$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f4201d5-a846-39b3-80d9-80509ad3cafa.roa File: 1f4201d5-a846-39b3-80d9-80509ad3cafa.roa (raw, json) Hash identifier: 2xZezTBET5hCUnsovOHR26Npb4dqh+7pCvFCuYVEfw8= Subject key identifier: 4D:40:FF:FF:C7:D3:34:A1:7A:F4:05:D3:5D:64:F3:1F:A1:D0:07:34 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F3FAD5AD61A04D9D1D009A460 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f4201d5-a846-39b3-80d9-80509ad3cafa.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 397220 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:5a:d6:1a:04:d9:d1:d0:09:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2a15436c-9bb3-4229-a0a1-7340cea10184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:17:a0:b7:05:df:d8:12:b5:e5:f8:46:17: 1a:72:7d:e4:05:30:a1:a2:ad:2e:6a:90:a5:2f:d5: 54:f2:0b:7b:34:e0:92:c5:af:83:d4:c6:7b:7a:ae: 35:7b:e0:b9:98:0b:9e:c0:84:18:99:84:cf:bc:e1: 75:a1:41:8c:66:30:7e:0c:a4:0d:2b:31:24:7a:55: ad:f3:04:f5:35:39:d4:53:42:81:65:90:39:7d:f9: 6c:54:55:ba:05:a9:7e:7f:72:f4:f6:bb:92:19:a5: e0:43:47:8e:da:b0:a2:2a:c3:15:0b:b9:7c:ea:ef: 17:e6:62:cb:ae:e2:ee:c6:f7:ae:ca:81:1c:6b:f4: 24:d2:f6:80:e4:c0:3f:96:1c:24:3b:31:ca:4b:13: 06:5e:a2:f3:62:25:df:1c:73:c0:bb:5d:0b:fc:b0: 48:e4:0a:bf:ce:44:78:71:1f:24:79:d3:d1:bb:cb: 0c:50:f1:a5:ca:5d:7a:96:28:d8:2b:cc:1d:c2:4b: 83:52:97:6e:c4:21:c4:0c:f8:23:b6:03:49:d8:7c: 17:8b:8a:6e:2f:28:4c:82:f1:37:0c:be:45:b8:38: 1e:00:f2:36:bd:42:d5:55:a7:f3:6c:b9:36:e0:b4: db:11:2f:f2:10:7b:26:cb:f9:60:94:8d:69:b9:c0: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:40:FF:FF:C7:D3:34:A1:7A:F4:05:D3:5D:64:F3:1F:A1:D0:07:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f4201d5-a846-39b3-80d9-80509ad3cafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f8:51:cd:b2:0c:56:d1:fe:fc:ca:03:9e:82:dd:99:a3:f3: 49:c7:95:8d:ee:4f:e9:17:f5:6d:41:b0:8a:a5:d6:fa:b3:ec: 2d:e2:80:09:d4:34:a4:c8:86:67:ef:4f:bc:47:c1:56:e4:c5: 91:df:f9:a5:3f:69:c4:90:46:19:be:3c:63:46:03:65:9f:13: 86:ba:88:f1:e2:87:47:d5:ef:7d:b7:39:3e:b5:13:a2:38:13: 36:7d:f8:36:24:2d:19:99:b5:bf:9e:15:03:cf:96:8f:6c:2b: 71:11:c6:01:e9:13:5f:e8:4d:09:0f:cd:68:24:18:dd:8c:ea: 24:80:23:15:fe:04:01:6c:9b:c6:b1:73:7a:fe:ae:91:55:b9: 38:6c:52:25:7b:bf:4e:c2:af:96:22:11:66:bb:04:bf:59:36: 70:59:3e:3f:dd:1f:3e:b6:0b:34:93:1a:64:05:e7:df:f8:a1: 47:22:64:03:03:dd:a1:33:07:8f:a3:b7:f6:97:6a:f9:65:f5: f8:18:64:cb:73:4e:86:54:3f:ae:d5:00:69:6a:86:e7:89:ab: c9:58:d8:52:c9:54:a1:d3:df:53:75:0c:cf:58:bc:1b:5b:63: f3:5c:a3:5a:bd:05:cf:34:fc:c3:a6:12:c8:1b:e6:f7:3c:38: 6d:e2:82:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rVrWGgTZ0dAJpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MmExNTQzNmMtOWJiMy00MjI5LWEwYTEtNzM0MGNlYTEwMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQoXoLcF39gSteX4Rhcacn3kBTChoq0uapCl L9VU8gt7NOCSxa+D1MZ7eq41e+C5mAuewIQYmYTPvOF1oUGMZjB+DKQNKzEkelWt 8wT1NTnUU0KBZZA5fflsVFW6Bal+f3L09ruSGaXgQ0eO2rCiKsMVC7l86u8X5mLL ruLuxveuyoEca/Qk0vaA5MA/lhwkOzHKSxMGXqLzYiXfHHPAu10L/LBI5Aq/zkR4 cR8kedPRu8sMUPGlyl16lijYK8wdwkuDUpduxCHEDPgjtgNJ2HwXi4puLyhMgvE3 DL5FuDgeAPI2vULVVafzbLk24LTbES/yEHsmy/lglI1pucBvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1A///H0zShevQF011k8x+h0Ac0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWY0MjAxZDUtYTg0Ni0z OWIzLTgwZDktODA1MDlhZDNjYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP4Uc2yDFbR/vzKA56C3Zmj80nHlY3uT+kX9W1BsIql1vqz7C3igAnU NKTIhmfvT7xHwVbkxZHf+aU/acSQRhm+PGNGA2WfE4a6iPHih0fV7323OT61E6I4 EzZ9+DYkLRmZtb+eFQPPlo9sK3ERxgHpE1/oTQkPzWgkGN2M6iSAIxX+BAFsm8ax c3r+rpFVuThsUiV7v07Cr5YiEWa7BL9ZNnBZPj/dHz62CzSTGmQF59/4oUciZAMD 3aEzB4+jt/aXavll9fgYZMtzToZUP67VAGlqhueJq8lY2FLJVKHT31N1DM9YvBtb Y/Nco1q9Bc80/MOmEsgb5vc8OG3igks= -----END CERTIFICATE-----Generated at Sun Sep 27 05:33:41 2026 by rpki-client