$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa File: 200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa (raw, json) Hash identifier: rqWXvKoMdO4VIT/G1FOZ5uxt4h9jgL+MNAN7VtSd3Lw= Subject key identifier: 47:F2:D2:73:71:1C:CA:35:4A:CA:0D:D7:D0:34:B8:7F:07:59:63:01 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DBC8BD0743206B0BCB380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397229 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:bc:8b:d0:74:32:06:b0:bc:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=171fbfe3-d703-47a7-9f67-1907178d3e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:bb:2b:2e:98:a5:58:ec:b7:b9:f5:73:e1: a7:fd:39:6d:18:14:48:9a:0b:f2:76:e2:98:2f:30: 6d:c3:48:d2:3a:5a:85:8c:44:56:09:a5:90:56:37: 81:79:a5:c9:21:d6:ef:bc:b1:6f:c3:bd:4d:ce:21: ad:88:c9:cc:57:1e:e1:6e:2d:d4:27:9a:bb:4f:5d: 04:19:0b:6b:c3:17:ec:18:2e:bb:7d:bc:cd:2f:fb: 59:8c:91:bc:63:0f:0f:2d:2f:21:66:db:2b:65:3d: 6f:ed:1e:bf:00:37:f8:f7:9a:19:e5:8b:8e:f3:b9: 8d:25:09:7a:ab:ac:39:00:c2:59:bb:05:5e:ff:8f: 7f:d8:a7:92:0f:9e:a0:7c:a8:2c:2e:02:90:34:13: 96:aa:57:b7:f6:b6:eb:bb:9b:3a:00:d6:9e:09:c1: 21:0c:d7:a4:fa:f1:b5:46:d6:d8:15:0a:b0:15:94: 04:5a:27:7a:c7:b4:71:74:b8:bc:df:da:1a:c0:12: 0b:04:eb:a7:1f:4e:9e:89:78:5e:01:a9:fd:b3:3c: 5f:f8:5d:29:00:2d:7c:67:27:9e:dd:6c:31:26:02: 69:fb:ff:8e:5c:67:28:e9:9a:c0:6b:bb:a3:64:9e: eb:34:35:92:85:bb:0c:ab:b7:09:78:86:3a:73:b6: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F2:D2:73:71:1C:CA:35:4A:CA:0D:D7:D0:34:B8:7F:07:59:63:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/200e4e14-dc6e-3ab9-adc5-7eb2da9510f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3b:d8:f3:f8:2f:63:59:fc:9c:40:d3:01:b7:a2:19:5b:de: 3a:6b:c1:69:94:d0:38:69:35:59:36:75:e0:07:b9:9d:6c:5f: 86:2c:89:82:e8:73:f9:b7:fd:53:28:83:06:c9:f9:d2:d8:d0: 23:0d:0a:a9:4c:fc:ec:1c:14:56:c8:da:d2:28:8d:13:39:b5: 48:cf:2e:aa:6f:05:c1:62:da:92:ba:93:1b:c6:b1:d4:dd:cd: 74:83:be:1d:53:a0:8e:40:63:d8:63:ad:90:8e:06:35:59:db: c2:04:a6:23:d9:c8:bd:b9:e8:b1:07:de:e8:46:6f:69:aa:a9: f6:e1:57:39:c7:07:1a:2d:8f:a5:fb:f1:20:5f:06:8d:f0:30: f3:e6:0e:13:c3:a2:be:3a:30:55:96:a2:26:24:8b:11:74:8c: 01:86:fe:b8:0d:02:a6:e5:03:15:55:c2:b7:8f:a6:77:19:ff: e2:8e:93:d2:25:7f:59:54:8e:26:06:87:3d:66:bd:8f:04:3b: 9e:85:13:09:76:bc:82:5e:cb:62:6d:2a:da:67:f9:26:51:97: e2:49:0f:e4:bc:80:43:67:bf:83:64:d6:d0:33:df:74:eb:79: c9:63:f5:aa:65:71:16:d5:1a:38:04:1c:ae:46:98:e1:56:4c: f3:33:74:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfbyL0HQyBrC8s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTcxZmJmZTMtZDcwMy00N2E3LTlmNjctMTkwNzE3OGQzZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC67Ky6YpVjst7n1c+Gn/TltGBRImgvyduKY LzBtw0jSOlqFjERWCaWQVjeBeaXJIdbvvLFvw71NziGtiMnMVx7hbi3UJ5q7T10E GQtrwxfsGC67fbzNL/tZjJG8Yw8PLS8hZtsrZT1v7R6/ADf495oZ5YuO87mNJQl6 q6w5AMJZuwVe/49/2KeSD56gfKgsLgKQNBOWqle39rbru5s6ANaeCcEhDNek+vG1 RtbYFQqwFZQEWid6x7RxdLi839oawBILBOunH06eiXheAan9szxf+F0pAC18Zyee 3WwxJgJp+/+OXGco6ZrAa7ujZJ7rNDWShbsMq7cJeIY6c7aT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfy0nNxHMo1SsoN19A0uH8HWWMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjAwZTRlMTQtZGM2ZS0z YWI5LWFkYzUtN2ViMmRhOTUxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC072PP4L2NZ/JxA0wG3ohlb3jprwWmU0DhpNVk2deAHuZ1sX4YsiYLo c/m3/VMogwbJ+dLY0CMNCqlM/OwcFFbI2tIojRM5tUjPLqpvBcFi2pK6kxvGsdTd zXSDvh1ToI5AY9hjrZCOBjVZ28IEpiPZyL256LEH3uhGb2mqqfbhVznHBxotj6X7 8SBfBo3wMPPmDhPDor46MFWWoiYkixF0jAGG/rgNAqblAxVVwrePpncZ/+KOk9Il f1lUjiYGhz1mvY8EO56FEwl2vIJey2JtKtpn+SZRl+JJD+S8gENnv4Nk1tAz33Tr eclj9aplcRbVGjgEHK5GmOFWTPMzdMA= -----END CERTIFICATE-----Generated at Sat Sep 26 23:51:52 2026 by rpki-client