$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3591c7d5-d12c-3165-a8ef-70142876c9e3.roa File: 3591c7d5-d12c-3165-a8ef-70142876c9e3.roa (raw, json) Hash identifier: RNXrWrpwARPgg6n4trTmc6o7rUKFyX5afhF1AUtssOU= Subject key identifier: 84:17:4D:55:03:64:FE:76:F3:CB:AD:27:07:9A:8B:26:C9:F5:A0:E3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F3FAD68382B667228189ACA20 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3591c7d5-d12c-3165-a8ef-70142876c9e3.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 397217 IP address blocks: 156.154.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:68:38:2b:66:72:28:18:9a:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=fa68cea6-e32a-415c-9e71-624bfc35d79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:02:6e:73:1a:b6:73:6f:63:50:5a:62:5e: 63:d7:77:e6:dc:21:ce:0d:82:20:7a:a6:62:0b:de: da:b0:88:b3:40:19:10:e9:5c:99:d0:5d:46:e0:05: 44:fa:d0:e9:64:00:13:2a:7f:de:b6:82:89:48:86: e4:4a:b5:5b:d3:30:96:ae:91:a3:ec:7f:52:8c:63: db:bd:3a:dd:0d:68:2a:69:fd:e8:98:d5:1f:44:3a: 0b:2d:33:a2:6c:64:17:14:25:1d:07:f2:f0:7d:6b: d0:c1:f2:2e:56:af:67:f9:7b:f2:63:5e:cd:6d:ee: b5:fe:0f:ee:98:f7:71:f8:77:33:4a:14:52:e1:fe: 31:c1:27:34:58:5f:7e:58:1d:ab:f4:06:d0:61:f3: d4:82:ec:00:68:38:57:fc:f6:e3:b9:78:d5:38:0b: db:99:1e:f7:b9:0d:c7:44:6a:34:67:11:64:7f:2f: 4d:94:84:43:a0:b0:8d:25:07:71:44:a4:28:42:72: 50:57:2a:e2:34:46:a3:2a:3c:84:14:db:f6:c7:5c: 21:48:bb:65:c2:99:ba:3e:fe:5d:ee:d9:39:63:dd: f8:27:2c:74:38:82:f5:d6:a2:0e:09:55:d6:cd:84: a7:1b:87:56:74:09:9b:2e:68:60:8c:05:44:b4:7e: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:4D:55:03:64:FE:76:F3:CB:AD:27:07:9A:8B:26:C9:F5:A0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3591c7d5-d12c-3165-a8ef-70142876c9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:36:4d:69:0b:24:93:fc:0e:e0:96:86:90:b3:b7:7c:3b:c5: 37:dd:dd:11:c9:b8:4f:50:18:c9:be:6f:13:8b:a2:c9:51:5e: bf:57:f8:eb:8f:8b:95:07:73:a5:a5:4d:5a:cd:9e:56:2c:9d: 01:03:7e:c4:b8:80:86:30:e4:ac:b6:9d:74:b8:a6:ee:d7:df: 39:25:35:31:b1:6d:ba:df:24:43:e6:34:1f:17:4d:93:e8:7d: 51:27:ea:49:d2:72:8b:98:8f:c6:5f:00:f9:86:ac:65:a8:47: 53:9a:8d:15:1f:d6:da:74:aa:45:0b:25:89:3a:56:c2:e5:10: bc:20:28:90:27:72:12:a8:ef:82:f0:49:b9:31:81:ac:33:53: a7:5c:71:d5:5e:52:a5:4f:e5:16:a1:cd:65:db:66:c0:8d:6e: b7:30:80:58:95:9c:ac:f2:26:21:6a:c2:8d:ad:78:57:6e:f7: 25:c8:da:5b:3e:5f:13:7a:db:a4:fe:b1:23:9e:a1:ac:20:eb: 78:3c:55:cb:27:bf:38:41:1b:dd:01:36:7c:8d:2a:42:10:99: f5:cc:d2:72:fd:7e:89:aa:1c:d4:08:dd:32:64:c5:91:56:b2: 2e:80:cb:cf:de:65:54:d8:2f:3a:81:7f:84:ac:38:b9:c4:9a: 87:db:c4:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rWg4K2ZyKBiayiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmE2OGNlYTYtZTMyYS00MTVjLTllNzEtNjI0YmZjMzVkNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGMCbnMatnNvY1BaYl5j13fm3CHODYIgeqZi C97asIizQBkQ6VyZ0F1G4AVE+tDpZAATKn/etoKJSIbkSrVb0zCWrpGj7H9SjGPb vTrdDWgqaf3omNUfRDoLLTOibGQXFCUdB/LwfWvQwfIuVq9n+XvyY17Nbe61/g/u mPdx+HczShRS4f4xwSc0WF9+WB2r9AbQYfPUguwAaDhX/PbjuXjVOAvbmR73uQ3H RGo0ZxFkfy9NlIRDoLCNJQdxRKQoQnJQVyriNEajKjyEFNv2x1whSLtlwpm6Pv5d 7tk5Y934Jyx0OIL11qIOCVXWzYSnG4dWdAmbLmhgjAVEtH4JRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQXTVUDZP5288utJweaiybJ9aDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzU5MWM3ZDUtZDEyYy0z MTY1LWE4ZWYtNzAxNDI4NzZjOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJppMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI2TWkLJJP8DuCWhpCzt3w7xTfd3RHJuE9QGMm+bxOLoslRXr9X+OuP i5UHc6WlTVrNnlYsnQEDfsS4gIYw5Ky2nXS4pu7X3zklNTGxbbrfJEPmNB8XTZPo fVEn6knScouYj8ZfAPmGrGWoR1OajRUf1tp0qkULJYk6VsLlELwgKJAnchKo74Lw SbkxgawzU6dccdVeUqVP5RahzWXbZsCNbrcwgFiVnKzyJiFqwo2teFdu9yXI2ls+ XxN626T+sSOeoawg63g8VcsnvzhBG90BNnyNKkIQmfXM0nL9fomqHNQI3TJkxZFW si6Ay8/eZVTYLzqBf4SsOLnEmofbxAI= -----END CERTIFICATE-----Generated at Tue Sep 22 20:41:01 2026 by rpki-client