$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa File: 21a673b3-386d-3a68-b3c5-63677fc40890.roa (raw, json) Hash identifier: R3Oj+LALNsrmdsbJOgU4YRORdOGV41dN5CDVjZWxQQQ= Subject key identifier: 94:1C:4B:45:89:E3:58:48:EC:CA:2B:E9:F1:40:68:E4:85:6A:5A:56 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C7E08F08221A21B769200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 12008 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7e:08:f0:82:21:a2:1b:76:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=f1f64aeb-4107-4f18-87ea-b8f0cb3a1049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:3d:77:29:71:d0:43:4d:54:fb:ab:0c:29: e8:18:28:97:31:4e:30:ea:13:9f:d7:a4:3d:51:77: 98:1b:48:7e:3f:66:8b:bb:07:2e:8e:07:51:38:36: fd:49:57:29:90:59:8c:3d:ea:f3:97:a9:b5:10:5a: f8:1f:ca:84:41:66:ae:b8:69:a0:54:30:55:b1:f7: 24:76:4d:2b:04:7f:b8:16:13:df:62:8d:36:7d:d3: 2d:ec:56:78:ca:6b:42:1d:f3:a9:83:06:e2:d3:d3: bc:74:b7:c1:d0:a6:75:00:a5:4e:41:50:ff:0f:77: 1c:ea:43:d9:31:cf:74:24:96:a7:18:bf:22:8f:33: 61:0d:60:bf:34:eb:f3:b8:b5:10:11:1f:eb:8e:55: ec:93:27:63:6d:45:87:ea:50:da:6b:0b:57:d9:90: df:0b:eb:2e:e7:e5:fd:70:29:e1:56:e1:2a:b6:79: a8:bc:2f:50:b7:66:d3:27:7c:d5:ba:83:00:e2:00: e8:c3:6a:89:22:93:a0:91:c7:25:73:db:e1:1e:97: 6b:dc:d6:f9:db:ae:f3:b4:94:b2:4f:c4:c8:49:6a: 98:d2:81:9f:dc:bc:01:f7:a1:c8:19:39:c0:53:87: 59:84:08:6a:a6:f1:d5:32:a2:3e:ed:ed:cb:4b:43: 8c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:4B:45:89:E3:58:48:EC:CA:2B:E9:F1:40:68:E4:85:6A:5A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21a673b3-386d-3a68-b3c5-63677fc40890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dc:05:ac:a7:73:d7:bd:af:e2:55:00:59:46:af:a6:7c:36: d3:c6:c0:1e:ea:cc:92:fe:dd:a0:73:f6:25:a3:b7:8c:72:a7: 52:c8:6d:6a:b5:da:ba:64:b8:11:e2:45:fa:ae:45:5c:91:5d: 02:ff:e6:ae:d8:c2:ae:7a:f7:41:8d:bb:cb:1e:60:05:24:7b: 7b:17:ab:d7:c4:e6:a8:f1:36:30:2b:d3:a4:14:dc:d5:99:38: 96:54:d5:26:fc:18:4e:cb:85:2c:f1:b8:58:cb:ed:e0:85:8e: 6f:fc:5b:c1:09:25:02:03:c7:a7:7a:3c:32:c9:88:68:4b:a4: 23:f0:15:58:69:6f:f1:5c:93:31:93:87:7c:8e:7f:a1:ce:aa: 63:10:e9:48:cb:84:97:01:b8:a2:3f:b7:f1:2c:82:be:a3:fd: 85:80:81:80:d1:18:a3:ce:9d:06:f1:b3:41:4c:b0:f4:77:eb: 01:38:c7:0d:e1:a2:ed:0e:4c:df:cf:bc:6d:28:bf:62:c0:a2: e0:dc:4c:51:61:a7:b5:05:e8:6d:8d:af:c5:fd:b9:26:14:75: 88:9d:72:c6:40:c8:9e:70:07:24:12:a7:cb:2a:21:35:ed:0d: 5d:89:3a:36:8f:28:94:30:27:ce:12:b0:34:ef:de:3b:bd:7d: 62:03:e3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbH4I8IIhoht2kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjFmNjRhZWItNDEwNy00ZjE4LTg3ZWEtYjhmMGNiM2ExMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUM9dylx0ENNVPurDCnoGCiXMU4w6hOf16Q9 UXeYG0h+P2aLuwcujgdRODb9SVcpkFmMPerzl6m1EFr4H8qEQWauuGmgVDBVsfck dk0rBH+4FhPfYo02fdMt7FZ4ymtCHfOpgwbi09O8dLfB0KZ1AKVOQVD/D3cc6kPZ Mc90JJanGL8ijzNhDWC/NOvzuLUQER/rjlXskydjbUWH6lDaawtX2ZDfC+su5+X9 cCnhVuEqtnmovC9Qt2bTJ3zVuoMA4gDow2qJIpOgkcclc9vhHpdr3Nb5267ztJSy T8TISWqY0oGf3LwB96HIGTnAU4dZhAhqpvHVMqI+7e3LS0OMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQcS0WJ41hI7Mor6fFAaOSFalpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFhNjczYjMtMzg2ZC0z YTY4LWIzYzUtNjM2NzdmYzQwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3cBaync9e9r+JVAFlGr6Z8NtPGwB7qzJL+3aBz9iWjt4xyp1LIbWq1 2rpkuBHiRfquRVyRXQL/5q7Ywq5690GNu8seYAUke3sXq9fE5qjxNjAr06QU3NWZ OJZU1Sb8GE7LhSzxuFjL7eCFjm/8W8EJJQIDx6d6PDLJiGhLpCPwFVhpb/FckzGT h3yOf6HOqmMQ6UjLhJcBuKI/t/Esgr6j/YWAgYDRGKPOnQbxs0FMsPR36wE4xw3h ou0OTN/PvG0ov2LAouDcTFFhp7UF6G2Nr8X9uSYUdYidcsZAyJ5wByQSp8sqITXt DV2JOjaPKJQwJ84SsDTv3ju9fWID484= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:41 2025 by rpki-client