$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa File: 21197f4f-7368-34a6-828b-1465cec16a35.roa (raw, json) Hash identifier: 7i+UQAct7LEGDgYky0kmQJ9S1h0DxsqhOxUJlfMZqvM= Subject key identifier: D0:5E:A7:B5:14:1E:2D:6D:0F:6B:16:C4:FA:4B:92:4C:05:11:C5:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1CF1740BCA555759F4280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cf:17:40:bc:a5:55:75:9f:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a8fee8db-b07a-45f0-9af7-3ef8ea3fc665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:90:60:96:46:c8:82:6e:d7:93:21:b1:e0: 04:57:3e:12:92:d0:e0:a1:1d:bd:9d:94:8d:6b:71: 41:40:5d:ed:ff:73:bd:74:c7:d7:4c:2f:cf:45:5a: 97:c6:4f:d1:ec:67:79:0d:bd:0a:91:02:e4:69:e5: 9b:fe:78:5e:d0:dd:df:f4:a7:3b:dc:60:9d:d3:85: 2a:8d:d9:8d:cb:81:e4:f3:0a:4e:3b:18:eb:c9:70: 6f:a9:83:f4:e3:d5:5c:06:14:b6:e3:0a:c8:49:9e: f3:a6:c4:c8:2f:73:d8:1c:0a:0d:e4:bc:15:a1:b6: d6:f7:2a:d3:6f:91:a4:6c:8d:cf:f4:93:da:15:d0: ab:c9:42:05:61:52:1a:d1:e8:67:8c:ec:22:7d:67: f0:6e:5f:7b:48:12:e3:00:f5:f8:1e:f6:65:33:59: a2:65:e3:fa:fa:ff:70:9e:4f:68:0d:41:13:23:8d: f3:98:35:55:b3:4f:7c:4a:52:e6:7e:23:b5:45:cc: b9:30:d8:d8:8c:4c:db:b2:5a:2d:2c:26:f5:de:c7: 6b:59:ff:ca:e5:a4:fb:35:0c:68:93:88:c2:68:98: 7e:27:d5:ba:57:02:9e:53:99:30:b8:69:ba:a9:10: 6a:b0:31:ef:c1:a5:53:4d:0f:b6:8a:75:c0:78:76: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:A7:B5:14:1E:2D:6D:0F:6B:16:C4:FA:4B:92:4C:05:11:C5:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21197f4f-7368-34a6-828b-1465cec16a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:41:72:db:0e:ef:5f:e8:08:a5:04:cc:99:a3:08:c6:ed:53: 80:9d:ab:ad:73:db:bf:5f:56:bc:19:b7:8a:17:ca:37:c1:4c: 7f:fd:c8:72:f2:b4:58:3d:c5:a2:d2:7c:35:71:70:db:71:5d: 2b:f3:75:12:1a:9e:ef:47:8c:5b:19:a1:a3:c7:0f:20:3b:88: ec:e6:41:d8:70:9d:d5:07:c5:78:55:28:a9:8c:be:0d:57:c5: db:28:d2:a5:22:aa:b3:b0:84:b7:9c:16:a9:0b:74:30:bc:65: 22:4f:57:0b:4e:29:12:01:b1:74:76:81:de:91:22:4a:4f:b7: 85:d8:9c:34:8f:cc:bf:c4:23:0f:5a:80:19:ae:c6:c4:0e:c2: 44:28:b4:4c:d7:8e:16:ac:f6:49:dc:28:99:6e:9c:9e:8f:fd: d3:a2:ac:69:d1:f7:9e:fb:37:af:98:fc:5e:ba:61:08:a1:b1: 39:ea:31:be:d5:9b:85:32:a6:46:0b:79:95:18:59:02:7e:0a: 68:40:20:50:f5:d0:e4:cd:d9:69:da:f6:71:eb:09:74:65:b5: d6:31:ae:6f:92:97:29:50:8b:1d:fb:a4:c1:f6:45:9f:82:9d: 09:70:37:33:4b:4a:7d:68:49:ae:3a:f2:d7:a9:0a:59:99:1b: ba:7d:b8:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4c8XQLylVXWfQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YThmZWU4ZGItYjA3YS00NWYwLTlhZjctM2VmOGVhM2ZjNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE6QYJZGyIJu15MhseAEVz4SktDgoR29nZSN a3FBQF3t/3O9dMfXTC/PRVqXxk/R7Gd5Db0KkQLkaeWb/nhe0N3f9Kc73GCd04Uq jdmNy4Hk8wpOOxjryXBvqYP049VcBhS24wrISZ7zpsTIL3PYHAoN5LwVobbW9yrT b5GkbI3P9JPaFdCryUIFYVIa0ehnjOwifWfwbl97SBLjAPX4HvZlM1miZeP6+v9w nk9oDUETI43zmDVVs098SlLmfiO1Rcy5MNjYjEzbslotLCb13sdrWf/K5aT7NQxo k4jCaJh+J9W6VwKeU5kwuGm6qRBqsDHvwaVTTQ+2inXAeHZSQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBep7UUHi1tD2sWxPpLkkwFEcUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjExOTdmNGYtNzM2OC0z NGE2LTgyOGItMTQ2NWNlYzE2YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFBctsO71/oCKUEzJmjCMbtU4Cdq61z279fVrwZt4oXyjfBTH/9yHLy tFg9xaLSfDVxcNtxXSvzdRIanu9HjFsZoaPHDyA7iOzmQdhwndUHxXhVKKmMvg1X xdso0qUiqrOwhLecFqkLdDC8ZSJPVwtOKRIBsXR2gd6RIkpPt4XYnDSPzL/EIw9a gBmuxsQOwkQotEzXjhas9kncKJlunJ6P/dOirGnR9577N6+Y/F66YQihsTnqMb7V m4UypkYLeZUYWQJ+CmhAIFD10OTN2Wna9nHrCXRltdYxrm+SlylQix37pMH2RZ+C nQlwNzNLSn1oSa468tepClmZG7p9uMk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:24 2025 by rpki-client