$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a08eb4e-87fd-38e9-8a1a-2527cd64db61.roa File: 1a08eb4e-87fd-38e9-8a1a-2527cd64db61.roa (raw, json) Hash identifier: u1ejSDBMgb01LQ67XrEhA5K2U1bH6GSKUHXZWP9kx7Y= Subject key identifier: DC:90:45:14:A2:35:64:F2:C3:D1:9F:BA:43:84:4D:26:88:E3:AC:CF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA5BEF5A58582F6E65140 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a08eb4e-87fd-38e9-8a1a-2527cd64db61.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397226 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a5:be:f5:a5:85:82:f6:e6:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=c2da80f3-2997-4056-84e3-77840d54f824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:b9:5d:5c:1b:cc:91:44:c7:67:79:5f:b8: 9e:cf:36:cb:07:20:66:55:aa:bf:7f:1f:d3:a0:90: 69:24:26:6f:c1:ac:59:1a:78:8f:6b:01:e2:07:78: 0b:7b:9a:00:c0:ed:94:48:8c:54:c3:06:53:7e:15: 80:0c:d0:ae:a4:f6:7f:4c:ed:3d:0c:88:77:e7:7b: 24:2e:b5:df:b7:84:55:59:a2:b2:03:dc:c3:88:56: bc:cb:73:39:6e:2e:88:74:b8:cc:f3:96:f2:c7:32: 64:c5:f9:15:a1:4b:01:21:53:ca:88:3f:4f:0a:67: 8c:c1:4d:a5:29:2c:48:ae:17:c6:77:14:d3:55:0a: a5:94:d1:fd:a8:d2:5c:7b:81:45:2d:21:23:a5:6f: 04:e3:7b:f2:b1:5d:ce:8d:0a:c8:0f:36:26:93:a1: 35:a3:d2:1f:d5:1f:96:fe:1f:c7:ad:3c:af:40:68: bc:e7:f3:3b:62:af:a3:1e:04:38:0e:13:dc:c2:3e: 3e:2e:96:04:e5:49:3d:e3:f6:56:0a:fa:0a:50:de: ec:f2:ad:f1:a4:cd:d2:51:fa:e3:cd:4f:b7:8f:12: b8:2c:8c:6b:c1:f7:9b:b5:ab:2e:fc:cc:40:ee:6e: 36:a8:bc:f7:a3:24:df:06:a4:b6:ea:73:33:05:6c: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:45:14:A2:35:64:F2:C3:D1:9F:BA:43:84:4D:26:88:E3:AC:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a08eb4e-87fd-38e9-8a1a-2527cd64db61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5a:f1:5d:2a:62:58:5b:c0:83:41:d0:9e:3c:db:af:70:22: 08:52:25:b9:ec:f0:2e:60:e2:f6:7a:48:7c:e0:ff:75:d1:0e: db:94:e6:86:00:99:55:6b:f0:42:65:b7:e0:02:88:49:d5:33: 01:fd:b4:2d:51:a9:1b:4b:c1:1c:06:76:94:06:d0:9a:44:77: 08:2e:9b:34:2a:de:da:20:34:06:7d:85:42:09:e7:38:00:9f: 09:87:20:15:d7:41:8c:d6:19:c1:5c:4d:58:be:a9:0e:08:21: 25:53:2f:6a:2e:2f:4d:f8:fa:27:3c:fb:fa:d6:a9:4b:90:9e: a8:ef:d3:94:71:66:44:57:52:6a:66:ea:b5:ee:68:27:fe:44: a2:ae:cd:49:6d:42:ed:85:a4:4c:b9:3d:81:c7:99:cf:0d:bd: 42:28:67:16:61:05:98:f8:26:3f:db:37:31:37:a8:4a:b9:1d: c6:d5:cd:a0:68:1c:a0:a4:5b:03:9c:90:44:f0:f7:4d:7c:9a: 7a:ca:f5:cc:bf:13:59:01:9c:10:74:3c:de:af:5c:ca:5f:a0: c7:89:34:63:55:95:82:ef:9f:a0:0e:05:aa:11:a1:03:ef:ca: f8:7a:3a:31:4b:b6:fb:b2:70:83:66:0a:0a:a5:00:b9:b2:ee: 30:d3:67:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKW+9aWFgvbmUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YzJkYTgwZjMtMjk5Ny00MDU2LTg0ZTMtNzc4NDBkNTRmODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYS5XVwbzJFEx2d5X7iezzbLByBmVaq/fx/T oJBpJCZvwaxZGniPawHiB3gLe5oAwO2USIxUwwZTfhWADNCupPZ/TO09DIh353sk LrXft4RVWaKyA9zDiFa8y3M5bi6IdLjM85byxzJkxfkVoUsBIVPKiD9PCmeMwU2l KSxIrhfGdxTTVQqllNH9qNJce4FFLSEjpW8E43vysV3OjQrIDzYmk6E1o9If1R+W /h/HrTyvQGi85/M7Yq+jHgQ4DhPcwj4+LpYE5Uk94/ZWCvoKUN7s8q3xpM3SUfrj zU+3jxK4LIxrwfebtasu/MxA7m42qLz3oyTfBqS26nMzBWxrOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyQRRSiNWTyw9GfukOETSaI46zPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWEwOGViNGUtODdmZC0z OGU5LThhMWEtMjUyN2NkNjRkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBa8V0qYlhbwINB0J48269wIghSJbns8C5g4vZ6SHzg/3XRDtuU5oYA mVVr8EJlt+ACiEnVMwH9tC1RqRtLwRwGdpQG0JpEdwgumzQq3togNAZ9hUIJ5zgA nwmHIBXXQYzWGcFcTVi+qQ4IISVTL2ouL034+ic8+/rWqUuQnqjv05RxZkRXUmpm 6rXuaCf+RKKuzUltQu2FpEy5PYHHmc8NvUIoZxZhBZj4Jj/bNzE3qEq5HcbVzaBo HKCkWwOckETw9018mnrK9cy/E1kBnBB0PN6vXMpfoMeJNGNVlYLvn6AOBaoRoQPv yvh6OjFLtvuycINmCgqlALmy7jDTZ5U= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:41 2025 by rpki-client