$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba3ae667-a3eb-3de1-a1ee-6d464052f3a8.roa File: ba3ae667-a3eb-3de1-a1ee-6d464052f3a8.roa (raw, json) Hash identifier: 4HGntzEuREhVSZH47asMnv7MKpg1b1ZkxlkZTp0pYMQ= Subject key identifier: B9:5C:85:80:22:A2:84:D3:55:A2:A8:D3:B3:FA:E3:2C:9D:96:2E:5D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F2EED1F2DB8FE85A8DFD73FA0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba3ae667-a3eb-3de1-a1ee-6d464052f3a8.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 397222 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1f:2d:b8:fe:85:a8:df:d7:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=fa4f8020-e17e-4278-9b8e-8cc9f498e22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:65:a9:35:6b:4b:91:4e:92:be:31:93:86: 51:bc:68:0d:95:4c:eb:ab:05:b8:65:a7:64:93:57: 0d:71:12:43:b1:04:1e:48:3c:80:06:33:d1:8f:15: 21:6d:a0:23:74:87:7e:f8:68:93:57:86:e3:77:d7: 86:57:d6:6a:f9:4c:76:36:28:d9:2c:80:26:b8:f7: 49:fb:8e:53:c2:0f:df:c6:36:51:6a:61:66:76:43: 0b:f1:e7:c6:0a:85:cc:d3:62:94:7b:06:f3:48:dc: 21:19:7f:1b:ed:2a:64:00:5c:51:23:63:c8:7c:dd: 72:74:b2:ee:f9:83:5d:74:9f:b4:1b:10:12:31:77: 1e:da:02:1a:84:d7:92:08:1b:23:44:a6:db:b2:2a: 4f:9b:e3:ac:fe:c0:79:2a:f4:92:29:ba:b6:67:77: cb:2a:6f:15:65:b2:ce:aa:49:f9:64:0d:2d:86:99: 6b:c4:1c:b8:d3:c9:c3:b4:4c:55:dc:ec:23:db:32: bf:9c:22:be:73:26:b9:a1:2a:f0:b6:35:a2:a3:bd: c6:c6:73:c4:86:e9:85:46:e5:3a:7a:95:78:b9:e6: 7e:56:cd:17:b7:cb:1a:f4:2a:91:b7:88:15:63:34: 92:13:7f:5c:ce:9e:c6:f2:63:e1:12:27:9e:b8:10: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:85:80:22:A2:84:D3:55:A2:A8:D3:B3:FA:E3:2C:9D:96:2E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ba3ae667-a3eb-3de1-a1ee-6d464052f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:49:d8:b2:3b:a5:e3:52:05:f4:7c:5a:a3:3e:dc:a4:a6:05: 58:eb:f4:b4:b1:64:89:ed:ca:92:ba:78:2f:3d:2d:f5:7a:73: a6:60:3f:21:fa:61:ae:86:ef:f7:0c:2f:66:c4:a8:40:01:20: aa:72:85:15:77:da:c9:c2:d8:78:35:55:92:22:06:03:00:a7: ea:7f:04:20:8c:43:e0:f1:5c:ce:70:59:47:df:8e:19:d0:8c: 01:ef:e3:c6:5b:fb:1c:e5:59:66:c4:0c:72:84:f3:20:3d:c0: e1:90:66:9f:eb:31:f2:fd:32:08:7d:c7:d6:53:0a:f1:4e:97: ca:c1:5b:26:b6:c4:54:cb:0e:ad:98:14:fd:a7:c5:8e:ae:39: 6c:4a:81:c2:00:09:90:bb:9e:1e:a5:2e:26:d2:63:eb:0f:16: 9d:81:fb:6a:f9:d4:c0:5c:8a:81:e0:53:1e:24:5e:40:8e:b9: 1a:a4:d5:ba:fa:e2:7d:d3:e7:35:18:69:5a:9e:1e:6e:2c:68: 73:6e:8e:48:ce:8a:49:73:65:f0:eb:f1:56:4d:89:24:2f:fa: 3a:0e:32:ae:bb:bb:b5:a6:06:24:cf:fb:be:c7:92:e7:d2:d3: 2f:20:e4:a7:d2:62:24:c9:20:82:d1:cf:ba:9d:96:03:74:59: 5e:3d:3e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7R8tuP6FqN/XP6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmE0ZjgwMjAtZTE3ZS00Mjc4LTliOGUtOGNjOWY0OThlMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt5lqTVrS5FOkr4xk4ZRvGgNlUzrqwW4Zadk k1cNcRJDsQQeSDyABjPRjxUhbaAjdId++GiTV4bjd9eGV9Zq+Ux2NijZLIAmuPdJ +45Twg/fxjZRamFmdkML8efGCoXM02KUewbzSNwhGX8b7SpkAFxRI2PIfN1ydLLu +YNddJ+0GxASMXce2gIahNeSCBsjRKbbsipPm+Os/sB5KvSSKbq2Z3fLKm8VZbLO qkn5ZA0thplrxBy408nDtExV3Owj2zK/nCK+cya5oSrwtjWio73GxnPEhumFRuU6 epV4ueZ+Vs0Xt8sa9CqRt4gVYzSSE39czp7G8mPhEieeuBAHiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlchYAiooTTVaKo07P64yydli5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmEzYWU2NjctYTNlYi0z ZGUxLWExZWUtNmQ0NjQwNTJmM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRJ2LI7peNSBfR8WqM+3KSmBVjr9LSxZIntypK6eC89LfV6c6ZgPyH6 Ya6G7/cML2bEqEABIKpyhRV32snC2Hg1VZIiBgMAp+p/BCCMQ+DxXM5wWUffjhnQ jAHv48Zb+xzlWWbEDHKE8yA9wOGQZp/rMfL9Mgh9x9ZTCvFOl8rBWya2xFTLDq2Y FP2nxY6uOWxKgcIACZC7nh6lLibSY+sPFp2B+2r51MBcioHgUx4kXkCOuRqk1br6 4n3T5zUYaVqeHm4saHNujkjOiklzZfDr8VZNiSQv+joOMq67u7WmBiTP+77HkufS 0y8g5KfSYiTJIILRz7qdlgN0WV49Ppw= -----END CERTIFICATE-----Generated at Tue Sep 22 16:56:13 2026 by rpki-client