$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/101ec9c4-f66d-33a7-b1a8-8823c34c2490.roa File: 101ec9c4-f66d-33a7-b1a8-8823c34c2490.roa (raw, json) Hash identifier: 87HZDes/Q7BQeC3OXKkKrhgFKByZ1PB0Fz8EbQldHzw= Subject key identifier: 09:B2:0F:2A:84:AE:1E:5A:F9:D3:BB:D6:E7:B2:86:BF:B4:37:01:70 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584EF71791092C5FA8D658802C40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/101ec9c4-f66d-33a7-b1a8-8823c34c2490.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 397213 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:91:09:2c:5f:a8:d6:58:80:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=125b0de6-6917-4f8a-9fc7-dbf42a170932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:b8:c9:32:b2:40:81:ab:d4:ef:5b:54:6c: 92:b9:12:58:e2:1a:87:9b:a3:55:03:ce:e3:ce:55: 7d:c4:70:6f:c8:7d:9a:5e:f3:20:65:f4:3b:c2:b4: fc:75:ba:c0:15:97:8d:85:9e:a0:8e:cc:a0:97:59: 6f:f6:7c:c3:77:fd:d6:04:74:55:fd:13:e1:9d:29: 9d:4a:28:a1:f3:b8:b7:b6:b0:4f:58:d7:3f:6c:f0: 39:2b:81:91:cc:64:f6:e2:ff:36:6e:da:ae:d6:2a: 93:1f:a3:9d:fe:ee:7b:56:4d:df:5f:9f:af:58:3e: 41:5b:64:0b:69:83:ff:93:d0:da:44:cb:c8:f4:3b: c2:51:50:93:c3:35:ce:eb:44:0b:69:fa:4e:f9:b8: e6:21:77:36:89:06:bb:e4:17:43:98:4e:ee:0c:7b: eb:56:f9:b0:38:ba:5d:f0:61:1e:51:eb:a0:e8:13: a9:1c:2a:4f:f7:fb:f2:3e:b8:1c:32:1e:d0:34:32: 80:28:81:8c:ae:32:01:73:4f:19:cb:6e:2a:f1:d7: 2d:54:e9:33:52:1c:4d:1f:d8:d9:20:b1:44:d4:88: 2f:23:c9:1b:6a:a2:b4:99:d0:12:37:94:3d:28:b0: e4:76:c3:00:a6:f6:1e:c9:6f:5e:27:4f:27:f1:2f: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B2:0F:2A:84:AE:1E:5A:F9:D3:BB:D6:E7:B2:86:BF:B4:37:01:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/101ec9c4-f66d-33a7-b1a8-8823c34c2490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5f:32:28:e3:97:bf:5f:39:cd:04:b7:ca:8c:b1:55:51:82: 61:3f:eb:38:ae:a9:22:41:e5:be:5b:02:f5:1c:26:50:5a:66: 63:3d:a5:c2:e7:49:13:15:34:ed:8c:68:84:ec:68:47:38:a7: 1b:a8:c3:b9:7c:3a:db:ba:54:f1:84:6e:53:8d:b2:e9:8f:ea: 73:f5:20:05:66:31:e4:cd:f0:cd:a4:77:cf:eb:67:af:41:fb: c5:f3:e9:95:41:61:33:b2:96:27:3d:90:82:df:61:20:d7:e1: 00:b7:23:25:a6:5d:58:5e:7c:bf:69:bc:2a:76:67:db:a3:35: e9:c6:a6:42:6d:f4:0d:90:ea:7d:81:83:ce:0c:c4:58:d1:6f: 98:7c:fe:39:27:ee:76:e5:3e:38:4d:85:b5:91:75:4c:30:83: b9:db:4e:1a:fd:06:e2:17:b2:42:20:bd:37:6a:5f:4f:5b:92: 18:b6:cc:71:9b:ff:06:e9:03:bc:11:1b:ea:2c:b4:a3:b6:c8: 53:30:17:c8:7b:c2:25:39:88:df:68:23:b8:f5:1f:59:e0:3e: 4e:74:c9:4d:0f:2d:b1:b4:1a:d0:30:a3:ac:f9:17:c9:4c:d9: 0a:6b:3a:49:ea:8d:34:06:36:3d:d2:36:15:48:1a:4f:32:b4: 80:1b:09:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5EJLF+o1liALEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTI1YjBkZTYtNjkxNy00ZjhhLTlmYzctZGJmNDJhMTcwOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3m4yTKyQIGr1O9bVGySuRJY4hqHm6NVA87j zlV9xHBvyH2aXvMgZfQ7wrT8dbrAFZeNhZ6gjsygl1lv9nzDd/3WBHRV/RPhnSmd Siih87i3trBPWNc/bPA5K4GRzGT24v82btqu1iqTH6Od/u57Vk3fX5+vWD5BW2QL aYP/k9DaRMvI9DvCUVCTwzXO60QLafpO+bjmIXc2iQa75BdDmE7uDHvrVvmwOLpd 8GEeUeug6BOpHCpP9/vyPrgcMh7QNDKAKIGMrjIBc08Zy24q8dctVOkzUhxNH9jZ ILFE1IgvI8kbaqK0mdASN5Q9KLDkdsMApvYeyW9eJ08n8S92BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmyDyqErh5a+dO71ueyhr+0NwFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTAxZWM5YzQtZjY2ZC0z M2E3LWIxYTgtODgyM2MzNGMyNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJfMijjl79fOc0Et8qMsVVRgmE/6ziuqSJB5b5bAvUcJlBaZmM9pcLn SRMVNO2MaITsaEc4pxuow7l8Otu6VPGEblONsumP6nP1IAVmMeTN8M2kd8/rZ69B +8Xz6ZVBYTOylic9kILfYSDX4QC3IyWmXVhefL9pvCp2Z9ujNenGpkJt9A2Q6n2B g84MxFjRb5h8/jkn7nblPjhNhbWRdUwwg7nbThr9BuIXskIgvTdqX09bkhi2zHGb /wbpA7wRG+ostKO2yFMwF8h7wiU5iN9oI7j1H1ngPk50yU0PLbG0GtAwo6z5F8lM 2QprOknqjTQGNj3SNhVIGk8ytIAbCes= -----END CERTIFICATE-----Generated at Tue Oct 6 15:33:53 2026 by rpki-client