$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa File: 1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa (raw, json) Hash identifier: MgErUZh7+LITJSDDCyS/H5SMR6HiEUnHbIDJnK9Sb7o= Subject key identifier: 95:26:BF:ED:BC:3F:61:5E:A6:F9:4F:2B:65:E8:B4:37:51:D3:43:40 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E555805542A60B83E700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397220 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e5:55:80:55:42:a6:0b:83:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=eb61827e-31f6-4d3a-b09c-820dcc8ec039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:75:ae:a4:3d:09:ac:ab:a8:3b:98:59:37: a5:5f:bf:23:31:ef:bb:f7:f9:7b:44:50:b4:cf:cd: 81:d3:22:45:68:38:bf:e7:df:9f:7f:e6:a3:ac:05: 86:c3:26:89:bd:ce:e0:35:1b:3c:17:17:88:7f:e7: 34:42:0b:71:14:6e:d4:a2:85:37:32:fe:c6:f2:f9: 93:55:51:41:0d:fc:07:e6:df:a5:4f:8e:a7:8e:50: 38:7c:00:89:02:72:3c:a2:0c:dc:d3:58:9f:19:fa: 61:1e:7d:27:d7:84:d9:7d:56:be:28:6b:51:20:fb: 8a:4f:ca:6f:34:c0:95:65:9f:3b:51:60:53:5d:6a: ef:2a:5d:6e:14:bb:aa:ef:7d:c2:64:96:a0:8c:72: 3a:38:3e:de:e6:b4:78:2b:59:9b:17:f1:73:4d:8b: de:4e:c0:c1:bc:08:3b:2c:84:09:49:72:a8:84:b2: 8b:d6:a9:ed:9e:c4:74:f4:4c:25:87:55:a4:67:58: e9:a8:bf:21:66:53:80:2b:c7:91:e9:0f:fb:0d:bd: 81:ff:e3:d6:f6:8b:1b:7b:67:89:3e:1e:08:44:15: e0:3c:d1:dd:11:7c:a4:cf:17:ae:be:7a:bb:de:00: 38:ae:68:6c:53:04:85:4b:fe:f1:51:60:b8:7e:99: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:26:BF:ED:BC:3F:61:5E:A6:F9:4F:2B:65:E8:B4:37:51:D3:43:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a622cd1-2bfa-3115-9291-bdeba2c112a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d0:f5:f9:a6:92:53:2f:50:02:b6:12:6e:c2:ff:a9:56:6f: db:b6:ea:37:5e:b2:17:92:07:fd:75:6b:e1:bf:6b:d2:5e:fe: 6a:c1:0e:1b:2e:44:e5:53:c1:60:28:b2:bd:93:f4:7e:39:2e: 80:dd:d1:f7:2c:66:48:a9:59:10:8f:00:9e:1f:37:22:2c:44: 53:b5:6a:82:d9:4e:5f:fb:f9:77:0c:20:34:c5:e9:ad:bc:21: 2e:fd:6d:73:00:38:27:ec:60:0d:df:2c:69:ef:14:96:22:86: cf:25:9f:e8:ea:da:92:05:25:ea:02:85:47:5d:08:7a:93:60: fd:94:e0:b7:f0:4d:73:91:38:15:28:aa:f5:61:58:ec:e2:79: 55:a4:1a:8b:aa:ea:88:c8:ac:e7:3e:f3:df:66:44:70:54:9b: 44:f3:1d:f7:50:b2:26:f0:67:e0:57:0c:0a:56:65:e8:33:85: 6d:28:8f:2c:4f:a9:72:42:81:dc:c7:66:f9:4b:62:4a:a7:07: 51:f4:e6:44:50:2d:22:96:31:2c:3e:b4:a3:36:a0:bb:48:d9: 2e:54:d3:f5:29:3a:ad:99:53:2e:35:9b:ce:fe:69:1f:82:47: 0f:f4:8a:eb:25:82:85:b6:0e:d1:4d:13:bf:f0:ca:de:9b:d2: 33:f0:6d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eVVgFVCpguD5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWI2MTgyN2UtMzFmNi00ZDNhLWIwOWMtODIwZGNjOGVjMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jh1rqQ9CayrqDuYWTelX78jMe+79/l7RFC0 z82B0yJFaDi/59+ff+ajrAWGwyaJvc7gNRs8FxeIf+c0QgtxFG7UooU3Mv7G8vmT VVFBDfwH5t+lT46njlA4fACJAnI8ogzc01ifGfphHn0n14TZfVa+KGtRIPuKT8pv NMCVZZ87UWBTXWrvKl1uFLuq733CZJagjHI6OD7e5rR4K1mbF/FzTYveTsDBvAg7 LIQJSXKohLKL1qntnsR09Ewlh1WkZ1jpqL8hZlOAK8eR6Q/7Db2B/+PW9osbe2eJ Ph4IRBXgPNHdEXykzxeuvnq73gA4rmhsUwSFS/7xUWC4fpkvWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUmv+28P2FepvlPK2XotDdR00NAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWE2MjJjZDEtMmJmYS0z MTE1LTkyOTEtYmRlYmEyYzExMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnQ9fmmklMvUAK2Em7C/6lWb9u26jdesheSB/11a+G/a9Je/mrBDhsu ROVTwWAosr2T9H45LoDd0fcsZkipWRCPAJ4fNyIsRFO1aoLZTl/7+XcMIDTF6a28 IS79bXMAOCfsYA3fLGnvFJYihs8ln+jq2pIFJeoChUddCHqTYP2U4LfwTXOROBUo qvVhWOzieVWkGouq6ojIrOc+899mRHBUm0TzHfdQsibwZ+BXDApWZegzhW0ojyxP qXJCgdzHZvlLYkqnB1H05kRQLSKWMSw+tKM2oLtI2S5U0/UpOq2ZUy41m87+aR+C Rw/0iuslgoW2DtFNE7/wyt6b0jPwbTg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:45 2025 by rpki-client