$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa File: bd0224f0-3770-3a1b-880d-6c681d82e122.roa (raw, json) Hash identifier: jSMYQ4Ecn3HqFqS8eC8syK1beWcTuOQ1GF6YRCj16DY= Subject key identifier: 74:AA:06:56:21:6A:ED:31:75:60:B2:B2:40:FC:8F:1C:76:32:30:45 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EA79965860D3AC0AA38342A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397238 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:65:86:0d:3a:c0:aa:38:34:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=94a24154-acf9-4521-bc15-05d66fdadbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:ec:5e:6b:fc:0a:a9:39:a6:60:33:50:1c: c7:2a:62:fa:15:18:5e:d5:a1:1d:f0:a6:5b:88:13: 78:4a:4c:39:db:c2:df:82:4b:7b:19:a7:01:54:b6: bc:86:4b:93:03:00:cd:58:a4:d2:1b:a3:2b:d1:18: 14:97:ea:6c:00:35:10:62:77:2e:40:67:1b:92:57: 30:e5:00:5c:af:38:f5:df:92:b8:15:bc:af:9a:42: 03:e9:3e:00:91:e1:90:93:1b:a5:22:02:67:9c:b6: 41:bb:cf:90:af:9a:7e:f3:75:07:cf:0a:43:0a:68: 17:ab:0e:7e:51:0b:3b:f6:3a:38:69:88:9c:c5:39: e6:59:a0:92:9d:6e:bf:ad:5f:fd:53:e6:69:3d:70: 8b:23:91:d6:69:2e:cc:82:39:f5:16:df:2a:e9:91: d3:97:85:b8:7a:a9:cd:89:64:c8:09:2f:62:a6:4a: 51:cd:c1:7e:02:01:14:39:3e:5f:82:df:fe:f8:60: 77:4e:c6:a3:52:5b:38:da:24:5d:7b:1d:ea:af:72: 0d:ca:d8:bf:5a:d5:aa:98:ea:ba:c0:e4:ea:0c:5e: 9a:20:da:f5:2e:00:4d:90:d2:d6:ad:95:b7:0e:af: 01:ad:a3:b5:27:25:12:05:10:d0:ce:6e:7e:86:d2: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:06:56:21:6A:ED:31:75:60:B2:B2:40:FC:8F:1C:76:32:30:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:30:99:59:c5:9b:e7:92:57:bc:25:bb:7a:ef:50:c2:aa: 3d:38:35:33:f7:36:6c:ea:90:92:bf:ea:e6:54:93:0e:e9:23: d9:bd:70:fa:87:58:08:23:fe:33:2c:95:59:47:87:fd:44:de: 94:b4:44:d3:3e:9b:33:c4:f8:e0:5e:b0:eb:30:f1:be:7c:87: f3:1b:46:a3:bc:b5:f9:27:7a:97:70:d3:c4:5a:ab:59:3e:2a: b2:76:a6:a1:89:6f:68:e5:63:56:10:0d:e1:c6:4d:d4:4e:74: 3f:50:05:22:e9:b1:7e:89:9e:b7:09:87:34:ff:d3:84:ca:a1: 1d:df:52:a6:a9:b8:ba:54:30:ec:68:b5:b2:45:46:96:01:cb: e4:3c:37:20:2a:81:5b:52:c6:99:84:55:c4:39:00:39:5d:26: 44:0f:bd:f8:86:04:d7:c6:f7:37:b0:8a:f3:55:05:79:7f:c2: 6d:93:d3:a9:22:49:34:db:68:0f:63:18:f4:e2:d5:b6:3c:bf: 42:85:04:54:b0:34:9d:e9:d5:2b:51:e7:c4:ee:23:bf:cd:dc: 0f:16:1d:20:eb:f9:1a:7c:1c:54:72:05:fc:b9:5c:b7:4f:ce: e5:b1:45:f5:f0:55:65:a4:03:39:b8:b0:5b:1d:a6:b8:7f:18: 82:ac:af:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmWWGDTrAqjg0KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTRhMjQxNTQtYWNmOS00NTIxLWJjMTUtMDVkNjZmZGFkYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eTsXmv8Cqk5pmAzUBzHKmL6FRhe1aEd8KZb iBN4Skw528Lfgkt7GacBVLa8hkuTAwDNWKTSG6Mr0RgUl+psADUQYncuQGcbklcw 5QBcrzj135K4FbyvmkID6T4AkeGQkxulIgJnnLZBu8+Qr5p+83UHzwpDCmgXqw5+ UQs79jo4aYicxTnmWaCSnW6/rV/9U+ZpPXCLI5HWaS7Mgjn1Ft8q6ZHTl4W4eqnN iWTICS9ipkpRzcF+AgEUOT5fgt/++GB3TsajUls42iRdex3qr3INyti/WtWqmOq6 wOTqDF6aINr1LgBNkNLWrZW3Dq8BraO1JyUSBRDQzm5+htJpNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSqBlYhau0xdWCyskD8jxx2MjBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmQwMjI0ZjAtMzc3MC0z YTFiLTg4MGQtNmM2ODFkODJlMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6jMJlZxZvnkle8Jbt671DCqj04NTP3NmzqkJK/6uZUkw7pI9m9cPqH WAgj/jMslVlHh/1E3pS0RNM+mzPE+OBesOsw8b58h/MbRqO8tfknepdw08Raq1k+ KrJ2pqGJb2jlY1YQDeHGTdROdD9QBSLpsX6JnrcJhzT/04TKoR3fUqapuLpUMOxo tbJFRpYBy+Q8NyAqgVtSxpmEVcQ5ADldJkQPvfiGBNfG9zewivNVBXl/wm2T06ki STTbaA9jGPTi1bY8v0KFBFSwNJ3p1StR58TuI7/N3A8WHSDr+Rp8HFRyBfy5XLdP zuWxRfXwVWWkAzm4sFsdprh/GIKsr80= -----END CERTIFICATE-----Generated at Wed Jul 29 15:01:57 2026 by rpki-client