$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa File: 23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa (raw, json) Hash identifier: VS42FRiX5UPzH3xIo1Tl0gK7Y+LwDw1Z50C3LLAMnR8= Subject key identifier: 4E:0E:A7:90:C3:63:3D:DE:F7:4F:08:36:E5:6F:36:55:1C:53:23:0F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178706ABB7FCBDCCEB1960 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397231 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:87:06:ab:b7:fc:bd:cc:eb:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=f3698976-09ea-42ac-b685-f3a4a9d29fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:2d:1b:6e:c5:05:f4:4d:87:e6:3a:73:5b: 09:2c:44:15:23:a0:8a:f7:a2:df:25:06:e9:6c:0e: 45:3a:f9:ae:74:1a:4e:c5:72:dc:2d:88:05:a3:ec: 5b:fe:68:b3:b2:fa:bd:47:0f:c6:73:f6:46:f4:90: 26:c9:4e:dd:8d:fc:50:15:33:8a:7b:15:a1:cf:7f: 3c:11:41:b5:1d:14:12:a6:8c:cb:4f:69:d7:fb:9d: 30:50:05:db:27:5c:38:08:b4:2e:da:b9:8a:5b:33: c2:98:90:fa:8b:56:e1:5b:22:a4:15:e9:c7:d3:c2: 97:34:2f:26:55:99:4a:b5:74:b2:60:06:c7:c9:e1: e2:32:10:e8:3b:1f:69:ac:35:a2:fd:12:01:ed:7a: f0:b3:48:c7:f2:f4:87:9c:f1:de:f8:11:70:4f:b5: 70:6d:83:1c:d5:54:a4:13:3a:59:5a:8a:3f:7d:67: 5e:48:7d:9e:b6:82:00:bc:19:a4:09:c3:39:75:c5: d6:09:0a:b6:e7:06:b1:95:9d:9b:9f:2e:47:5c:87: c7:60:b5:da:da:55:71:ff:5c:ac:86:67:ae:38:4c: 11:8e:9f:69:0b:17:c6:d3:cd:a1:0e:53:33:da:2e: 71:9a:01:3c:73:3a:ec:60:fd:0d:f0:13:87:33:c6: 5a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0E:A7:90:C3:63:3D:DE:F7:4F:08:36:E5:6F:36:55:1C:53:23:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/23a8b8f0-2ed7-311f-a05d-9cedbac88660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:87:0a:59:35:aa:b6:cf:d9:e2:9e:f6:71:66:23:b9:ca:5a: 1d:16:f1:0d:49:c1:30:ce:48:b6:01:8d:66:d3:d6:d2:9a:21: d1:f7:94:92:e7:a0:73:bb:0e:df:6e:e9:21:76:52:d8:f9:96: 11:da:08:13:e6:2c:a5:12:0b:9f:66:17:0f:19:26:a9:8c:b1: 51:62:bd:9a:47:19:cf:1f:dc:9b:54:81:df:14:30:51:61:3b: 04:09:c7:7c:bc:37:e9:2b:33:3f:4f:c4:b2:5a:1d:e8:80:4c: ef:9c:71:2b:6b:2d:e4:e7:aa:d9:41:a1:85:a6:09:83:13:2a: 57:cf:f5:85:92:3a:4b:4e:d2:9f:87:9f:a9:5f:52:a7:a0:db: 45:3b:40:ee:90:1f:52:fe:93:e2:59:0c:b1:30:6d:d4:e8:ec: af:aa:af:dd:4c:44:94:c5:f5:7d:27:ff:70:b6:f6:05:17:e5: 21:be:b6:3f:e3:00:23:9d:d4:e1:7a:f9:6c:73:e6:0d:db:86: a4:90:76:87:c4:d6:bd:66:92:b3:c2:68:d6:e2:c2:a2:0d:07: 8c:a4:0c:c0:1f:73:92:2c:3d:28:93:19:bd:af:92:86:53:c7: 22:4b:39:89:af:a9:3d:65:f1:e0:99:1f:a9:52:82:92:38:86: 55:28:53:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4cGq7f8vczrGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjM2OTg5NzYtMDllYS00MmFjLWI2ODUtZjNhNGE5ZDI5ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8gtG27FBfRNh+Y6c1sJLEQVI6CK96LfJQbp bA5FOvmudBpOxXLcLYgFo+xb/mizsvq9Rw/Gc/ZG9JAmyU7djfxQFTOKexWhz388 EUG1HRQSpozLT2nX+50wUAXbJ1w4CLQu2rmKWzPCmJD6i1bhWyKkFenH08KXNC8m VZlKtXSyYAbHyeHiMhDoOx9prDWi/RIB7Xrws0jH8vSHnPHe+BFwT7VwbYMc1VSk EzpZWoo/fWdeSH2etoIAvBmkCcM5dcXWCQq25waxlZ2bny5HXIfHYLXa2lVx/1ys hmeuOEwRjp9pCxfG082hDlMz2i5xmgE8czrsYP0N8BOHM8Za8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4Op5DDYz3e908INuVvNlUcUyMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjNhOGI4ZjAtMmVkNy0z MTFmLWEwNWQtOWNlZGJhYzg4NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeHClk1qrbP2eKe9nFmI7nKWh0W8Q1JwTDOSLYBjWbT1tKaIdH3lJLn oHO7Dt9u6SF2Utj5lhHaCBPmLKUSC59mFw8ZJqmMsVFivZpHGc8f3JtUgd8UMFFh OwQJx3y8N+krMz9PxLJaHeiATO+ccStrLeTnqtlBoYWmCYMTKlfP9YWSOktO0p+H n6lfUqeg20U7QO6QH1L+k+JZDLEwbdTo7K+qr91MRJTF9X0n/3C29gUX5SG+tj/j ACOd1OF6+Wxz5g3bhqSQdofE1r1mkrPCaNbiwqINB4ykDMAfc5IsPSiTGb2vkoZT xyJLOYmvqT1l8eCZH6lSgpI4hlUoU0w= -----END CERTIFICATE-----Generated at Tue Sep 22 16:50:59 2026 by rpki-client