$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa File: 1a562be1-0f38-329e-9220-4ee56ca11b64.roa (raw, json) Hash identifier: zQuyUhjxWcsmsx3P3+ffcvSi8H39c/MArcjlF6tgD0w= Subject key identifier: 59:F7:22:54:57:06:E2:B3:5D:1F:89:15:56:62:B9:EB:FE:30:2A:02 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA60936D8417E4D1D9E40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397230 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a6:09:36:d8:41:7e:4d:1d:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=cec211ec-16d7-48fb-a734-eba0d3d298e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:3b:e7:a6:fb:ac:8e:97:68:9b:eb:3b:f3: ea:cd:6c:d9:e4:ad:86:02:19:6e:c7:28:12:b8:a4: 33:6c:15:ae:32:92:f5:0a:91:7f:14:5d:f9:e3:74: 49:93:fc:db:21:74:3a:c5:bd:98:dd:d9:39:0f:be: 7e:53:05:11:7c:07:1d:92:3f:df:4a:cb:e7:7c:ed: a6:1a:f4:f2:b9:a1:5e:6c:95:f8:19:a0:dc:1f:ae: 99:b1:b7:8d:c2:c0:f2:b1:2d:bb:07:a2:7c:70:ca: 4f:38:f4:8b:56:d1:8b:e7:c0:3d:16:96:4f:14:5e: a1:c1:e5:af:4f:82:ac:73:36:f1:68:5c:4f:43:be: 36:fa:a1:6b:7b:32:bc:28:ab:e1:a9:04:1f:c7:e5: 24:b0:f2:97:5b:57:f7:d7:a1:7e:ee:71:a5:52:68: c0:c1:66:f5:f3:d0:54:76:56:da:48:8a:2e:d8:04: e4:9d:f5:ba:f6:d9:20:81:da:a0:3e:6e:b1:66:55: 0c:41:1d:99:bb:e9:e8:d8:05:e6:25:64:f3:ed:b0: 8c:95:2a:75:3f:a0:fb:2d:55:1a:df:13:10:28:3a: bb:c2:a7:17:b1:d8:88:f6:7e:84:ea:d6:61:e9:e6: f1:02:87:03:cb:bd:6d:e2:d3:19:91:42:4c:ae:74: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:22:54:57:06:E2:B3:5D:1F:89:15:56:62:B9:EB:FE:30:2A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a562be1-0f38-329e-9220-4ee56ca11b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:34:cc:7a:37:4f:1d:dc:b1:13:c0:5e:9f:c8:f0:2a:ce:e7: 11:1e:db:c0:81:b0:06:14:9b:90:93:19:38:1b:a5:c2:11:3c: e9:05:00:30:8d:27:df:dd:19:ea:be:e8:b3:4b:41:3d:5c:40: 2b:be:7b:bf:7b:ef:48:8c:58:c4:7e:0f:29:41:9f:dd:19:69: c7:58:1c:78:a5:d9:77:55:de:4e:c5:38:08:ea:73:0f:ef:b9: 1a:e1:fa:e6:f8:48:fd:53:08:f1:44:3f:9b:10:24:76:b1:96: cc:8c:16:ef:3e:f4:a4:d1:e6:9f:f8:3e:fb:42:1a:e4:49:0b: 50:bd:22:c1:0b:22:51:d7:b1:28:fd:00:75:6d:dd:be:07:f4: f3:0b:c1:57:7f:10:83:4a:06:b8:ce:bd:b5:be:14:63:7c:d9: 51:b4:3a:69:99:5d:24:1e:73:f4:6d:09:f1:8a:40:d5:78:31: 5a:3c:a8:21:c4:4e:91:c0:a1:2c:f9:88:9e:9e:59:76:59:22: 59:56:af:8f:c9:18:4f:1e:35:f0:96:fc:d4:c5:e9:cd:16:25: ac:5e:89:ca:d6:f5:96:4c:79:15:ef:e2:f6:25:52:69:56:d9: 5e:ae:bd:e6:d4:b8:8e:5d:83:df:26:5d:18:d4:aa:8c:51:b3: af:5a:86:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKYJNthBfk0dnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2VjMjExZWMtMTZkNy00OGZiLWE3MzQtZWJhMGQzZDI5OGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFo756b7rI6XaJvrO/PqzWzZ5K2GAhluxygS uKQzbBWuMpL1CpF/FF3543RJk/zbIXQ6xb2Y3dk5D75+UwURfAcdkj/fSsvnfO2m GvTyuaFebJX4GaDcH66ZsbeNwsDysS27B6J8cMpPOPSLVtGL58A9FpZPFF6hweWv T4KsczbxaFxPQ742+qFrezK8KKvhqQQfx+UksPKXW1f316F+7nGlUmjAwWb189BU dlbaSIou2ATknfW69tkggdqgPm6xZlUMQR2Zu+no2AXmJWTz7bCMlSp1P6D7LVUa 3xMQKDq7wqcXsdiI9n6E6tZh6ebxAocDy71t4tMZkUJMrnRJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn3IlRXBuKzXR+JFVZiuev+MCoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWE1NjJiZTEtMGYzOC0z MjllLTkyMjAtNGVlNTZjYTExYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs0zHo3Tx3csRPAXp/I8CrO5xEe28CBsAYUm5CTGTgbpcIRPOkFADCN J9/dGeq+6LNLQT1cQCu+e79770iMWMR+DylBn90ZacdYHHil2XdV3k7FOAjqcw/v uRrh+ub4SP1TCPFEP5sQJHaxlsyMFu8+9KTR5p/4PvtCGuRJC1C9IsELIlHXsSj9 AHVt3b4H9PMLwVd/EINKBrjOvbW+FGN82VG0OmmZXSQec/RtCfGKQNV4MVo8qCHE TpHAoSz5iJ6eWXZZIllWr4/JGE8eNfCW/NTF6c0WJaxeicrW9ZZMeRXv4vYlUmlW 2V6uvebUuI5dg98mXRjUqoxRs69ahtY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:01 2025 by rpki-client