$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/494396d4-1744-341d-8bfd-4b2f0e1e7044.roa File: 494396d4-1744-341d-8bfd-4b2f0e1e7044.roa (raw, json) Hash identifier: UQw7mi+Pxx5Pk4s1Qolf1PeDesTg72wJAD/5Kj8lfEk= Subject key identifier: D0:A7:FA:22:42:12:F3:F8:55:46:9C:88:EC:0F:77:76:F3:8F:D1:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584F62931E149151BEF88B634900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/494396d4-1744-341d-8bfd-4b2f0e1e7044.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 12008 IP address blocks: 156.154.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1e:14:91:51:be:f8:8b:63:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1c2efd91-d622-4758-8f84-08921f91cf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:1a:bc:95:55:18:91:46:ac:f1:04:ff:7d: 4e:f2:9e:3d:23:3c:1b:51:a3:a4:e1:ee:79:89:a9: 36:45:0d:71:00:4b:29:f7:69:44:b5:a3:d3:71:ae: 99:34:09:c4:69:c2:ae:f6:3a:8c:f1:4c:f8:e2:e2: 00:7d:15:0a:45:fc:08:34:0f:51:ed:10:ab:12:3d: a9:a1:86:48:e9:c9:73:9e:9a:74:58:61:68:37:be: 43:67:c0:ac:22:d5:5a:72:93:23:11:03:c0:93:c1: 52:99:76:25:a5:b2:4a:d1:7a:34:46:b8:e2:83:84: 98:52:d5:35:d3:a4:a9:e0:20:1f:9a:54:0f:ab:6c: 39:24:06:cd:02:7e:bc:73:aa:06:60:c7:5d:fd:00: 0e:3e:69:00:52:62:29:a8:13:cc:dc:b9:f9:67:12: 5f:04:52:c4:4a:00:15:3f:8e:ba:b5:a5:29:d1:bf: 9d:33:bc:c5:72:69:33:d6:23:4a:06:91:fd:b4:fe: e6:dc:3a:61:a9:f3:8f:2c:8b:53:81:46:20:86:cb: 63:3f:b3:38:5e:a7:7c:32:ae:86:9d:f6:00:ca:aa: 3c:cc:ea:ab:0b:5e:17:83:3d:0b:4d:8e:43:b4:03: 35:85:48:8c:b3:f4:29:10:d3:1a:db:7b:9d:d0:68: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:FA:22:42:12:F3:F8:55:46:9C:88:EC:0F:77:76:F3:8F:D1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/494396d4-1744-341d-8bfd-4b2f0e1e7044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c4:43:a6:0d:9b:d6:bb:de:8a:3a:bb:ff:c0:3b:7a:33:0e: a7:5f:ff:45:2f:ac:fd:bf:49:47:50:58:6c:13:aa:c8:de:15: 6b:bb:59:26:3f:30:47:61:1d:cc:18:c7:07:ad:1f:6a:1a:87: f4:f1:1a:67:70:f8:96:94:64:e6:75:16:ce:ae:2a:f9:9f:e5: 55:9f:27:73:ca:cc:11:86:94:80:e9:06:de:44:42:47:49:7c: 43:18:80:e2:2f:ef:11:01:cd:96:73:f2:4a:75:45:b7:46:8f: 51:e0:c6:40:74:ec:3b:df:79:27:e9:94:de:7a:9e:6b:d8:56: 9e:0a:39:89:bf:2e:8e:b5:bf:e6:65:5c:a8:a0:53:7f:1a:99: 06:46:51:d7:89:4d:b3:db:b1:91:60:db:23:9b:23:f0:d2:57: 91:8b:17:65:8c:83:14:33:56:c9:b0:66:9c:aa:8d:9a:50:19: 80:9d:5e:85:f0:5f:e6:8a:e3:da:95:80:37:92:4f:02:d4:df: 26:d4:0d:ae:b5:f8:e7:c2:87:8a:a0:0c:cc:b9:05:92:96:5c: d3:c4:63:eb:0d:5e:ca:ff:52:66:50:85:fa:58:20:12:49:a7: 63:c5:2f:6e:0b:7a:c4:da:3a:da:29:40:25:33:e2:32:f2:69: fc:e4:0d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikx4UkVG++ItjSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWMyZWZkOTEtZDYyMi00NzU4LThmODQtMDg5MjFmOTFjZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvwavJVVGJFGrPEE/31O8p49IzwbUaOk4e55 iak2RQ1xAEsp92lEtaPTca6ZNAnEacKu9jqM8Uz44uIAfRUKRfwINA9R7RCrEj2p oYZI6clznpp0WGFoN75DZ8CsItVacpMjEQPAk8FSmXYlpbJK0Xo0Rrjig4SYUtU1 06Sp4CAfmlQPq2w5JAbNAn68c6oGYMdd/QAOPmkAUmIpqBPM3Ln5ZxJfBFLESgAV P466taUp0b+dM7zFcmkz1iNKBpH9tP7m3DphqfOPLItTgUYghstjP7M4Xqd8Mq6G nfYAyqo8zOqrC14Xgz0LTY5DtAM1hUiMs/QpENMa23ud0Ggz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCn+iJCEvP4VUaciOwPd3bzj9HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDk0Mzk2ZDQtMTc0NC0z NDFkLThiZmQtNGIyZjBlMWU3MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvEQ6YNm9a73oo6u//AO3ozDqdf/0UvrP2/SUdQWGwTqsjeFWu7WSY/ MEdhHcwYxwetH2oah/TxGmdw+JaUZOZ1Fs6uKvmf5VWfJ3PKzBGGlIDpBt5EQkdJ fEMYgOIv7xEBzZZz8kp1RbdGj1HgxkB07DvfeSfplN56nmvYVp4KOYm/Lo61v+Zl XKigU38amQZGUdeJTbPbsZFg2yObI/DSV5GLF2WMgxQzVsmwZpyqjZpQGYCdXoXw X+aK49qVgDeSTwLU3ybUDa61+OfCh4qgDMy5BZKWXNPEY+sNXsr/UmZQhfpYIBJJ p2PFL24LesTaOtopQCUz4jLyafzkDQ4= -----END CERTIFICATE-----Generated at Sun Nov 1 03:33:51 2026 by rpki-client