$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f5167e-3eb5-3231-bb98-d6807b95f2a3.roa File: 04f5167e-3eb5-3231-bb98-d6807b95f2a3.roa (raw, json) Hash identifier: oB08Eft9WNOaPfaNPE3LBQYUP3Tscbs7QEVAOuIR+sQ= Subject key identifier: 97:62:A8:47:51:E0:4A:80:5A:A7:A3:3B:BE:5E:8E:C4:94:CE:CF:D9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAD895EACDEB1AAC78280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f5167e-3eb5-3231-bb98-d6807b95f2a3.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397242 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:ad:89:5e:ac:de:b1:aa:c7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=459a70ae-79ff-4e70-9e9c-23dba7efd90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c9:db:cb:b3:71:67:39:a8:be:33:77:f7:77: 09:cf:b9:d0:56:d2:92:e2:bd:eb:d9:60:67:8f:9b: 2d:43:88:f9:49:52:bb:fa:62:4a:8a:07:3c:2a:63: 3c:3b:05:66:ca:95:05:b9:af:31:15:3f:6a:6e:07: a7:05:4d:33:1d:03:a4:bf:ca:d3:7c:63:06:a8:65: 65:7a:cb:19:58:a7:ee:e7:c2:ce:57:2f:c4:cd:51: bb:81:0f:d6:c7:f6:4e:50:90:d2:f2:78:39:56:34: 22:cc:5e:f1:e6:da:f3:7a:8f:f4:96:e4:bb:85:5c: 01:46:35:a2:77:50:7c:ab:3d:6f:fa:58:78:0e:d7: d6:70:40:a1:96:d2:f2:95:d6:c6:f9:a2:28:11:9f: 94:a6:54:57:ac:2e:4b:8c:7a:ee:bc:dd:d4:98:be: ec:cf:69:9d:e9:3a:a2:f3:3a:93:b2:ec:7b:d0:d4: 3d:a3:db:0d:9d:d3:ad:f6:34:fe:b0:8f:56:99:88: a0:3b:15:df:58:dd:37:d5:b1:ea:ff:c4:d1:cd:01: f7:c0:20:1a:90:68:08:3b:dd:68:18:80:15:a9:68: 9c:a0:fa:a3:a0:d4:2a:52:3b:67:1b:1a:7b:f9:d9: fd:34:d7:c6:a7:71:e9:53:79:74:60:93:66:5d:3a: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:A8:47:51:E0:4A:80:5A:A7:A3:3B:BE:5E:8E:C4:94:CE:CF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/04f5167e-3eb5-3231-bb98-d6807b95f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5a:a6:13:5f:77:c6:7f:fd:67:42:3e:97:3c:77:0b:b2:61: 19:e3:76:d8:2a:8c:49:35:85:c5:97:ba:d5:a9:2e:88:a1:82: 9f:a3:0d:70:4a:37:5b:ac:c5:e5:f8:31:a7:55:1d:8a:4d:84: ad:bd:74:8c:29:5e:39:ee:5b:d1:73:d7:e9:4a:02:96:c0:d0: 2f:2e:f7:a3:9a:59:1d:10:08:e9:07:48:52:65:e3:4c:c3:dc: 3c:b2:90:ac:5d:fb:ff:54:bb:e9:51:9a:1d:11:25:ac:bf:72: 65:8e:fb:0e:03:11:c8:92:c2:5f:39:9d:5f:96:de:b7:5c:76: ba:f1:71:ab:11:80:7c:54:4a:03:62:7e:2c:67:a7:09:74:a7: a1:9a:3a:7c:fa:b1:c6:10:d4:e7:ad:bd:f7:4b:ae:31:ac:73: fc:56:61:d1:64:55:40:7a:d1:9e:3b:ab:b7:6f:96:25:6d:e6: c9:fe:94:01:e0:02:fe:8a:f3:24:9c:f0:88:a6:e7:2c:5e:37: 7d:8e:03:eb:37:15:ec:c7:11:a8:1c:31:40:66:71:5c:e9:4d: 3a:04:f4:f5:04:f9:f4:df:1b:84:b1:d1:b8:97:a7:99:d5:50: 9b:bc:58:9d:8d:f1:dd:17:f3:db:46:7e:8b:d6:cf:41:a9:06: 8e:39:18:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbK2JXqzesarHgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NDU5YTcwYWUtNzlmZi00ZTcwLTllOWMtMjNkYmE3ZWZkOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Mnby7NxZzmovjN393cJz7nQVtKS4r3r2WBn j5stQ4j5SVK7+mJKigc8KmM8OwVmypUFua8xFT9qbgenBU0zHQOkv8rTfGMGqGVl essZWKfu58LOVy/EzVG7gQ/Wx/ZOUJDS8ng5VjQizF7x5trzeo/0luS7hVwBRjWi d1B8qz1v+lh4DtfWcEChltLyldbG+aIoEZ+UplRXrC5LjHruvN3UmL7sz2md6Tqi 8zqTsux70NQ9o9sNndOt9jT+sI9WmYigOxXfWN031bHq/8TRzQH3wCAakGgIO91o GIAVqWicoPqjoNQqUjtnGxp7+dn9NNfGp3HpU3l0YJNmXToucwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdiqEdR4EqAWqejO75ejsSUzs/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDRmNTE2N2UtM2ViNS0z MjMxLWJiOTgtZDY4MDdiOTVmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBaphNfd8Z//WdCPpc8dwuyYRnjdtgqjEk1hcWXutWpLoihgp+jDXBK N1usxeX4MadVHYpNhK29dIwpXjnuW9Fz1+lKApbA0C8u96OaWR0QCOkHSFJl40zD 3DyykKxd+/9Uu+lRmh0RJay/cmWO+w4DEciSwl85nV+W3rdcdrrxcasRgHxUSgNi fixnpwl0p6GaOnz6scYQ1OetvfdLrjGsc/xWYdFkVUB60Z47q7dvliVt5sn+lAHg Av6K8ySc8Iim5yxeN32OA+s3FezHEagcMUBmcVzpTToE9PUE+fTfG4Sx0biXp5nV UJu8WJ2N8d0X89tGfovWz0GpBo45GJI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:08 2025 by rpki-client