$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa File: 3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa (raw, json) Hash identifier: p7JIOZ/eKtxo3GKa5nR49HN1e2Bazx2VMtcc5qd2YPc= Subject key identifier: 83:BB:20:63:47:5A:CF:5A:CE:E1:55:DE:E8:DF:25:45:3B:34:9F:A6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497EC0177F7AA0FADEAC4A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397236 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:c0:17:7f:7a:a0:fa:de:ac:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4c5267e-8f3c-4676-a141-559ee11e941d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:8a:8e:a6:32:48:4b:f0:64:bc:eb:4f:22: ab:31:19:04:ca:15:f0:3f:f5:7a:5c:ab:54:5e:60: 6d:fa:8d:95:79:57:5c:0b:c8:9e:e3:80:18:99:7d: 41:28:5d:6d:65:63:df:36:fb:58:fe:84:e6:fa:c3: 35:07:4b:38:b0:83:13:ed:7d:fb:4c:2c:2e:57:48: dc:69:9c:51:ec:32:48:91:e8:42:5a:e5:ac:95:80: 0a:bd:a7:e0:8a:87:4d:63:93:22:e4:01:33:65:f8: 62:75:a4:af:6b:5c:2c:f5:db:fb:22:78:4f:8b:b7: 56:bf:17:2d:76:e1:c2:fc:cc:9b:7b:56:e0:b5:52: 29:01:be:68:25:44:e7:d5:1b:8c:f9:2a:3b:e1:98: 31:40:d6:4c:a2:35:a8:f3:23:8a:14:e2:df:12:43: 07:47:25:bf:7e:26:b9:74:4d:77:7c:01:b4:e9:96: 85:cd:3f:d4:38:2d:85:71:a4:a8:1b:05:3c:66:5f: 10:ad:35:bd:c0:f4:8b:91:72:2e:ac:79:cb:34:58: f4:33:c6:fb:4e:80:10:17:1e:62:b4:00:9a:98:40: 11:a3:61:42:49:0f:2a:c0:94:f8:31:70:b0:e8:94: 4c:79:69:ea:b2:e8:81:65:02:da:af:45:53:c1:dc: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BB:20:63:47:5A:CF:5A:CE:E1:55:DE:E8:DF:25:45:3B:34:9F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c0:23:4f:86:31:1e:42:70:f3:e9:4d:25:14:0d:8e:6c:27: d7:9c:2b:74:ff:59:13:c4:a3:57:76:e4:27:38:18:15:9a:75: 3f:97:16:a7:b4:19:b3:da:9c:2e:a4:a0:68:a5:ae:f9:8b:0c: a6:98:34:69:58:c6:1c:69:93:35:1f:f6:96:cd:f0:9a:10:c5: 94:fa:c0:b4:5b:37:d9:bb:02:de:7c:0c:6c:b7:0e:7d:90:44: 88:c4:18:e8:60:e3:d0:09:27:56:bf:6e:14:4b:26:c9:70:52: 20:16:70:1e:e3:17:28:ff:f7:b1:15:fb:40:7a:76:3e:01:22: 0e:58:48:67:9e:d8:c2:80:68:40:83:56:a5:3a:30:72:62:51: 5b:d9:10:49:cb:ec:8d:07:78:b8:32:52:7e:93:81:10:e8:05: 83:c5:16:12:c6:ff:31:22:ae:67:e8:9b:c3:36:21:82:af:56: 20:4d:c1:58:c1:56:b0:87:50:f4:70:67:b4:db:79:08:dd:90: ee:99:03:6c:8d:ef:3c:90:9e:d8:9f:a3:4f:34:d0:72:18:9a: b1:88:98:b1:12:8c:dc:ef:47:3a:36:14:e8:5a:14:dd:9e:51: 9d:0f:98:87:f5:5c:29:77:ea:5c:98:1e:40:74:20:31:9e:68: d7:dd:df:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfsAXf3qg+t6sSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRjNTI2N2UtOGYzYy00Njc2LWExNDEtNTU5ZWUxMWU5NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3uKjqYySEvwZLzrTyKrMRkEyhXwP/V6XKtU XmBt+o2VeVdcC8ie44AYmX1BKF1tZWPfNvtY/oTm+sM1B0s4sIMT7X37TCwuV0jc aZxR7DJIkehCWuWslYAKvafgiodNY5Mi5AEzZfhidaSva1ws9dv7InhPi7dWvxct duHC/Mybe1bgtVIpAb5oJUTn1RuM+So74ZgxQNZMojWo8yOKFOLfEkMHRyW/fia5 dE13fAG06ZaFzT/UOC2FcaSoGwU8Zl8QrTW9wPSLkXIurHnLNFj0M8b7ToAQFx5i tACamEARo2FCSQ8qwJT4MXCw6JRMeWnqsuiBZQLar0VTwdxYlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO7IGNHWs9azuFV3ujfJUU7NJ+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JiMDViMjMtNWZmOS0z MDA2LWJhYWQtZGVkM2E2ZTVjNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzAI0+GMR5CcPPpTSUUDY5sJ9ecK3T/WRPEo1d25Cc4GBWadT+XFqe0 GbPanC6koGilrvmLDKaYNGlYxhxpkzUf9pbN8JoQxZT6wLRbN9m7At58DGy3Dn2Q RIjEGOhg49AJJ1a/bhRLJslwUiAWcB7jFyj/97EV+0B6dj4BIg5YSGee2MKAaECD VqU6MHJiUVvZEEnL7I0HeLgyUn6TgRDoBYPFFhLG/zEirmfom8M2IYKvViBNwVjB VrCHUPRwZ7TbeQjdkO6ZA2yN7zyQntifo0800HIYmrGImLESjNzvRzo2FOhaFN2e UZ0PmIf1XCl36lyYHkB0IDGeaNfd3zc= -----END CERTIFICATE-----Generated at Wed Sep 30 20:51:54 2026 by rpki-client