$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f280b02-8398-3cbe-ae0d-60825ca15c2b.roa File: 0f280b02-8398-3cbe-ae0d-60825ca15c2b.roa (raw, json) Hash identifier: FyLhCKL6EELD/66fo2CzDyETJSiC63xBn/e818+BlFU= Subject key identifier: EE:C0:57:60:97:EC:1F:27:6D:FA:C0:D7:E7:C7:49:D0:91:0F:AC:08 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FA4B3267E74916DD1540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f280b02-8398-3cbe-ae0d-60825ca15c2b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397237 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fa:4b:32:67:e7:49:16:dd:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3ca8ae2a-27d5-4193-ac6c-144c5736ca22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:48:6e:69:0c:0c:2a:10:db:d4:39:5c:2a: cc:dd:b2:20:d1:db:26:84:03:8e:da:6b:e7:e5:eb: 34:8e:a7:d3:a3:64:fd:91:18:ec:4a:d3:55:b5:e9: 41:51:88:47:b0:e3:81:59:9d:35:5f:7c:16:6b:7e: 14:ff:ff:50:00:a2:5c:07:3b:9b:44:24:17:d1:c2: 6e:6c:63:96:0d:88:cd:03:f6:1e:8d:8c:0a:78:88: 04:8b:bb:7d:42:08:c0:24:0d:ee:d4:7b:17:3d:07: 16:87:80:93:74:8f:49:f1:d5:58:76:2d:46:37:9b: 82:d9:70:af:d4:c7:07:32:09:51:d6:f3:a3:c3:6c: 29:91:25:b1:cb:bb:ee:d7:a5:0f:15:1a:91:f7:4f: 19:a8:a2:15:d5:38:e8:d4:cc:21:b1:74:d7:06:2f: 43:9f:b9:ab:00:41:78:db:07:2f:20:6a:75:96:06: 4d:f6:c6:96:cb:d0:1b:f7:6d:fc:78:69:67:6a:ab: d3:74:13:97:f8:30:e0:0c:6b:de:31:af:9a:12:7e: 90:6a:4c:3b:87:b9:22:a8:55:18:64:5a:d5:7d:df: 4a:dc:9a:30:45:9f:d2:c3:29:40:61:be:86:d5:2e: e6:9f:fe:22:04:35:b9:e1:43:ad:4d:6d:2d:bb:ad: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:57:60:97:EC:1F:27:6D:FA:C0:D7:E7:C7:49:D0:91:0F:AC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f280b02-8398-3cbe-ae0d-60825ca15c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:40:c8:c6:27:1e:b4:45:8a:09:64:3e:ad:bd:5e:7a:93:66: af:6f:e8:bd:66:82:ad:2b:56:d4:f9:9c:70:92:64:d3:01:5a: 67:ab:d6:07:b2:8b:c4:a1:56:ee:38:fd:45:92:d8:d8:d9:39: 42:6b:e1:a4:54:40:b1:31:4e:ef:e1:d0:41:78:bf:87:04:d3: 57:a5:99:34:aa:e8:34:bf:b6:71:12:8b:b4:b0:73:37:8a:69: 04:36:03:f3:22:a5:62:90:73:57:f3:47:c3:fc:de:39:77:43: 38:07:1b:8d:9e:82:e2:4a:35:73:5f:98:31:b0:5c:c0:cc:e1: 7e:87:b6:d3:40:9a:73:de:5f:90:51:e8:d0:10:c2:ce:9f:16: 3f:a3:57:ef:28:78:7a:67:dd:f9:a8:91:5d:2e:1c:d0:9f:dc: 20:f1:80:99:d5:ad:d9:a6:ae:3d:ff:86:3d:54:92:6b:6f:9e: c5:1d:ed:7d:84:f2:96:55:a6:54:f1:7d:4c:5a:f1:15:b4:a1: c6:a7:52:bb:b6:6b:58:1f:e3:a0:58:89:f8:64:f8:db:b5:c7: fa:04:99:f7:0b:93:65:65:c5:b9:b1:9d:30:cb:c1:4b:ae:4b: 55:08:bb:bb:39:8b:a3:f3:cf:66:8b:24:6f:c2:12:40:ad:cb: 6c:10:27:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fpLMmfnSRbdFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2NhOGFlMmEtMjdkNS00MTkzLWFjNmMtMTQ0YzU3MzZjYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5lIbmkMDCoQ29Q5XCrM3bIg0dsmhAOO2mvn 5es0jqfTo2T9kRjsStNVtelBUYhHsOOBWZ01X3wWa34U//9QAKJcBzubRCQX0cJu bGOWDYjNA/YejYwKeIgEi7t9QgjAJA3u1HsXPQcWh4CTdI9J8dVYdi1GN5uC2XCv 1McHMglR1vOjw2wpkSWxy7vu16UPFRqR908ZqKIV1Tjo1MwhsXTXBi9Dn7mrAEF4 2wcvIGp1lgZN9saWy9Ab9238eGlnaqvTdBOX+DDgDGveMa+aEn6Qakw7h7kiqFUY ZFrVfd9K3JowRZ/SwylAYb6G1S7mn/4iBDW54UOtTW0tu604ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7AV2CX7B8nbfrA1+fHSdCRD6wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGYyODBiMDItODM5OC0z Y2JlLWFlMGQtNjA4MjVjYTE1YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFAyMYnHrRFiglkPq29XnqTZq9v6L1mgq0rVtT5nHCSZNMBWmer1gey i8ShVu44/UWS2NjZOUJr4aRUQLExTu/h0EF4v4cE01elmTSq6DS/tnESi7SwczeK aQQ2A/MipWKQc1fzR8P83jl3QzgHG42eguJKNXNfmDGwXMDM4X6HttNAmnPeX5BR 6NAQws6fFj+jV+8oeHpn3fmokV0uHNCf3CDxgJnVrdmmrj3/hj1UkmtvnsUd7X2E 8pZVplTxfUxa8RW0ocanUru2a1gf46BYifhk+Nu1x/oEmfcLk2VlxbmxnTDLwUuu S1UIu7s5i6Pzz2aLJG/CEkCty2wQJ0s= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:50 2025 by rpki-client