$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa File: 06d422c5-14b5-351e-a679-38f447a8f768.roa (raw, json) Hash identifier: xgzDm3M1Jdz+w9WgbclcRSbkBoEltOU60Kho8gqg/dM= Subject key identifier: F8:2B:8F:21:42:06:1F:78:8B:9C:C1:25:C5:A0:C4:E8:1B:5D:36:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F6292D063F8833732BEBECB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 12008 IP address blocks: 156.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d0:63:f8:83:37:32:be:be:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8b39bc00-2f5b-46ad-bb21-1dcfce1fe323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:3b:ed:d2:ed:5f:7e:48:b9:c8:85:bc:c6: 80:a3:c7:6f:2b:7e:0e:64:5b:ed:6c:91:62:df:41: 31:e5:63:c9:ca:9a:39:74:02:bc:dc:c5:36:65:82: 26:52:98:ab:23:a8:2e:b0:cd:47:0b:6c:f6:76:0b: da:40:1b:04:06:08:66:dd:83:c0:51:41:f4:4a:dd: f7:f4:37:03:39:bb:01:da:5f:59:79:b7:d8:db:a7: 84:14:ed:a7:63:da:de:8c:be:6e:27:0f:cd:82:fe: 75:1e:77:2c:47:6d:8a:d6:d3:a1:1c:a3:6c:31:65: b4:15:71:a0:b0:9f:b2:49:38:7e:67:67:79:33:1a: 5e:21:08:7d:e2:0f:e1:2a:54:a4:f3:ce:29:5c:bf: de:0c:b7:8a:68:a0:78:1f:59:85:2a:1a:ac:53:14: b4:70:99:bc:fb:29:97:29:6d:82:76:25:38:2a:f3: 39:1a:f5:bd:b7:b3:b1:79:bc:98:a2:69:c8:01:9b: e8:4f:2d:7b:55:45:7e:bc:4f:31:5e:a0:a1:04:59: f3:c1:d0:09:f9:83:91:ce:8b:22:37:a3:70:87:03: e3:84:9e:e7:89:11:b6:33:02:4c:a3:e0:a7:fa:92: 52:30:c0:0f:f2:6a:4c:a6:51:4d:e5:89:48:f5:4f: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:8F:21:42:06:1F:78:8B:9C:C1:25:C5:A0:C4:E8:1B:5D:36:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:48:81:f2:82:ee:48:ca:35:c0:10:ef:5d:84:9a:da:ee:61: 13:48:b1:1f:dc:3d:1d:10:e4:7d:6f:f0:a1:96:31:02:57:f5: 3f:38:ae:9b:7d:7f:66:bd:a8:6d:15:7f:17:22:10:18:4e:7b: 44:f2:5f:e4:37:0f:22:85:05:9d:16:e4:1b:28:80:be:50:3c: 24:7e:9c:4b:3d:43:2b:f9:91:62:38:0c:99:8a:4c:76:35:b7: 25:0b:c9:2e:68:8f:c8:d4:bc:7f:5e:a7:c7:49:00:12:d0:e8: 4f:62:33:b4:e6:9b:e5:77:84:2e:61:66:4a:00:bd:a4:a1:12: bc:61:3e:ee:16:c8:6a:bc:67:6e:8f:c1:15:b5:35:ab:0f:c9: 98:5c:dc:ce:e9:99:c9:4c:96:26:06:ba:58:84:4e:ce:7a:5f: d2:1a:f1:b5:e9:85:c6:0b:ee:42:49:00:8b:9d:cc:e9:ca:98: 97:ee:f5:15:4c:39:a6:0c:ff:6a:a2:60:89:a3:56:69:6a:4f: 3c:43:21:73:a6:ae:11:29:44:27:d1:3f:53:60:9e:77:65:8f: 89:33:6b:c0:7b:0a:85:19:68:80:90:dc:7a:32:3c:b3:ab:9a: 98:44:d5:e3:fd:c4:7a:e9:51:34:30:9d:7b:08:4d:fe:6f:3b: ed:0a:4a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktBj+IM3Mr6+ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGIzOWJjMDAtMmY1Yi00NmFkLWJiMjEtMWRjZmNlMWZlMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtY77dLtX35IuciFvMaAo8dvK34OZFvtbJFi 30Ex5WPJypo5dAK83MU2ZYImUpirI6gusM1HC2z2dgvaQBsEBghm3YPAUUH0St33 9DcDObsB2l9ZebfY26eEFO2nY9rejL5uJw/Ngv51HncsR22K1tOhHKNsMWW0FXGg sJ+ySTh+Z2d5MxpeIQh94g/hKlSk884pXL/eDLeKaKB4H1mFKhqsUxS0cJm8+ymX KW2CdiU4KvM5GvW9t7OxebyYomnIAZvoTy17VUV+vE8xXqChBFnzwdAJ+YORzosi N6NwhwPjhJ7niRG2MwJMo+Cn+pJSMMAP8mpMplFN5YlI9U8j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgrjyFCBh94i5zBJcWgxOgbXTY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDZkNDIyYzUtMTRiNS0z NTFlLWE2NzktMzhmNDQ3YThmNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZIgfKC7kjKNcAQ712EmtruYRNIsR/cPR0Q5H1v8KGWMQJX9T84rpt9 f2a9qG0VfxciEBhOe0TyX+Q3DyKFBZ0W5BsogL5QPCR+nEs9Qyv5kWI4DJmKTHY1 tyULyS5oj8jUvH9ep8dJABLQ6E9iM7Tmm+V3hC5hZkoAvaShErxhPu4WyGq8Z26P wRW1NasPyZhc3M7pmclMliYGuliETs56X9Ia8bXphcYL7kJJAIudzOnKmJfu9RVM OaYM/2qiYImjVmlqTzxDIXOmrhEpRCfRP1Ngnndlj4kza8B7CoUZaICQ3HoyPLOr mphE1eP9xHrpUTQwnXsITf5vO+0KSg8= -----END CERTIFICATE-----Generated at Fri Oct 9 09:24:18 2026 by rpki-client