$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa File: add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa (raw, json) Hash identifier: g6WYyMTVa8K/4wN+Vo05VnzlKZeHiUZbv0veM5/hQYM= Subject key identifier: 54:B2:63:FD:E6:8D:0B:A4:11:A7:71:B4:9A:5B:5F:17:2C:B2:97:61 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF7179A33EE0C6EE9A9C30B10 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397217 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:9a:33:ee:0c:6e:e9:a9:c3:0b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=75189901-5476-4265-a704-b6a5f37a848d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:32:99:87:91:b3:cd:67:77:1b:a9:fe:10: 0b:5b:0a:a6:6d:7a:de:2e:43:ff:82:ee:74:91:ba: dd:a2:ae:62:2a:15:d9:7b:27:cd:76:bc:39:e0:c9: cf:8e:3d:d0:38:4e:5c:89:8f:51:74:05:bd:47:74: 17:9c:e7:f0:7c:a9:2f:68:08:c7:3a:e6:58:40:fd: 58:f3:09:0c:a2:70:12:77:e1:ec:af:28:47:ef:7c: 58:d0:79:86:fa:31:06:8f:2c:c2:2a:75:36:79:0a: d3:cb:86:fe:52:9a:f6:a8:0c:aa:cf:9a:c1:e2:dc: a8:be:f9:ef:0f:1d:d0:5e:45:d3:ef:ef:e7:f3:62: 83:6f:44:8b:83:c8:25:b2:f4:54:c9:5b:e7:f1:2b: 34:33:c9:3a:e5:1d:dc:a9:76:10:f2:3c:0c:a0:d9: f9:a7:e9:94:f1:7d:94:f6:9c:5f:21:59:a8:61:58: 47:6f:c9:de:f0:06:2b:2b:aa:f7:cb:a7:3a:90:52: 74:01:84:26:cd:d7:ef:6a:db:1f:51:43:6e:5e:35: 61:89:33:92:44:5a:33:00:d5:ee:a1:49:20:05:e1: 98:91:e2:30:78:ca:73:b8:a5:1e:2b:ad:9d:8d:03: 0e:28:d9:8d:d8:a7:44:af:e3:d6:6a:b5:e1:9c:7f: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:63:FD:E6:8D:0B:A4:11:A7:71:B4:9A:5B:5F:17:2C:B2:97:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:93:20:82:98:bb:4e:77:9f:ef:64:25:6b:54:57:4e:c7:35: e6:49:8e:00:79:f4:6c:0f:70:fc:0c:d8:b3:6c:20:8b:5a:4b: 71:b8:a4:4a:50:8d:c6:48:a3:8e:96:f9:4e:23:76:97:f1:42: 0b:03:c9:5f:a6:24:f2:5d:56:0e:3b:97:88:61:03:3c:e9:ff: 09:4f:37:20:c8:ee:1b:f0:2c:f9:fc:7c:94:6a:f1:86:6b:a9: ff:aa:f5:ea:b4:f8:57:fc:63:15:95:fb:00:45:d3:c7:a7:81: 0c:40:d8:fc:1b:2e:65:89:8c:69:1b:92:f9:42:3c:88:cd:52: b1:6c:b4:b1:a7:88:88:44:d2:d2:21:9f:98:09:7e:41:76:fb: 84:cb:59:f7:d2:2c:cc:01:99:8b:d2:32:e0:67:03:2e:da:d9: 72:c7:29:38:d8:f0:d9:4f:9e:c5:a1:88:bd:de:15:91:5b:2c: 25:37:e3:e9:85:14:1d:ed:0a:ab:35:bd:3e:17:22:2d:51:49: 9a:3b:08:98:04:2e:45:13:5f:c0:46:53:15:66:1b:8a:01:5b: 1b:49:de:67:d7:5a:22:0b:81:c2:35:15:62:9b:ee:bf:5f:42: db:bc:ae:fb:ac:72:ee:84:b3:7a:19:6e:86:74:fc:db:f1:37: 99:12:42:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5oz7gxu6anDCxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NzUxODk5MDEtNTQ3Ni00MjY1LWE3MDQtYjZhNWYzN2E4NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtAymYeRs81ndxup/hALWwqmbXreLkP/gu50 kbrdoq5iKhXZeyfNdrw54MnPjj3QOE5ciY9RdAW9R3QXnOfwfKkvaAjHOuZYQP1Y 8wkMonASd+HsryhH73xY0HmG+jEGjyzCKnU2eQrTy4b+Upr2qAyqz5rB4tyovvnv Dx3QXkXT7+/n82KDb0SLg8glsvRUyVvn8Ss0M8k65R3cqXYQ8jwMoNn5p+mU8X2U 9pxfIVmoYVhHb8ne8AYrK6r3y6c6kFJ0AYQmzdfvatsfUUNuXjVhiTOSRFozANXu oUkgBeGYkeIweMpzuKUeK62djQMOKNmN2KdEr+PWarXhnH/oqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSyY/3mjQukEadxtJpbXxcsspdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWRkNzBiM2QtMGI5MS0z ZDBmLTlhN2MtNGU0Mjc0ZTVjODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGTIIKYu053n+9kJWtUV07HNeZJjgB59GwPcPwM2LNsIItaS3G4pEpQ jcZIo46W+U4jdpfxQgsDyV+mJPJdVg47l4hhAzzp/wlPNyDI7hvwLPn8fJRq8YZr qf+q9eq0+Ff8YxWV+wBF08engQxA2PwbLmWJjGkbkvlCPIjNUrFstLGniIhE0tIh n5gJfkF2+4TLWffSLMwBmYvSMuBnAy7a2XLHKTjY8NlPnsWhiL3eFZFbLCU34+mF FB3tCqs1vT4XIi1RSZo7CJgELkUTX8BGUxVmG4oBWxtJ3mfXWiILgcI1FWKb7r9f Qtu8rvuscu6Es3oZboZ0/NvxN5kSQnk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:50:30 2026 by rpki-client