$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa File: 18d2d9b8-0747-31fe-86ef-f79b42318c54.roa (raw, json) Hash identifier: 7PXrglIcnvYpwwZAoZzoeV0mTMtjf7cRFnjNqiGnevM= Subject key identifier: 78:8E:F0:4E:35:D6:E2:A1:60:61:7F:90:37:81:3B:5E:3F:41:DD:74 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAAD6B8E86D52FD4717C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397233 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:aa:d6:b8:e8:6d:52:fd:47:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=8c2789ae-b25e-41ca-85d1-59aeb0303217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:e8:09:74:41:6e:a4:92:ea:52:0f:9c:a9: f3:e5:c5:44:d0:46:b3:fd:82:3b:b8:30:0d:eb:d7: 46:4c:cb:c6:a8:0e:b0:cb:70:cc:ee:66:bb:0d:24: 36:3b:df:5c:e0:7b:e7:15:dc:a9:b0:14:d4:d4:00: e6:67:37:cc:c3:c6:c3:46:a5:07:27:72:1f:21:d1: 4f:2e:ed:37:e1:7b:8b:9e:4e:19:e0:35:eb:da:2d: 09:c1:c1:19:f6:f0:2e:5d:a0:50:d1:85:e8:c9:0d: 07:44:b7:00:84:dd:6d:2f:36:72:57:8c:93:70:cb: b8:66:b2:18:0d:73:26:c4:db:95:b4:43:47:d7:e0: bf:74:e6:0b:a6:77:a5:bd:8c:1b:26:77:6f:65:95: ca:11:38:a0:64:5b:a1:39:f4:ab:6a:c3:a6:65:90: 05:19:d1:97:31:4c:f1:c9:d3:44:00:df:e0:b3:a6: 41:a5:ec:10:9a:51:5a:85:88:be:4e:4b:21:2d:64: 74:b7:0c:e6:45:f8:b4:b5:58:79:61:d5:d7:ba:4e: 42:49:c6:32:f9:19:52:71:ff:48:8c:d9:5b:f8:ef: 95:a9:17:39:6b:f9:68:ec:65:69:a5:b5:e5:ef:40: 04:08:4f:0a:eb:fc:d7:dc:11:e8:52:b6:1d:54:b3: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8E:F0:4E:35:D6:E2:A1:60:61:7F:90:37:81:3B:5E:3F:41:DD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/18d2d9b8-0747-31fe-86ef-f79b42318c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:83:cc:18:9a:ef:bf:00:ef:7a:6e:66:28:29:bf:a1:6b:c7: fc:33:63:2f:1b:e2:66:10:9f:b8:0f:3b:c2:bc:ad:79:7e:ba: 90:ad:0f:32:d5:1e:68:2f:7e:1c:74:8f:eb:c4:e8:ce:5a:39: 9e:17:ac:6c:4b:e9:e1:b4:1b:d1:8b:3b:a8:0f:cf:4e:57:c4: 7d:7d:88:d9:94:bc:38:1c:7b:3b:45:2a:b8:13:e2:c0:d0:0e: 7d:f8:93:2d:07:64:9d:86:59:1d:98:ab:bf:82:a1:31:ac:d7: 94:f4:9b:ed:7e:94:aa:fa:f1:b6:54:77:18:56:ba:78:69:f6: 83:c8:8a:ed:69:43:1e:03:6e:26:48:a4:1b:99:17:fe:25:8e: bf:dc:6e:ce:1f:f0:93:0a:33:e4:dd:a5:39:7b:52:be:68:b2: 03:3c:59:96:49:44:41:aa:b0:fc:fc:26:4a:26:2e:bb:26:b2: ea:bd:75:87:82:1d:31:89:d8:6f:7c:e2:e0:6a:28:9a:b3:ff: b2:3d:a3:31:32:7e:4f:51:a0:3c:3a:4a:42:8e:5b:a2:69:dd: 2f:69:70:e3:99:10:76:c0:fe:ef:c0:2a:0b:62:3f:44:b6:aa: 11:11:9b:6d:e7:b2:75:6f:14:cc:32:7c:90:10:02:31:91:ac: 0d:6b:bf:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKrWuOhtUv1HF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OGMyNzg5YWUtYjI1ZS00MWNhLTg1ZDEtNTlhZWIwMzAzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy77oCXRBbqSS6lIPnKnz5cVE0Eaz/YI7uDAN 69dGTMvGqA6wy3DM7ma7DSQ2O99c4HvnFdypsBTU1ADmZzfMw8bDRqUHJ3IfIdFP Lu034XuLnk4Z4DXr2i0JwcEZ9vAuXaBQ0YXoyQ0HRLcAhN1tLzZyV4yTcMu4ZrIY DXMmxNuVtENH1+C/dOYLpnelvYwbJndvZZXKETigZFuhOfSrasOmZZAFGdGXMUzx ydNEAN/gs6ZBpewQmlFahYi+TkshLWR0twzmRfi0tVh5YdXXuk5CScYy+RlScf9I jNlb+O+VqRc5a/lo7GVppbXl70AECE8K6/zX3BHoUrYdVLO7lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiO8E411uKhYGF/kDeBO14/Qd10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMThkMmQ5YjgtMDc0Ny0z MWZlLTg2ZWYtZjc5YjQyMzE4YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiDzBia778A73puZigpv6Frx/wzYy8b4mYQn7gPO8K8rXl+upCtDzLV Hmgvfhx0j+vE6M5aOZ4XrGxL6eG0G9GLO6gPz05XxH19iNmUvDgceztFKrgT4sDQ Dn34ky0HZJ2GWR2Yq7+CoTGs15T0m+1+lKr68bZUdxhWunhp9oPIiu1pQx4DbiZI pBuZF/4ljr/cbs4f8JMKM+TdpTl7Ur5osgM8WZZJREGqsPz8JkomLrsmsuq9dYeC HTGJ2G984uBqKJqz/7I9ozEyfk9RoDw6SkKOW6Jp3S9pcOOZEHbA/u/AKgtiP0S2 qhERm23nsnVvFMwyfJAQAjGRrA1rvzI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:55 2025 by rpki-client