$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa File: 3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa (raw, json) Hash identifier: zQvMLRAOMxWtSBM9wCMv3dsxaD6ItcPoVSyq1SiXAOA= Subject key identifier: E4:9A:A0:20:87:D6:FC:EB:EF:84:B8:82:D1:28:18:28:1D:37:D5:A4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F497DF042F9E7FEDC45D04340 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397224 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:f0:42:f9:e7:fe:dc:45:d0:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6f00fa1-cc66-418b-8688-bd2bb86f56ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:18:0a:bb:54:66:48:f2:47:06:c1:27:9f: bc:9e:6c:95:d3:16:c8:05:9e:69:65:77:d0:36:ac: 2e:b9:d2:aa:9d:5c:c7:3b:97:8f:b0:bd:c3:94:d0: 6a:b9:1d:d8:9d:04:2b:2f:a8:12:68:80:0a:59:c5: dc:46:cb:7e:ab:72:53:ca:df:9f:c8:36:db:e7:dc: 03:f2:93:18:4f:08:d4:08:0c:2b:fc:30:ec:53:75: 1d:66:a5:d9:e7:c6:78:07:45:f3:a0:82:60:31:23: e8:c7:1b:ad:4b:cd:88:d5:70:53:42:ef:a0:56:76: b3:87:50:e1:96:7d:d2:e2:86:cf:05:8d:42:8a:a9: 5a:cb:15:83:a0:0f:26:4b:de:0b:05:aa:ea:ea:c3: cf:b9:9d:3d:30:cb:f1:7e:70:dc:98:94:cb:77:db: 0e:44:cc:d3:8e:55:85:ff:25:d6:e4:1e:74:e0:1a: 2c:75:ba:8f:3e:d5:28:2b:01:08:66:2b:88:be:be: 8c:28:c4:b0:b2:b9:eb:f9:98:d8:ad:d4:ee:d6:2c: eb:97:bb:01:a5:ba:eb:70:5a:e8:29:23:8a:a5:37: ae:12:5d:af:7a:43:ff:00:f1:1e:91:94:b3:a3:94: af:68:90:cd:b8:8e:ac:a6:b9:66:34:b2:c9:ad:d2: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9A:A0:20:87:D6:FC:EB:EF:84:B8:82:D1:28:18:28:1D:37:D5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0c:f1:7e:1b:2d:1b:2b:1c:6b:d4:1a:e7:d9:3c:5a:f2:52: 12:3a:b5:5d:f3:0b:0c:82:8f:cd:8a:82:ca:d2:a9:8a:db:86: f9:b3:b2:f3:11:5b:dc:02:1a:8f:cd:4f:42:eb:02:3d:65:b9: fa:b5:3c:c3:3c:c7:e9:7e:2d:ca:38:66:dd:0f:1d:55:f3:94: 38:75:e7:9a:30:80:ef:59:be:1b:54:e7:aa:94:1e:24:6a:41: a7:9e:91:f1:d1:0c:fe:59:f2:df:23:40:75:d3:15:b4:ec:83: 94:37:ef:ce:b1:27:73:76:d6:92:ae:9f:73:d8:ab:6c:7b:e8: 9d:0e:fd:3a:71:5f:30:5a:f5:2c:b8:3e:af:ef:c9:1d:b4:78: 76:a8:bd:38:bf:ef:98:4b:53:f2:bb:14:ea:11:fb:b9:d9:7d: 16:a6:69:8f:97:10:2e:0c:73:60:67:bc:43:6f:a0:0f:01:52: 1d:6a:38:13:d0:30:33:16:94:3c:37:4a:83:f5:4d:2e:3e:ca: ca:13:a4:75:e4:0b:17:3c:9b:61:fa:07:1f:99:09:32:47:c8: b6:40:df:75:45:7a:8e:06:e1:14:2d:ef:86:9b:89:65:e5:45: b1:fe:00:c5:ea:5a:a9:69:09:15:a7:40:2a:f3:a6:58:24:ec: a2:0d:74:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JffBC+ef+3EXQQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZmMDBmYTEtY2M2Ni00MThiLTg2ODgtYmQyYmI4NmY1NmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodEYCrtUZkjyRwbBJ5+8nmyV0xbIBZ5pZXfQ NqwuudKqnVzHO5ePsL3DlNBquR3YnQQrL6gSaIAKWcXcRst+q3JTyt+fyDbb59wD 8pMYTwjUCAwr/DDsU3UdZqXZ58Z4B0XzoIJgMSPoxxutS82I1XBTQu+gVnazh1Dh ln3S4obPBY1CiqlayxWDoA8mS94LBarq6sPPuZ09MMvxfnDcmJTLd9sORMzTjlWF /yXW5B504BosdbqPPtUoKwEIZiuIvr6MKMSwsrnr+ZjYrdTu1izrl7sBpbrrcFro KSOKpTeuEl2vekP/APEekZSzo5SvaJDNuI6sprlmNLLJrdIj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSaoCCH1vzr74S4gtEoGCgdN9WkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y4ZmYzZjktNTEzNC0z ZjNiLWI3MGYtNWM4ZjVhYTFjNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIM8X4bLRsrHGvUGufZPFryUhI6tV3zCwyCj82KgsrSqYrbhvmzsvMR W9wCGo/NT0LrAj1lufq1PMM8x+l+Lco4Zt0PHVXzlDh155owgO9ZvhtU56qUHiRq QaeekfHRDP5Z8t8jQHXTFbTsg5Q3786xJ3N21pKun3PYq2x76J0O/TpxXzBa9Sy4 Pq/vyR20eHaovTi/75hLU/K7FOoR+7nZfRamaY+XEC4Mc2BnvENvoA8BUh1qOBPQ MDMWlDw3SoP1TS4+ysoTpHXkCxc8m2H6Bx+ZCTJHyLZA33VFeo4G4RQt74abiWXl RbH+AMXqWqlpCRWnQCrzplgk7KINdMg= -----END CERTIFICATE-----Generated at Wed Oct 7 02:31:00 2026 by rpki-client