$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa File: 2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa (raw, json) Hash identifier: C3OnD10yb6NjOakVpQzZhtm2O3crrYH0AUOADZhJpeQ= Subject key identifier: 2E:E9:21:5B:1E:C8:68:32:F5:F5:0F:EC:83:26:20:EF:D5:1B:91:88 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F6292C12FAC2724C625571F40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 12008 IP address blocks: 156.154.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c1:2f:ac:27:24:c6:25:57:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=59f98353-8b27-4bb4-97bb-60a21900a662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:e7:55:64:19:ba:9d:75:bd:04:4c:6d:85: 4d:7d:3e:3c:56:67:73:5a:59:bc:1b:22:a2:a3:50: 72:3f:98:c3:b2:0d:25:33:f9:98:ce:90:b1:d4:93: 2c:22:77:a0:06:77:2f:be:8c:a0:ad:27:cf:9b:42: 1f:cf:6a:d0:94:18:94:20:38:2f:9c:25:d6:2c:f5: fa:83:1f:5f:72:37:5c:9f:c9:bb:84:e6:e9:18:71: 96:e1:dc:ba:6d:1a:98:36:db:aa:27:1d:3c:3b:e1: 62:0c:35:f3:59:a2:3c:ee:6f:0f:58:f4:02:98:25: 97:19:89:56:ba:5c:aa:a5:5d:b9:b3:8c:69:df:62: d6:d2:1e:fa:29:30:27:80:3c:4f:85:80:6f:0a:38: 5d:33:fa:a6:e1:50:2c:5b:ed:25:ac:0f:8d:10:70: 9a:02:8b:83:44:b7:25:17:7b:81:5d:63:84:c4:2c: c4:35:e0:fd:7a:c1:e0:1c:eb:9a:88:13:c0:10:d6: 1b:62:8c:14:81:76:bc:1d:af:42:31:94:57:d7:37: a2:0d:9b:14:a1:dd:dc:80:25:b4:ad:49:2e:6d:fd: 0a:de:f1:46:6d:a5:85:b0:88:72:73:2b:6f:c5:5e: 0b:45:28:c3:a8:bb:19:74:3f:dd:8d:81:b9:97:0a: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:21:5B:1E:C8:68:32:F5:F5:0F:EC:83:26:20:EF:D5:1B:91:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2c244aa9-dcd8-3f0e-a40d-6a328e7427ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:84:2c:23:24:99:4e:5e:2b:30:e9:3b:9c:5d:16:57:fb:c1: c7:d3:7a:08:80:29:8d:ac:be:b7:74:79:98:3c:f7:d2:56:ce: 70:9f:1d:8e:83:35:24:97:03:51:07:8c:23:62:68:2e:63:b7: fc:77:63:ac:cd:4a:76:29:7b:6c:7d:1c:89:ec:43:e4:d3:55: d6:63:5c:26:14:54:d5:7c:a2:09:59:5f:a2:f9:5b:07:79:63: 68:ae:70:29:88:6b:3a:50:0a:d4:f5:3b:b5:ac:7e:62:2d:c5: 41:54:95:92:17:03:81:8d:c1:85:67:45:01:97:30:4b:86:f7: 41:17:b1:98:68:93:e0:fe:5f:df:19:7d:7d:2d:dd:15:d4:b6: e2:01:3d:96:c7:1c:65:43:a7:0d:1d:ea:45:55:d9:26:f8:4f: b2:12:af:41:78:5c:0a:0f:3e:17:b0:77:54:a0:ad:78:5d:d0: a0:c8:f4:04:dd:44:d2:4a:b0:99:91:a4:e8:53:5d:50:7a:a0: 20:1b:ea:f7:17:eb:7f:b6:02:86:d6:31:6a:9b:f6:c3:58:e6: dc:57:9e:35:a0:7f:9a:cf:09:19:30:f2:24:4f:2e:f6:50:53: c7:37:28:1d:f5:a3:7c:6b:6d:fa:ab:58:26:e1:5f:92:48:be: 1a:0a:21:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksEvrCckxiVXH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTlmOTgzNTMtOGIyNy00YmI0LTk3YmItNjBhMjE5MDBhNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsrnVWQZup11vQRMbYVNfT48VmdzWlm8GyKi o1ByP5jDsg0lM/mYzpCx1JMsInegBncvvoygrSfPm0Ifz2rQlBiUIDgvnCXWLPX6 gx9fcjdcn8m7hObpGHGW4dy6bRqYNtuqJx08O+FiDDXzWaI87m8PWPQCmCWXGYlW ulyqpV25s4xp32LW0h76KTAngDxPhYBvCjhdM/qm4VAsW+0lrA+NEHCaAouDRLcl F3uBXWOExCzENeD9esHgHOuaiBPAENYbYowUgXa8Ha9CMZRX1zeiDZsUod3cgCW0 rUkubf0K3vFGbaWFsIhycytvxV4LRSjDqLsZdD/djYG5lwri1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7pIVseyGgy9fUP7IMmIO/VG5GIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmMyNDRhYTktZGNkOC0z ZjBlLWE0MGQtNmEzMjhlNzQyN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOELCMkmU5eKzDpO5xdFlf7wcfTegiAKY2svrd0eZg899JWznCfHY6D NSSXA1EHjCNiaC5jt/x3Y6zNSnYpe2x9HInsQ+TTVdZjXCYUVNV8oglZX6L5Wwd5 Y2iucCmIazpQCtT1O7WsfmItxUFUlZIXA4GNwYVnRQGXMEuG90EXsZhok+D+X98Z fX0t3RXUtuIBPZbHHGVDpw0d6kVV2Sb4T7ISr0F4XAoPPhewd1SgrXhd0KDI9ATd RNJKsJmRpOhTXVB6oCAb6vcX63+2AobWMWqb9sNY5txXnjWgf5rPCRkw8iRPLvZQ U8c3KB31o3xrbfqrWCbhX5JIvhoKIR4= -----END CERTIFICATE-----Generated at Sun Nov 1 19:55:50 2026 by rpki-client