$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdd4b77-be7a-3d22-852c-4abb91441456.roa File: dfdd4b77-be7a-3d22-852c-4abb91441456.roa (raw, json) Hash identifier: zGc+Y1AVz+Or9gKSvepo+jdRZZtFnk9QR4s47a4Z9+U= Subject key identifier: 57:9B:F3:99:FB:D0:91:EB:98:C8:3B:A8:D9:27:F7:55:1B:7F:65:02 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497EBBB2A55FC3AC3D8DE6C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdd4b77-be7a-3d22-852c-4abb91441456.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397241 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:bb:b2:a5:5f:c3:ac:3d:8d:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=54b2ccb0-2ed8-48d5-854a-5684e72507c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:8d:dc:42:4f:dd:af:c5:96:88:3f:75:38: a7:92:49:6e:1b:58:fa:56:51:59:53:5c:de:49:99: 63:61:2f:bb:93:40:98:02:84:09:f4:df:66:bc:ee: 70:48:e8:e7:0b:21:37:90:e6:46:cf:83:28:15:b8: 5f:2a:53:26:65:1a:a5:e4:25:9d:a2:4b:d8:49:e7: f5:c6:98:c4:17:1d:6c:fb:e7:9b:d9:36:82:22:a1: 41:6d:a0:04:92:2c:51:e2:fa:3d:71:b6:76:2d:e8: 4e:2f:a2:80:89:d0:1a:a0:23:d6:8c:f4:c3:5f:11: c1:ce:28:d8:db:0c:c7:47:09:55:8e:dd:a9:c8:32: f0:6c:86:f0:82:78:8b:d5:5b:a8:0b:2a:4a:a4:2f: 64:6a:9b:6c:74:4c:f7:8e:53:72:1c:0d:15:bd:f2: bf:27:4e:aa:51:00:e0:9a:99:24:78:a2:58:ab:3d: e2:63:4e:39:44:60:63:3b:70:5d:c3:51:98:c2:a4: 4f:a7:ec:d2:04:8c:7d:84:6e:61:ad:89:cd:45:7d: b9:e0:b2:d4:96:b9:db:9d:d1:aa:87:5a:e3:99:34: 66:e4:f3:cb:fc:c8:57:84:4f:45:0d:46:81:06:55: d0:e6:45:4d:23:98:46:e0:25:7f:18:01:12:1b:3b: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9B:F3:99:FB:D0:91:EB:98:C8:3B:A8:D9:27:F7:55:1B:7F:65:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdd4b77-be7a-3d22-852c-4abb91441456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c5:83:8e:13:a3:22:42:86:bb:46:60:8a:81:62:56:c7:6d: 33:ff:92:91:4e:35:66:d9:2f:97:1f:da:9e:59:bb:59:93:03: 63:a6:16:88:8e:9b:2f:b9:e7:b0:9f:b0:40:b5:39:b1:42:d3: 96:61:53:31:28:71:62:28:b8:cb:76:8a:1b:d2:59:07:3f:e9: 50:ca:00:1b:e5:d9:44:02:34:e4:08:ea:77:6a:26:3c:ae:97: 6e:36:c4:cb:a2:ae:38:05:58:f6:36:98:a9:ff:10:87:b8:1e: 74:81:7d:41:bb:80:77:c9:fd:db:12:ee:70:85:ef:9b:c7:d7: 83:38:26:cc:91:db:f6:d1:41:7a:3a:a3:56:48:e0:44:f5:fd: 1d:d4:0e:36:a0:7c:af:fd:84:98:79:9a:38:ee:cc:49:e8:e1: 1f:79:3f:7e:e0:21:a4:81:5a:14:81:35:6c:85:e6:1e:21:a7: 40:40:a3:32:40:f1:3e:f5:5e:f7:15:9d:ab:ac:a5:73:e4:82: 95:e9:de:04:75:d6:12:d1:e4:6d:88:71:1a:76:7c:ae:c5:c9: 43:27:f8:9a:38:be:f0:7f:3d:df:14:88:19:f0:bc:cb:f4:36: b9:53:2d:a7:04:b6:df:a8:f8:17:7b:ea:d4:c6:27:2d:5a:4b: 55:0e:08:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfruypV/DrD2N5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTRiMmNjYjAtMmVkOC00OGQ1LTg1NGEtNTY4NGU3MjUwN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLCN3EJP3a/Flog/dTinkkluG1j6VlFZU1ze SZljYS+7k0CYAoQJ9N9mvO5wSOjnCyE3kOZGz4MoFbhfKlMmZRql5CWdokvYSef1 xpjEFx1s++eb2TaCIqFBbaAEkixR4vo9cbZ2LehOL6KAidAaoCPWjPTDXxHBzijY 2wzHRwlVjt2pyDLwbIbwgniL1VuoCypKpC9kaptsdEz3jlNyHA0VvfK/J06qUQDg mpkkeKJYqz3iY045RGBjO3Bdw1GYwqRPp+zSBIx9hG5hrYnNRX254LLUlrnbndGq h1rjmTRm5PPL/MhXhE9FDUaBBlXQ5kVNI5hG4CV/GAESGzsi0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeb85n70JHrmMg7qNkn91Ubf2UCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGZkZDRiNzctYmU3YS0z ZDIyLTg1MmMtNGFiYjkxNDQxNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLFg44ToyJChrtGYIqBYlbHbTP/kpFONWbZL5cf2p5Zu1mTA2OmFoiO my+557CfsEC1ObFC05ZhUzEocWIouMt2ihvSWQc/6VDKABvl2UQCNOQI6ndqJjyu l242xMuirjgFWPY2mKn/EIe4HnSBfUG7gHfJ/dsS7nCF75vH14M4JsyR2/bRQXo6 o1ZI4ET1/R3UDjagfK/9hJh5mjjuzEno4R95P37gIaSBWhSBNWyF5h4hp0BAozJA 8T71XvcVnauspXPkgpXp3gR11hLR5G2IcRp2fK7FyUMn+Jo4vvB/Pd8UiBnwvMv0 NrlTLacEtt+o+Bd76tTGJy1aS1UOCK4= -----END CERTIFICATE-----Generated at Sun Sep 27 07:54:09 2026 by rpki-client