$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa File: 64605441-5dec-3ca2-a5f0-25eebc94efcc.roa (raw, json) Hash identifier: PB9Os5/C2dGPTdgHOd2yzBemR+NgGKFa4jgb+tGnfiM= Subject key identifier: 20:A4:D9:3C:6D:64:CD:D3:03:ED:EB:7B:EE:48:2A:D0:46:68:C1:CD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F2EED1F74BE045896E7175BC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 397228 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1f:74:be:04:58:96:e7:17:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=1b310e6f-c652-4b10-88fa-e9db7e1ad7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:bc:b0:a9:4c:9a:b5:92:6e:ff:13:b3:82: bf:ee:33:f6:2e:31:e7:c5:70:3f:eb:c1:7e:e5:ce: 8a:76:d4:a6:63:8f:08:40:d8:cd:80:cb:00:19:63: a2:02:c0:2c:c3:d1:3e:31:ff:0e:05:97:ad:43:19: f6:7d:53:bd:7e:3e:75:33:79:e0:09:38:86:e7:46: b6:c5:d4:6b:41:53:cc:e2:60:61:11:50:ad:3d:f8: ba:74:eb:aa:d8:8b:02:ef:33:af:4e:66:39:97:fa: e7:75:ae:43:c6:03:c7:8b:50:68:e8:64:bf:6d:4f: f6:fc:9f:a5:4c:33:39:cd:ba:5d:e2:b8:d2:b5:a3: c9:1e:1c:dc:95:c3:7e:32:cb:2c:fb:ab:2f:37:bb: 84:86:d7:a7:8a:12:9d:1f:9c:5f:47:8d:ff:5f:ba: 83:d8:5c:67:48:59:b8:d7:d9:e8:ef:b1:bf:49:4a: bd:2f:8b:d2:04:7a:23:2f:22:51:1f:5d:de:66:67: 3c:60:0a:9f:7e:29:ce:c2:fb:f6:88:00:32:c0:dd: ab:5b:43:93:ca:5f:9e:f1:1f:40:01:e2:a0:f1:c8: 12:0b:ab:cf:5d:bf:a6:2d:bb:a1:ec:19:f6:6a:3c: 42:fb:71:3c:21:c4:05:28:72:45:49:64:ef:fb:a9: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:D9:3C:6D:64:CD:D3:03:ED:EB:7B:EE:48:2A:D0:46:68:C1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/64605441-5dec-3ca2-a5f0-25eebc94efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c6:64:a5:95:b5:96:5d:7e:d0:ae:da:da:4f:35:f0:da:7f: 12:a1:9f:39:a2:bd:47:27:c0:41:0d:0e:70:0c:76:66:d1:56: 88:cd:fc:c5:a6:b4:c9:d1:e2:92:55:13:83:97:ec:b6:47:c1: b0:35:85:2f:bb:9d:1a:d9:45:38:8e:02:bf:e9:bd:a1:49:5b: b6:88:9d:73:63:55:65:4f:d6:16:28:5c:2e:33:0c:d8:a4:80: 92:47:e2:e9:04:8c:77:6e:83:69:31:19:e3:3a:fe:84:62:4e: 3e:c5:b9:b1:f4:7e:8e:2c:de:18:3f:57:1b:05:2d:46:5b:e6: 2c:6a:fe:0c:43:81:6f:58:83:93:e5:df:1d:e3:e0:de:a3:b5: 27:6e:10:ac:09:b1:d7:6a:a8:83:a1:91:57:54:16:75:76:84: 56:48:b2:a8:6a:29:9a:ed:a1:0a:f8:02:e6:e6:40:51:b9:75: 8a:da:15:b4:7b:44:d1:05:78:17:19:2e:26:6c:b6:dd:cd:10: 62:34:f2:9d:c8:f3:a7:0f:78:92:e5:c5:f0:19:79:ce:86:6e: f5:dd:b6:64:9c:0f:f6:5a:2c:6e:24:93:70:b5:09:f8:35:64: c3:ba:00:2b:af:3b:d6:40:2f:96:14:71:86:28:0e:7b:42:87: 55:e3:68:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7R90vgRYlucXW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MWIzMTBlNmYtYzY1Mi00YjEwLTg4ZmEtZTlkYjdlMWFkN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m68sKlMmrWSbv8Ts4K/7jP2LjHnxXA/68F+ 5c6KdtSmY48IQNjNgMsAGWOiAsAsw9E+Mf8OBZetQxn2fVO9fj51M3ngCTiG50a2 xdRrQVPM4mBhEVCtPfi6dOuq2IsC7zOvTmY5l/rnda5DxgPHi1Bo6GS/bU/2/J+l TDM5zbpd4rjStaPJHhzclcN+Msss+6svN7uEhtenihKdH5xfR43/X7qD2FxnSFm4 19no77G/SUq9L4vSBHojLyJRH13eZmc8YAqffinOwvv2iAAywN2rW0OTyl+e8R9A AeKg8cgSC6vPXb+mLbuh7Bn2ajxC+3E8IcQFKHJFSWTv+6kBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCk2TxtZM3TA+3re+5IKtBGaMHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjQ2MDU0NDEtNWRlYy0z Y2EyLWE1ZjAtMjVlZWJjOTRlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDGZKWVtZZdftCu2tpPNfDafxKhnzmivUcnwEENDnAMdmbRVojN/MWm tMnR4pJVE4OX7LZHwbA1hS+7nRrZRTiOAr/pvaFJW7aInXNjVWVP1hYoXC4zDNik gJJH4ukEjHdug2kxGeM6/oRiTj7FubH0fo4s3hg/VxsFLUZb5ixq/gxDgW9Yg5Pl 3x3j4N6jtSduEKwJsddqqIOhkVdUFnV2hFZIsqhqKZrtoQr4AubmQFG5dYraFbR7 RNEFeBcZLiZstt3NEGI08p3I86cPeJLlxfAZec6GbvXdtmScD/ZaLG4kk3C1Cfg1 ZMO6ACuvO9ZAL5YUcYYoDntCh1XjaGc= -----END CERTIFICATE-----Generated at Tue Sep 22 19:43:59 2026 by rpki-client