$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa File: 20a1ef9a-507c-32e7-a417-2c2460c4b459.roa (raw, json) Hash identifier: lUs/Hvpew4DIdQgjARYfVemjjIq/SF/Jxy9n87sXYtg= Subject key identifier: 74:25:AA:35:F3:5E:49:F7:A5:35:57:34:1A:B6:B0:DB:89:E7:EC:DD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FB9A3922136443A7FB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fb:9a:39:22:13:64:43:a7:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e6c95692-c3df-4912-b959-5dff4adc6ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:87:6e:c8:5e:61:a0:ad:06:77:7d:93:8c:6f: 50:b3:45:25:fd:7f:cf:ed:e0:a3:9c:a6:29:c7:c8: 3f:1a:9f:e0:68:76:64:dd:ee:fe:03:1f:f1:e1:c5: 51:62:1c:35:63:fe:1b:fc:3d:b0:9e:36:6d:f3:a1: 07:ef:9a:06:66:a2:4b:ac:50:94:6c:b0:b2:71:c0: 2e:e4:2f:86:89:e6:dd:5e:96:b3:55:b4:d5:5f:b9: 1b:e1:fc:e5:e7:79:b8:34:99:47:42:25:fb:e1:ed: 2a:a0:81:f4:5d:3e:28:17:98:37:c9:09:39:66:32: 48:d7:6d:ae:74:86:72:d6:ae:76:2a:89:19:c2:42: 72:1a:ac:51:94:75:d0:8f:95:2d:c7:46:64:b8:55: 12:21:83:4a:14:39:23:6e:07:01:f1:f7:c0:6c:62: 71:70:36:b5:0c:25:69:62:fa:ff:47:f1:4c:9c:d2: 1e:ea:f0:af:76:d9:a1:3f:5d:8d:0e:0f:cc:f2:55: 99:0d:f7:36:2d:78:d3:1e:70:7b:86:06:0d:b3:76: 7c:dc:3d:1d:05:c2:5a:d2:76:9f:a3:19:a6:7a:d1: 34:c6:3b:ce:68:bf:29:bc:83:ef:e7:42:5a:e9:d2: 91:1a:e4:d3:60:69:22:e6:74:7d:dc:f1:b8:58:6c: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:AA:35:F3:5E:49:F7:A5:35:57:34:1A:B6:B0:DB:89:E7:EC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20a1ef9a-507c-32e7-a417-2c2460c4b459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d5:cb:4f:01:50:ac:b8:32:37:28:8e:f0:0b:d6:bd:26:aa: cc:11:b0:99:d7:6a:fe:5a:8b:c4:e6:82:49:56:9b:e8:4d:b4: ec:dc:11:d7:6c:bd:05:14:b6:08:0c:06:1e:df:5e:a0:f1:d8: e0:a2:d0:dc:d1:08:76:a0:57:34:93:80:2c:bd:22:c4:d1:82: 4e:36:4b:47:84:0f:e2:a8:4f:c3:78:d1:05:fe:59:38:b0:a2: c8:63:a0:e9:9e:9b:d5:8b:36:9f:aa:5d:52:00:c2:c3:0b:81: 5e:9d:fd:6a:7f:69:bf:cc:be:ed:70:0a:13:88:47:da:46:50: 79:e2:98:94:f8:c2:ff:af:d9:69:9c:bb:aa:ef:f8:01:67:bb: b3:a4:1d:4e:f2:78:4a:b9:34:3e:fc:e7:9d:32:64:7a:6f:09: f8:e8:fc:08:30:04:18:20:6f:31:01:6e:02:e8:92:9b:df:91: d2:29:d6:5f:70:28:f7:d3:c5:e9:2a:57:b9:df:d7:7b:76:17: 8a:fe:05:d9:dc:ce:76:ec:5a:12:96:35:9d:7a:9d:e8:26:3a: 3f:b5:8d:cb:47:34:6c:a8:7b:68:00:3b:ab:f8:aa:68:b9:e5: 15:c0:00:c4:c7:d4:ce:42:f5:45:d0:48:92:2b:cf:1e:84:06: 65:dd:e3:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fuaOSITZEOn+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTZjOTU2OTItYzNkZi00OTEyLWI5NTktNWRmZjRhZGM2ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYduyF5hoK0Gd32TjG9Qs0Ul/X/P7eCjnKYp x8g/Gp/gaHZk3e7+Ax/x4cVRYhw1Y/4b/D2wnjZt86EH75oGZqJLrFCUbLCyccAu 5C+GiebdXpazVbTVX7kb4fzl53m4NJlHQiX74e0qoIH0XT4oF5g3yQk5ZjJI122u dIZy1q52KokZwkJyGqxRlHXQj5Utx0ZkuFUSIYNKFDkjbgcB8ffAbGJxcDa1DCVp Yvr/R/FMnNIe6vCvdtmhP12NDg/M8lWZDfc2LXjTHnB7hgYNs3Z83D0dBcJa0naf oxmmetE0xjvOaL8pvIPv50Ja6dKRGuTTYGki5nR93PG4WGxTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQlqjXzXkn3pTVXNBq2sNuJ5+zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjBhMWVmOWEtNTA3Yy0z MmU3LWE0MTctMmMyNDYwYzRiNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzVy08BUKy4MjcojvAL1r0mqswRsJnXav5ai8TmgklWm+hNtOzcEdds vQUUtggMBh7fXqDx2OCi0NzRCHagVzSTgCy9IsTRgk42S0eED+KoT8N40QX+WTiw oshjoOmem9WLNp+qXVIAwsMLgV6d/Wp/ab/Mvu1wChOIR9pGUHnimJT4wv+v2Wmc u6rv+AFnu7OkHU7yeEq5ND78550yZHpvCfjo/AgwBBggbzEBbgLokpvfkdIp1l9w KPfTxekqV7nf13t2F4r+BdncznbsWhKWNZ16negmOj+1jctHNGyoe2gAO6v4qmi5 5RXAAMTH1M5C9UXQSJIrzx6EBmXd41E= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:04 2025 by rpki-client