$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json) Hash identifier: sHK32oQ8vrcI5RHl5LU8oP2yBOsh7msjSuby27eUZXI= Subject key identifier: BF:48:4B:ED:DA:E4:AC:1E:79:1A:D6:43:82:F7:D5:CD:AC:9E:F3:00 Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Certificate serial: 010D0C9F4328584F348277078B88E8206DBE4080 Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 395497 IP address blocks: 23.166.152.0/24 maxlen: 32 2602:f9d6::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:77:07:8b:88:e8:20:6d:be:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=d3dba638-99cb-4851-82e8-0a2d4efd25c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:94:db:c5:0d:3a:c9:8b:12:90:95:00:29: a5:40:7d:24:2d:dc:6d:24:24:77:57:98:a5:d3:f3: cf:41:48:f8:b0:0d:6e:c2:5b:3b:56:8e:f4:4c:69: 2d:8a:98:48:e9:5c:c0:75:17:81:51:1c:88:93:cd: b1:03:64:ff:96:b4:d8:51:76:a6:02:63:e4:61:df: fd:b6:ec:f7:78:3d:7f:8d:3f:27:00:44:5d:dd:39: 15:78:6e:1f:f6:81:4b:36:55:3e:86:a0:1b:8d:63: ab:0c:8e:9f:ec:75:c6:1d:b0:7c:c1:c8:e5:65:47: 1b:08:ce:32:4e:33:29:18:93:5f:8c:0c:92:5d:47: 6c:cc:ce:ca:db:86:0e:70:a1:cd:49:1b:de:74:9c: be:48:15:a6:22:fa:71:46:98:4d:b1:2a:b7:cf:d5: 6a:aa:f1:e6:e2:fc:2a:05:97:76:34:ad:e5:c1:42: ef:0d:5c:4f:7c:77:92:b6:6e:ef:a6:06:7c:77:b0: 16:69:7d:1a:00:22:31:dd:0c:8a:9d:70:95:02:57: 5d:b2:66:ac:ac:04:cf:d5:10:02:d6:31:c4:ec:71: 58:4b:69:a2:1d:06:98:cc:34:58:af:81:48:1c:27: bb:77:7c:8f:10:d1:96:57:e4:ec:7e:a3:9e:18:54: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:4B:ED:DA:E4:AC:1E:79:1A:D6:43:82:F7:D5:CD:AC:9E:F3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl X509v3 Authority Key Identifier: keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.152.0/24 IPv6: 2602:f9d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ba:2d:a7:3c:7e:5c:25:ec:9a:25:bb:5c:2a:e6:8e:62:3c: 77:76:7d:db:cb:a1:7a:86:08:e8:66:12:81:61:b9:5b:11:25: 33:3f:01:69:99:5c:28:b1:17:e2:eb:e1:13:a8:9a:c9:38:0e: 40:a6:3b:0c:64:6e:0b:44:03:31:da:c4:77:af:a3:d6:78:cc: cf:56:3d:6c:95:06:8c:b4:da:60:6a:dc:2e:4a:ca:38:b6:24: 61:c9:da:06:4a:37:64:95:b3:fa:34:52:5a:b9:a5:e3:92:1a: 78:00:07:32:f2:d3:b4:fc:04:1b:ac:7f:3f:1f:86:c4:8d:1e: 3c:43:a3:fe:e9:58:ee:c7:85:9c:9f:a2:f0:87:ab:db:91:37: b8:6c:f2:c7:56:0f:fd:09:e1:11:11:87:76:dd:56:da:80:e4: 5c:61:5b:76:25:69:cd:c6:02:e4:28:64:71:43:0c:ae:c8:9a: ee:cd:73:6e:ae:52:b1:88:b0:b9:79:f5:6b:2c:55:5f:f9:24: cd:af:ed:3f:86:f8:ba:dc:ba:dc:61:50:37:3a:05:4e:00:ed: 8c:3f:8b:8b:6e:fa:7a:cb:1a:f3:18:a1:6d:69:6a:53:09:e5: ed:fd:ec:fd:4e:49:c2:df:36:58:fd:e9:43:94:f9:ad:65:26: a6:bd:c3:ad -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE80gncHi4joIG2+QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJiNjBmYTItOGMxZC00YTM4LWJkY2YtMTVmNTNmMjc2 YzVhMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDNkYmE2MzgtOTljYi00ODUxLTgyZTgtMGEyZDRlZmQyNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2U28UNOsmLEpCVACmlQH0kLdxtJCR3V5il 0/PPQUj4sA1uwls7Vo70TGktiphI6VzAdReBURyIk82xA2T/lrTYUXamAmPkYd/9 tuz3eD1/jT8nAERd3TkVeG4f9oFLNlU+hqAbjWOrDI6f7HXGHbB8wcjlZUcbCM4y TjMpGJNfjAySXUdszM7K24YOcKHNSRvedJy+SBWmIvpxRphNsSq3z9VqqvHm4vwq BZd2NK3lwULvDVxPfHeStm7vpgZ8d7AWaX0aACIx3QyKnXCVAlddsmasrATP1RAC 1jHE7HFYS2miHQaYzDRYr4FIHCe7d3yPENGWV+TsfqOeGFQw9wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL9IS+3a5KweeRrWQ4L31c2snvMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2 MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1M2YyNzZjNWEvOTg5ZDA0NDgtY2YwZC0z ZmRmLWE3ODItNjViZjg3NTQ2NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWJiNjBmYTItOGMxZC00YTM4LWJk Y2YtMTVmNTNmMjc2YzVhL2FiYjYwZmEyLThjMWQtNGEzOC1iZGNmLTE1ZjUzZjI3 NmM1YS5jcmwwHwYDVR0jBBgwFoAUEGXqQKCr/AYVNe7VUztpd59c24EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1 M2YyNzZjNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6aYMA4E AgACMAgDBgAmAvnWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3ui2nPH5cJeyaJbtcKuaOYjx3dn3by6F6 hgjoZhKBYblbESUzPwFpmVwosRfi6+ETqJrJOA5ApjsMZG4LRAMx2sR3r6PWeMzP Vj1slQaMtNpgatwuSso4tiRhydoGSjdklbP6NFJauaXjkhp4AAcy8tO0/AQbrH8/ H4bEjR48Q6P+6Vjux4Wcn6Lwh6vbkTe4bPLHVg/9CeEREYd23VbagORcYVt2JWnN xgLkKGRxQwyuyJruzXNurlKxiLC5efVrLFVf+STNr+0/hvi63LrcYVA3OgVOAO2M P4uLbvp6yxrzGKFtaWpTCeXt/ez9TknC3zZY/elDlPmtZSamvcOt -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:13 2026 by rpki-client