$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa File: 06d422c5-14b5-351e-a679-38f447a8f768.roa (raw, json) Hash identifier: fI3pN7QqXjE14pCV2RVM0NhoMUURJQiLNqm/T3tILDA= Subject key identifier: 13:3F:9E:1C:C9:3F:68:6E:07:54:D7:2C:D9:04:E9:5B:D6:D2:F9:E0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B7F520A3FCB0179E23C7F1140 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 12008 IP address blocks: 156.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0a:3f:cb:01:79:e2:3c:7f:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=59f45449-9dbe-4fcc-b284-8e97645e3cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:7a:ef:74:37:51:95:2d:c9:ae:a8:cc:30: 4b:c2:bd:88:d4:44:cf:f9:f5:05:2c:d6:2d:7f:1d: 46:05:b2:6f:f8:c5:3e:bb:e2:20:a9:a7:8f:87:d7: 7d:41:49:45:ff:81:44:ee:0e:f7:7c:fd:a4:d8:88: b3:bf:36:da:2c:9f:2e:c4:9d:92:c6:39:8b:26:0d: 67:25:ce:8e:bb:25:4f:53:f6:50:a2:b1:06:11:a7: f1:17:b6:d2:da:8f:17:50:48:31:30:2a:61:79:9d: b9:bc:52:67:33:b9:c4:58:2e:a1:12:51:98:fe:0b: 45:40:3b:9a:5f:10:87:77:00:9d:55:68:92:6f:c7: 88:a0:cf:92:62:0b:25:1e:6b:49:2a:17:ab:3b:ac: 80:1f:49:2d:cb:9e:eb:76:a8:4c:f5:b3:5f:57:51: 25:f5:a6:aa:61:b1:37:86:3e:0f:e0:5d:da:2b:20: 64:b3:bb:ac:47:25:89:9f:35:d8:67:21:fe:c1:7d: 4e:d6:ed:36:e0:33:53:bb:ca:13:96:22:ea:51:40: 14:fc:6f:24:0a:4e:36:81:08:2c:de:02:8e:1e:54: 3e:11:be:7d:e4:ec:2a:c5:13:96:ba:76:d8:9d:fc: a2:5d:b3:2f:8b:c0:5f:a9:8d:3f:98:9a:f0:60:77: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:9E:1C:C9:3F:68:6E:07:54:D7:2C:D9:04:E9:5B:D6:D2:F9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/06d422c5-14b5-351e-a679-38f447a8f768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dd:d6:46:86:f8:00:4b:70:69:b6:fa:65:59:21:49:c7:54: 2d:ab:c8:d0:ee:41:7a:b1:98:fb:54:e5:36:63:ad:cf:0c:85: 86:e7:a7:f2:9d:b9:37:05:ee:b7:3d:bf:3e:2c:75:7e:c2:b0: 1c:0c:ac:9b:0e:97:a5:7a:f9:bd:ac:8e:5f:72:33:29:38:2b: 5d:8d:e1:78:43:8f:89:26:87:30:da:4e:12:0c:6e:3e:05:87: e1:0e:0b:7d:6a:56:3c:a1:b5:1c:60:ff:7f:1e:0e:c6:ec:c5: a2:ec:2e:15:e1:7d:a8:50:b1:00:e1:df:40:b6:52:26:d7:9f: c9:4a:07:26:13:06:4d:0a:dc:a5:a1:75:c6:b0:a2:22:2c:4e: e4:f7:5f:4b:e2:c4:0f:01:31:1b:92:76:36:1a:9d:b4:77:fd: 2c:54:2e:5f:34:f5:46:1c:88:d5:69:cb:08:79:0a:9c:f9:f0: 40:c0:e9:29:8d:75:31:c0:df:3d:35:3c:13:d4:03:94:d4:98: 99:03:b5:d3:05:b9:a2:75:51:aa:f8:9a:d1:7e:34:08:2b:74: 4d:2f:e0:99:4d:6c:6c:95:2a:9a:85:c7:97:f8:3a:3f:ed:27: 86:a0:66:c6:bf:7f:a6:e4:3b:75:0c:01:d7:02:31:55:db:0e: fc:4b:96:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ugo/ywF54jx/EUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTlmNDU0NDktOWRiZS00ZmNjLWIyODQtOGU5NzY0NWUzY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv69673Q3UZUtya6ozDBLwr2I1ETP+fUFLNYt fx1GBbJv+MU+u+IgqaePh9d9QUlF/4FE7g73fP2k2IizvzbaLJ8uxJ2SxjmLJg1n Jc6OuyVPU/ZQorEGEafxF7bS2o8XUEgxMCpheZ25vFJnM7nEWC6hElGY/gtFQDua XxCHdwCdVWiSb8eIoM+SYgslHmtJKherO6yAH0kty57rdqhM9bNfV1El9aaqYbE3 hj4P4F3aKyBks7usRyWJnzXYZyH+wX1O1u024DNTu8oTliLqUUAU/G8kCk42gQgs 3gKOHlQ+Eb595OwqxROWunbYnfyiXbMvi8BfqY0/mJrwYHdBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM/nhzJP2huB1TXLNkE6VvW0vngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDZkNDIyYzUtMTRiNS0z NTFlLWE2NzktMzhmNDQ3YThmNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLd1kaG+ABLcGm2+mVZIUnHVC2ryNDuQXqxmPtU5TZjrc8MhYbnp/Kd uTcF7rc9vz4sdX7CsBwMrJsOl6V6+b2sjl9yMyk4K12N4XhDj4kmhzDaThIMbj4F h+EOC31qVjyhtRxg/38eDsbsxaLsLhXhfahQsQDh30C2UibXn8lKByYTBk0K3KWh dcawoiIsTuT3X0vixA8BMRuSdjYanbR3/SxULl809UYciNVpywh5Cpz58EDA6SmN dTHA3z01PBPUA5TUmJkDtdMFuaJ1Uar4mtF+NAgrdE0v4JlNbGyVKpqFx5f4Oj/t J4agZsa/f6bkO3UMAdcCMVXbDvxLlq0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:53 2025 by rpki-client