4:F7:1D:EE:8F:24:A7:6F:58:7C:4B:EA:30:F0:40:B1:06:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:97:7c:31:fb:22:83:3b:91:ee:aa:56:54:96:00:02:8a:3e: 05:94:6d:62:f7:87:77:da:da:fd:76:c3:e1:04:03:6a:4c:8d: 89:08:eb:4d:06:a9:5b:54:87:c1:ac:b4:ed:e1:2a:e8:a7:46: 24:71:c3:21:ad:e2:f0:1f:9b:15:4a:4a:14:72:27:58:df:50: eb:2d:4f:e4:e7:b2:62:17:71:a6:83:00:01:f9:c2:04:68:cf: a9:e2:c3:d4:36:c1:34:bc:6d:53:df:3e:f1:91:24:88:70:00: fe:05:ba:7f:24:87:54:ed:66:fe:99:60:5c:58:75:0f:6c:73: a9:72:98:72:b8:d3:53:ea:ff:90:8f:09:f3:f1:95:cd:cb:fa: 46:d7:84:cb:16:12:20:b5:53:9d:09:cb:80:c1:5c:39:7b:44: 4c:e1:5f:d4:ef:96:77:cc:d7:df:b9:d9:65:f9:bd:4f:d1:32: 7c:58:a5:09:06:91:b3:1e:19:32:a7:da:c6:4e:5d:f2:57:e9: b2:01:af:5b:ed:dc:7e:39:9b:1a:26:f3:c9:85:1f:b8:da:50: fe:30:89:4f:a5:de:80:ee:98:75:68:f8:2e:cc:1d:7c:e9:81: a3:2c:df:8f:5b:10:b3:60:c7:58:b7:f7:ed:7e:6c:7d:47:32: 40:c6:93:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfhrstSegFGAH3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjE4NTRkMGMtMDRlMC00NWI4LTk5NGQtMWE2YTUwYTFmMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+V3vXPhTMQQ2OmbmuCuYZFdx8bnGHnXfASr NBQljz5G1e/lVxeo9wnIVq72NT4u+yaH6dnSAgZhL/Hxultipm6FPsPHtRP6JUOI zHbgXG6KC9Xc0/z7V8atVmGFin6Q30vPY8MorDHiKscGumGzVyMDXrFoY+WN7ILp aAUdcJpKoNpO96mmsB39NES5BlwJKRtoptkZJfsxkxefREkmKjpOmxIDs8buZupk e9d7htPcgjkBi1nJhVzc4Ki0j/9YgGxEliucOXJBHSqXiK5W155Hz0HNGUXvhsO/ SqbhCwF1c/tuOh8CW0+O7WOvtQrYAxNWe8lDWdyVI2i9Ajd0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ7tPcd7o8kp29YfEvqMPBAsQbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmY5ZTk5ZjctOGJhYi0z ODAwLTg5MzctNDE1OWI2NmVmZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByXfDH7IoM7ke6qVlSWAAKKPgWUbWL3h3fa2v12w+EEA2pMjYkI600G qVtUh8GstO3hKuinRiRxwyGt4vAfmxVKShRyJ1jfUOstT+TnsmIXcaaDAAH5wgRo z6niw9Q2wTS8bVPfPvGRJIhwAP4Fun8kh1TtZv6ZYFxYdQ9sc6lymHK401Pq/5CP CfPxlc3L+kbXhMsWEiC1U50Jy4DBXDl7REzhX9TvlnfM19+52WX5vU/RMnxYpQkG kbMeGTKn2sZOXfJX6bIBr1vt3H45mxom88mFH7jaUP4wiU+l3oDumHVo+C7MHXzp gaMs349bELNgx1i39+1+bH1HMkDGk+E= -----END CERTIFICATE-----Generated at Sun Oct 4 21:41:54 2026 by rpki-client