$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa File: 667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa (raw, json) Hash identifier: avAq0ZZwypTCfqwZ+gBvFyH3OMthgdxxoCOcRNw25+k= Subject key identifier: 4F:A0:F7:34:C7:6C:52:C7:C4:35:AF:46:0A:12:1A:A0:1D:07:C9:1E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EA792A31EBFCBAB300A1D2980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397217 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:a3:1e:bf:cb:ab:30:0a:1d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4a7c1f1e-1608-4dbd-80f2-59ae777cd58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:68:5a:db:0c:ed:7f:8e:eb:f5:01:88:3d:1d: fb:d7:9f:7d:c3:2b:0a:8e:50:48:c2:fd:16:93:f5: f3:65:37:5a:e5:89:cf:44:b7:f8:e9:79:f2:ee:a2: a7:c7:69:8d:e4:39:07:27:cb:d1:43:9a:2e:bb:51: 3f:2c:19:48:fd:1d:57:ab:63:de:b2:ab:36:f2:04: 98:ad:d9:35:b6:c0:4c:d1:6f:74:b0:19:02:6d:c6: 66:5e:0b:8e:40:4b:2d:d4:09:ae:a0:c6:cc:04:28: 5b:e1:9b:c3:4b:4b:46:6e:c4:c9:16:8c:65:09:36: 40:46:70:a4:a8:56:a2:2d:a8:79:28:e8:87:c6:58: a2:07:3d:6c:03:5e:7c:1f:cc:83:9a:8c:15:3b:95: fd:35:7c:eb:71:5d:8a:fc:db:2e:77:29:49:f3:a4: c2:6e:26:77:6a:71:d5:50:71:03:73:dc:90:04:77: 6c:31:26:ee:2b:95:33:c8:49:30:b3:92:e9:0f:07: 9e:5f:00:c9:22:d2:74:3b:ef:d0:18:e6:22:2d:a0: 49:c9:be:6e:aa:72:ab:27:06:9f:31:31:69:17:f5: 01:89:c2:46:f9:19:64:04:9d:06:f7:c2:4c:97:8c: 60:e6:00:8c:c0:03:dc:80:09:12:45:ef:a4:bc:5b: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:F7:34:C7:6C:52:C7:C4:35:AF:46:0A:12:1A:A0:1D:07:C9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c5:03:ea:8d:84:11:ba:52:6f:27:f1:94:f6:f2:40:60:6b: 2b:37:de:a1:a9:3d:c1:be:8d:8a:9e:94:61:11:5f:2d:84:70: 79:8f:2e:16:37:ee:93:39:68:c4:25:1e:ae:77:d8:26:1b:ba: ef:c6:9a:6b:1c:44:04:1d:27:b7:6d:03:c3:ca:b3:da:b0:d8: 8e:2b:04:d7:8b:9d:91:f5:e8:eb:2d:d1:7c:b2:d6:5c:e9:cb: 86:3f:48:e0:9d:0b:50:3a:57:69:3b:0f:16:02:38:b1:ec:44: 10:00:91:59:f3:01:28:5b:db:db:1f:97:9d:6b:34:78:a1:fd: 1c:10:03:b8:10:f7:1b:5c:3b:78:b9:3e:50:dd:d4:10:d9:38: 39:f7:39:f6:df:19:d5:54:41:27:54:7e:a1:c2:8c:30:0e:fc: 8b:4a:c5:48:a4:db:7a:e7:12:44:96:56:38:37:11:1d:67:13: 16:e3:91:3e:3e:3a:b7:4f:d0:c2:7f:b9:36:d6:74:4b:36:cd: a6:c8:80:6f:9a:a7:eb:06:e1:af:5e:1f:15:1a:30:c4:98:41: 47:67:8f:47:86:e1:10:a0:d1:ab:f3:f1:03:d4:4d:16:58:ea: 9e:42:f8:d8:10:47:8b:d5:db:f2:a8:d1:15:ca:13:92:7c:58: 52:eb:9e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkqMev8urMAodKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGE3YzFmMWUtMTYwOC00ZGJkLTgwZjItNTlhZTc3N2NkNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimha2wztf47r9QGIPR371599wysKjlBIwv0W k/XzZTda5YnPRLf46Xny7qKnx2mN5DkHJ8vRQ5ouu1E/LBlI/R1Xq2Pesqs28gSY rdk1tsBM0W90sBkCbcZmXguOQEst1AmuoMbMBChb4ZvDS0tGbsTJFoxlCTZARnCk qFaiLah5KOiHxliiBz1sA158H8yDmowVO5X9NXzrcV2K/NsudylJ86TCbiZ3anHV UHEDc9yQBHdsMSbuK5UzyEkws5LpDweeXwDJItJ0O+/QGOYiLaBJyb5uqnKrJwaf MTFpF/UBicJG+RlkBJ0G98JMl4xg5gCMwAPcgAkSRe+kvFtKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+g9zTHbFLHxDWvRgoSGqAdB8keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjY3YWJlMGMtYjM5ZC0z ZjI2LWE1ZTgtNjA2MWI1ZDA3ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDFA+qNhBG6Um8n8ZT28kBgays33qGpPcG+jYqelGERXy2EcHmPLhY3 7pM5aMQlHq532CYbuu/GmmscRAQdJ7dtA8PKs9qw2I4rBNeLnZH16Ost0Xyy1lzp y4Y/SOCdC1A6V2k7DxYCOLHsRBAAkVnzAShb29sfl51rNHih/RwQA7gQ9xtcO3i5 PlDd1BDZODn3OfbfGdVUQSdUfqHCjDAO/ItKxUik23rnEkSWVjg3ER1nExbjkT4+ OrdP0MJ/uTbWdEs2zabIgG+ap+sG4a9eHxUaMMSYQUdnj0eG4RCg0avz8QPUTRZY 6p5C+NgQR4vV2/Ko0RXKE5J8WFLrnuY= -----END CERTIFICATE-----Generated at Wed Jul 29 06:21:30 2026 by rpki-client