$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa File: 2d9da503-3a56-3a3e-8031-35310762665a.roa (raw, json) Hash identifier: NFROI6Zf4XTxYK5golE68IXEz9MI/1iAkfcYGe3hd7E= Subject key identifier: ED:95:F0:4D:F0:41:2D:CF:5F:91:83:7B:3F:CC:41:A3:2B:DC:A9:87 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7178C0AF1525AA563953600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397239 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:8c:0a:f1:52:5a:a5:63:95:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=1beafa9b-aa78-420b-8ca7-b1c1767cdeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:5b:e1:f5:d4:59:a4:cf:ee:c3:4d:86:2b: 2a:b4:f0:39:39:3f:72:ac:6d:5c:2d:d2:9a:1b:ac: d9:dd:c1:82:9c:85:9e:7e:15:53:6d:2c:48:97:65: 22:8e:61:eb:97:19:e7:56:99:de:76:fb:b6:fc:70: 0e:75:57:00:0e:96:46:b0:94:5b:8e:30:26:8f:4f: 10:6d:ed:81:a4:67:52:f7:4f:f6:e9:d9:e7:49:59: fb:48:13:96:53:db:0d:9c:6c:5f:b6:e3:d9:2f:e2: 34:9b:9c:b5:bc:4d:d3:dc:ca:0e:0a:e9:9c:97:f7: 77:92:31:af:bd:8b:07:3c:94:b2:47:6b:1c:d8:e9: 39:19:d5:7f:5f:f1:13:da:5f:41:67:37:ca:0c:4f: 56:46:9e:60:02:30:46:76:59:b9:6b:75:c4:c6:65: bf:c6:ab:0b:85:b5:fa:4c:87:aa:5c:19:07:b7:81: 7f:2d:12:2d:0d:07:80:72:d1:f1:d0:82:dd:ec:54: 33:0a:9d:92:23:da:96:d7:0a:86:a0:96:48:e8:86: d7:1a:6c:3d:c4:88:44:f3:b9:5e:81:a1:43:a2:4f: 82:d0:a9:21:e7:8f:9f:83:29:68:91:cd:ec:c3:89: 89:b1:4b:45:21:44:d1:2d:0e:fc:2f:63:8a:d9:a5: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:95:F0:4D:F0:41:2D:CF:5F:91:83:7B:3F:CC:41:A3:2B:DC:A9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3d:00:85:7b:3c:55:82:8c:61:38:d2:66:58:61:c1:dc:ad: 54:fc:7d:eb:fb:5f:a9:84:21:84:b3:da:54:cf:ee:57:7a:05: 70:c9:b4:7d:e6:f5:93:1a:b6:a9:be:8a:7e:20:06:03:a3:40: a5:24:fe:09:f5:36:b6:5b:3d:52:5b:cd:a5:42:a2:ed:30:c2: 4e:95:40:6c:15:d2:32:57:18:8e:1d:0b:3a:30:f6:0f:d0:93: 06:22:c7:29:90:37:b4:16:51:13:9e:3f:d8:6f:51:ee:bc:37: 35:a4:85:ef:86:0f:0f:6d:c7:f2:62:d1:65:21:a8:02:db:c6: 43:13:67:a2:f8:13:9d:35:a6:6c:ba:39:7f:f9:89:26:78:54: 64:4b:b4:b2:41:e0:ad:4d:5b:7d:d1:f1:39:67:4b:e0:20:91: 3d:66:0a:01:c0:45:95:b2:92:48:25:f5:f6:fb:4d:b3:24:b4: c1:23:38:80:92:79:77:4d:3a:c5:4d:f0:33:68:64:00:d8:38: 83:5f:bf:ca:63:16:1f:8d:61:e4:bb:10:d3:50:6e:bf:2e:f4: 78:92:a6:9b:e0:34:45:60:9f:22:38:06:c9:c1:b0:9a:8e:25: 88:98:8c:03:2f:52:a2:3b:da:2e:e7:a2:04:a0:10:cc:ac:e8: c2:05:90:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4wK8VJapWOVNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MWJlYWZhOWItYWE3OC00MjBiLThjYTctYjFjMTc2N2NkZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL9b4fXUWaTP7sNNhisqtPA5OT9yrG1cLdKa G6zZ3cGCnIWefhVTbSxIl2UijmHrlxnnVpnedvu2/HAOdVcADpZGsJRbjjAmj08Q be2BpGdS90/26dnnSVn7SBOWU9sNnGxftuPZL+I0m5y1vE3T3MoOCumcl/d3kjGv vYsHPJSyR2sc2Ok5GdV/X/ET2l9BZzfKDE9WRp5gAjBGdlm5a3XExmW/xqsLhbX6 TIeqXBkHt4F/LRItDQeActHx0ILd7FQzCp2SI9qW1wqGoJZI6IbXGmw9xIhE87le gaFDok+C0Kkh54+fgylokc3sw4mJsUtFIUTRLQ78L2OK2aV4TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2V8E3wQS3PX5GDez/MQaMr3KmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5ZGE1MDMtM2E1Ni0z YTNlLTgwMzEtMzUzMTA3NjI2NjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ9AIV7PFWCjGE40mZYYcHcrVT8fev7X6mEIYSz2lTP7ld6BXDJtH3m 9ZMatqm+in4gBgOjQKUk/gn1NrZbPVJbzaVCou0wwk6VQGwV0jJXGI4dCzow9g/Q kwYixymQN7QWUROeP9hvUe68NzWkhe+GDw9tx/Ji0WUhqALbxkMTZ6L4E501pmy6 OX/5iSZ4VGRLtLJB4K1NW33R8TlnS+AgkT1mCgHARZWykkgl9fb7TbMktMEjOICS eXdNOsVN8DNoZADYOINfv8pjFh+NYeS7ENNQbr8u9HiSppvgNEVgnyI4BsnBsJqO JYiYjAMvUqI72i7nogSgEMys6MIFkIQ= -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:46 2026 by rpki-client