$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa File: 9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa (raw, json) Hash identifier: 3ly9KlUBtOdAND75L+5JTWRKOi5NYxiryBqy1gb0MTQ= Subject key identifier: 20:CD:C9:52:9D:8A:A1:BE:D0:84:64:B6:C0:40:2B:40:C0:E6:14:5A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497E09C86B0ADB68BED67E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397236 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:09:c8:6b:0a:db:68:be:d6:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ee9cea3-2789-4ebb-a4bb-1519e07706a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:56:8f:7d:99:3f:22:12:49:ca:1a:ab:be: 30:62:91:bd:5d:36:66:65:f0:10:05:d1:59:23:17: 03:b0:5d:d8:9c:7d:c4:49:92:ff:24:6f:4f:43:cf: 8f:d7:62:48:36:24:2d:1b:d4:45:d6:d3:60:50:0e: fe:16:ec:cc:4e:eb:c0:c4:af:76:67:02:9d:c3:b7: 86:f6:d5:99:3d:b6:7e:fe:37:c9:bb:04:9b:09:e5: 3a:52:93:e5:33:58:3b:72:4a:19:f0:39:8d:3b:ed: ac:e1:1f:3e:1c:c5:70:14:37:c0:92:e8:66:4a:50: c7:89:76:1f:bd:e1:be:f4:d0:c3:f9:ac:38:ba:f1: 04:f5:75:dd:43:e8:01:f8:5a:ab:05:81:ac:4b:5a: d5:29:ad:77:cc:90:d8:30:92:8a:af:3c:76:93:ca: a8:af:db:59:a1:9c:af:09:1d:50:62:19:9d:40:5d: b7:f5:3a:4e:23:11:3a:b4:b0:45:ab:55:d1:83:dd: 6d:00:a8:cf:30:e5:9a:02:a2:93:a8:c1:a3:5a:23: 79:4a:21:ea:3c:90:69:d5:ec:ae:03:cd:09:1f:8a: e4:5b:aa:9f:da:3e:d5:63:9a:d9:cf:20:f6:20:c3: 3a:39:da:65:22:e5:8d:fc:50:78:f7:34:d1:1f:73: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:C9:52:9D:8A:A1:BE:D0:84:64:B6:C0:40:2B:40:C0:E6:14:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0a:60:b1:7c:67:20:fe:a3:55:35:45:f3:c1:bf:1b:45:29: 79:8f:5a:2a:dd:b1:83:c4:89:b4:bf:7e:80:dd:22:d5:eb:44: 43:0e:8d:22:17:36:32:d7:e1:97:28:f2:03:0a:a8:d6:24:61: dc:2b:c1:f7:25:47:d1:42:a1:13:57:87:e0:1a:79:b2:5b:41: e8:28:d9:21:b7:32:85:6a:6e:c0:29:41:be:ab:9d:7c:73:3d: cf:a8:d1:c5:f7:87:40:c5:7a:b3:2c:78:29:1f:99:1f:6e:b1: 8f:40:0d:84:e9:f9:bf:dc:ec:94:e6:ff:8f:a2:d9:5c:b0:b5: cc:4c:20:83:c6:e6:36:37:a8:13:31:1b:4e:92:ac:e4:82:b4: 58:9c:71:53:e4:7e:fb:8b:11:9b:07:83:4b:8b:fc:5c:f8:90: 47:c8:f8:dc:e5:06:3e:28:93:fc:d7:12:89:56:d0:a4:29:e6: b7:1a:ba:a8:fb:38:cb:08:7e:2c:f6:a6:05:c1:6f:77:d7:d1: 1f:6a:de:7c:68:28:c7:24:d8:bf:bd:56:22:d8:45:09:f7:5a: 54:a2:d8:1b:ec:ea:77:a9:a1:af:2b:d8:d0:2e:c8:a3:79:99: d5:58:b8:28:c0:80:b4:d5:44:f2:2d:52:14:27:6c:f8:6c:b2: 21:ee:b2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfgnIawrbaL7WfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmVlOWNlYTMtMjc4OS00ZWJiLWE0YmItMTUxOWUwNzcwNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9lWj32ZPyISScoaq74wYpG9XTZmZfAQBdFZ IxcDsF3YnH3ESZL/JG9PQ8+P12JINiQtG9RF1tNgUA7+FuzMTuvAxK92ZwKdw7eG 9tWZPbZ+/jfJuwSbCeU6UpPlM1g7ckoZ8DmNO+2s4R8+HMVwFDfAkuhmSlDHiXYf veG+9NDD+aw4uvEE9XXdQ+gB+FqrBYGsS1rVKa13zJDYMJKKrzx2k8qor9tZoZyv CR1QYhmdQF239TpOIxE6tLBFq1XRg91tAKjPMOWaAqKTqMGjWiN5SiHqPJBp1eyu A80JH4rkW6qf2j7VY5rZzyD2IMM6OdplIuWN/FB49zTRH3PcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDNyVKdiqG+0IRktsBAK0DA5hRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEyYmY4ZjQtZjlkNC0z OTQ5LThhYTUtMzhlOGU4NWJmNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIKYLF8ZyD+o1U1RfPBvxtFKXmPWirdsYPEibS/foDdItXrREMOjSIX NjLX4Zco8gMKqNYkYdwrwfclR9FCoRNXh+AaebJbQego2SG3MoVqbsApQb6rnXxz Pc+o0cX3h0DFerMseCkfmR9usY9ADYTp+b/c7JTm/4+i2VywtcxMIIPG5jY3qBMx G06SrOSCtFiccVPkfvuLEZsHg0uL/Fz4kEfI+NzlBj4ok/zXEolW0KQp5rcauqj7 OMsIfiz2pgXBb3fX0R9q3nxoKMck2L+9ViLYRQn3WlSi2Bvs6nepoa8r2NAuyKN5 mdVYuCjAgLTVRPItUhQnbPhssiHusss= -----END CERTIFICATE-----Generated at Sun Sep 27 04:24:34 2026 by rpki-client