$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa File: 433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa (raw, json) Hash identifier: arflm5Y8a1Yy6yNvSZTnjymDulmOS1javmLDXVZQaHc= Subject key identifier: 79:3F:D0:6B:1E:73:3A:F2:3F:FA:37:DC:23:52:0F:83:8A:75:F2:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF71797AF68C564C51FDDA000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397228 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:97:af:68:c5:64:c5:1f:dd:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ef288e23-bd84-4631-94cc-5771497761dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:da:de:23:e4:97:f4:c2:7e:0e:31:7b:a4: 9f:28:de:92:83:9e:9c:bc:7d:10:fb:79:e9:4b:86: 02:2e:de:c7:67:d0:f3:13:cb:90:72:c8:36:3c:ce: c0:04:4a:ce:a7:26:a2:96:6c:d7:59:6f:45:18:60: 60:3c:41:94:17:5e:c4:3b:40:dd:d9:86:d8:55:eb: 46:b2:43:8a:40:7e:5d:63:dc:ff:b4:fc:f6:36:a8: 8e:90:85:aa:50:89:d1:ff:29:57:70:7b:75:f9:0b: 97:6b:da:a2:d8:b3:cf:88:4e:ed:5f:11:d4:66:c8: 41:7a:6d:39:52:1a:43:2d:ba:e6:5f:77:fd:c1:61: bc:0a:97:da:67:43:f6:fa:f2:d0:89:48:c1:54:de: c2:b1:71:c3:1d:32:c3:00:07:3d:a2:d9:6f:7c:6c: 1e:8e:bf:52:6e:4b:a4:6d:fe:38:2d:ce:7a:91:5f: 2a:22:86:0e:c0:28:2a:13:f9:4f:66:10:d5:10:9e: 30:f9:ec:04:79:6f:09:8c:78:03:a9:1e:2d:50:ec: 4c:77:57:57:ab:10:f5:13:09:9b:aa:fc:68:8f:4f: 4f:00:c3:6a:c6:cc:99:62:73:01:29:ab:e9:6d:1f: 90:38:70:d2:47:74:c4:26:39:9c:62:ad:3b:3d:13: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:D0:6B:1E:73:3A:F2:3F:FA:37:DC:23:52:0F:83:8A:75:F2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/433f79f2-8c8e-33d1-ab8c-cf828037bcb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a2:05:75:98:6a:62:bc:13:9a:d5:b6:1f:d5:9a:b9:67:ca: d3:ef:09:3d:01:4d:0b:99:b9:62:52:99:78:fd:b7:0f:cd:c9: 24:46:cf:9c:50:f0:32:39:62:3b:78:cf:f8:26:0b:7b:df:5f: c8:83:ae:6e:cd:32:69:d8:ff:27:28:64:dc:2c:37:10:0c:a0: d2:65:32:a7:94:29:25:18:36:86:af:df:73:27:41:34:44:8b: 9a:c5:cb:ec:ef:99:67:08:95:1f:08:78:94:da:55:e8:85:30: 70:17:e4:0c:da:b3:98:bc:56:bc:6e:9f:8d:38:36:a6:21:f2: 4b:37:00:a0:5e:62:ec:bb:ea:6d:b6:4c:23:19:7b:74:b0:58: 2a:b9:dc:d7:c7:a9:fc:24:8b:1b:6b:45:e5:85:18:04:55:21: 23:90:11:52:fd:88:4d:0f:3e:49:8e:80:aa:2e:d0:92:e6:23: a0:fc:b0:b5:f5:18:eb:f0:d0:b5:56:08:06:90:9f:04:43:e1: 02:9d:2a:88:e6:2e:a9:9b:d0:20:34:27:2e:db:c6:96:61:c9: c3:b2:78:21:a4:0b:95:36:9d:92:dc:64:43:2a:a2:7d:a7:b4: 41:31:17:9d:6a:0e:44:a0:96:9f:56:18:9f:91:fe:4a:1c:07: 6f:da:c9:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5evaMVkxR/doAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZWYyODhlMjMtYmQ4NC00NjMxLTk0Y2MtNTc3MTQ5Nzc2MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdTa3iPkl/TCfg4xe6SfKN6Sg56cvH0Q+3np S4YCLt7HZ9DzE8uQcsg2PM7ABErOpyailmzXWW9FGGBgPEGUF17EO0Dd2YbYVetG skOKQH5dY9z/tPz2NqiOkIWqUInR/ylXcHt1+QuXa9qi2LPPiE7tXxHUZshBem05 UhpDLbrmX3f9wWG8CpfaZ0P2+vLQiUjBVN7CsXHDHTLDAAc9otlvfGwejr9Sbkuk bf44Lc56kV8qIoYOwCgqE/lPZhDVEJ4w+ewEeW8JjHgDqR4tUOxMd1dXqxD1Ewmb qvxoj09PAMNqxsyZYnMBKavpbR+QOHDSR3TEJjmcYq07PRPRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk/0GseczryP/o33CNSD4OKdfK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDMzZjc5ZjItOGM4ZS0z M2QxLWFiOGMtY2Y4MjgwMzdiY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeiBXWYamK8E5rVth/VmrlnytPvCT0BTQuZuWJSmXj9tw/NySRGz5xQ 8DI5Yjt4z/gmC3vfX8iDrm7NMmnY/ycoZNwsNxAMoNJlMqeUKSUYNoav33MnQTRE i5rFy+zvmWcIlR8IeJTaVeiFMHAX5Azas5i8Vrxun404NqYh8ks3AKBeYuy76m22 TCMZe3SwWCq53NfHqfwkixtrReWFGARVISOQEVL9iE0PPkmOgKou0JLmI6D8sLX1 GOvw0LVWCAaQnwRD4QKdKojmLqmb0CA0Jy7bxpZhycOyeCGkC5U2nZLcZEMqon2n tEExF51qDkSglp9WGJ+R/kocB2/ayWc= -----END CERTIFICATE-----Generated at Tue Sep 22 21:59:19 2026 by rpki-client