$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa File: 1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa (raw, json) Hash identifier: YgiDyO4xavnfMw/HpQdsuSa9w/Cpu5xK8GHuUZWdioY= Subject key identifier: A2:C5:0C:53:74:7D:55:88:11:D6:71:7C:DD:D8:FD:11:8D:65:B7:49 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E85E549FF6E0A06E5C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397236 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e8:5e:54:9f:f6:e0:a0:6e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0fc7318d-4b3b-4d58-b753-e87e0be02d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:b0:6f:79:96:9a:24:b0:a6:48:b7:58:77: a1:3c:08:dc:05:0a:b6:5e:68:eb:6e:10:82:0e:e7: 24:b0:08:17:a5:8d:a0:28:ec:1a:20:ea:b3:7c:7f: 8e:63:9d:cd:dd:ed:05:5f:b7:9f:14:9a:4e:f1:b1: fb:7b:95:a3:8b:e6:7a:c4:65:f6:bf:7a:59:1c:28: 91:dd:30:b7:f6:ad:73:85:37:ab:20:0b:bb:4d:52: 10:bf:df:16:3d:24:61:67:11:11:35:9e:92:d9:f5: f0:a8:29:33:47:aa:ce:56:11:be:6d:75:03:f7:85: 77:12:b9:a0:2b:b7:60:ee:e4:5b:8a:64:6c:c7:b7: 3e:ab:fd:43:fc:5b:a5:35:3d:70:b5:a8:5c:40:75: ef:c5:47:fb:25:27:88:ed:1d:19:02:74:24:97:0f: 37:b0:0a:0c:52:07:c9:2a:74:7d:e9:db:e3:6a:2c: de:40:34:cc:de:57:cb:73:4c:0a:bf:f8:7a:8d:34: bf:34:4e:37:d9:04:08:cb:8b:fa:2c:b2:87:33:18: 1c:5e:70:ff:6c:2b:32:10:b7:a3:e4:82:94:d4:0a: 90:1f:21:69:8c:51:15:16:66:b7:6a:e5:77:21:05: 6d:4e:c4:06:ea:a9:2f:15:30:cf:ea:6c:8c:5e:23: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:0C:53:74:7D:55:88:11:D6:71:7C:DD:D8:FD:11:8D:65:B7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1f08fa4d-0ade-3e8a-9829-5c67fe317960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1d:55:f8:8b:1a:e6:32:ef:10:01:5c:c4:e2:6f:63:74:0e: 61:bb:2b:0a:f3:f7:3e:05:01:95:9d:94:7d:a9:ea:2a:70:09: 0c:44:95:1f:80:2e:e1:e0:28:d5:4a:e7:78:fc:d1:f6:9e:19: 18:87:3d:6b:8d:8e:dc:65:3f:b8:13:cb:79:fd:39:c7:98:79: 31:85:c4:a5:ed:48:00:30:81:25:e6:c9:a5:f9:93:a4:a5:2b: 39:76:60:0c:19:38:2d:b6:cb:17:5c:e4:ad:64:8f:c9:0e:2c: 24:e7:d3:93:7a:81:ba:0a:3c:24:49:16:3f:7b:9b:8b:e6:e7: b3:4a:01:3b:29:d2:1a:12:96:7f:b0:d0:1b:2b:32:60:41:e4: 07:00:70:22:61:73:4b:ba:01:c5:3e:83:02:85:a6:bd:b9:c5: b5:72:e0:3e:32:ef:b4:3b:ed:ca:35:fc:7c:cc:d4:3e:39:f8: 54:4b:2b:34:22:bc:d7:c7:3f:83:14:dc:f6:1e:8f:09:67:d2: 4d:d4:a7:62:e5:10:a6:71:8c:9f:03:5d:e1:95:5e:3f:cc:3c: 58:ff:5a:13:77:d5:ba:ca:dd:e7:cb:41:b8:ac:9a:c4:07:78: 31:3c:2c:e0:61:43:0f:28:fc:3b:c0:6d:71:db:a7:7a:41:83: ef:58:a4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eheVJ/24KBuXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGZjNzMxOGQtNGIzYi00ZDU4LWI3NTMtZTg3ZTBiZTAyZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznuwb3mWmiSwpki3WHehPAjcBQq2XmjrbhCC DucksAgXpY2gKOwaIOqzfH+OY53N3e0FX7efFJpO8bH7e5Wji+Z6xGX2v3pZHCiR 3TC39q1zhTerIAu7TVIQv98WPSRhZxERNZ6S2fXwqCkzR6rOVhG+bXUD94V3Ermg K7dg7uRbimRsx7c+q/1D/FulNT1wtahcQHXvxUf7JSeI7R0ZAnQklw83sAoMUgfJ KnR96dvjaizeQDTM3lfLc0wKv/h6jTS/NE432QQIy4v6LLKHMxgcXnD/bCsyELej 5IKU1AqQHyFpjFEVFma3auV3IQVtTsQG6qkvFTDP6myMXiNONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLFDFN0fVWIEdZxfN3Y/RGNZbdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWYwOGZhNGQtMGFkZS0z ZThhLTk4MjktNWM2N2ZlMzE3OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcdVfiLGuYy7xABXMTib2N0DmG7Kwrz9z4FAZWdlH2p6ipwCQxElR+A LuHgKNVK53j80faeGRiHPWuNjtxlP7gTy3n9OceYeTGFxKXtSAAwgSXmyaX5k6Sl Kzl2YAwZOC22yxdc5K1kj8kOLCTn05N6gboKPCRJFj97m4vm57NKATsp0hoSln+w 0BsrMmBB5AcAcCJhc0u6AcU+gwKFpr25xbVy4D4y77Q77co1/HzM1D45+FRLKzQi vNfHP4MU3PYejwln0k3Up2LlEKZxjJ8DXeGVXj/MPFj/WhN31brK3efLQbismsQH eDE8LOBhQw8o/DvAbXHbp3pBg+9YpHk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:34 2025 by rpki-client