$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa File: 2320dc98-a0d3-352d-a21b-937522d38ffc.roa (raw, json) Hash identifier: xjfqt491FsHMxBpLqqNTRFPD4VdT6AwMuMTGsstD7DM= Subject key identifier: 92:D2:BA:45:4B:4B:D7:E2:80:3E:58:C3:47:DF:B5:B9:B2:E5:DC:38 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C9B65B6B5D56DACBEB000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 12008 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:9b:65:b6:b5:d5:6d:ac:be:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=e3615326-bc75-496e-9368-7f8e4ad0c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:a6:84:e6:cd:b6:0b:80:24:61:cb:92:18: 96:21:46:af:ae:39:a6:c4:15:52:dc:5e:db:54:47: 03:2a:22:3e:28:13:b2:6e:7b:66:52:d7:d4:53:6f: 7d:9b:37:8a:4a:48:14:96:83:90:6d:b7:7f:b9:b4: 3f:8b:ac:49:14:57:33:70:3c:55:5a:22:61:01:ac: 54:d7:b0:e7:d8:de:d1:79:bc:f4:de:2a:52:d0:08: 01:89:3b:98:60:0b:c6:b6:94:d7:65:b9:02:4a:a4: ec:8f:03:53:c5:a8:66:1d:da:2c:c0:ac:37:ca:64: 04:89:3d:a5:03:56:c6:82:21:0d:ab:18:c5:da:17: 36:8a:c7:5d:fe:75:6e:95:8e:ed:be:ba:8e:75:18: 5b:4c:1a:77:d3:b0:3a:bb:4f:8a:4d:0d:74:b8:ed: 4e:c1:6e:31:82:0a:73:eb:35:94:a1:bc:3c:44:b8: 09:28:57:28:ce:88:94:a8:69:da:84:94:08:96:0a: fe:25:96:51:69:66:05:3e:c4:a4:be:af:1f:d8:e0: a5:e0:0a:eb:45:31:8f:87:43:5e:cf:65:c9:c1:64: f2:63:2c:87:f1:68:f6:5f:d1:00:66:7e:db:d3:e0: 60:40:a8:91:0b:9b:82:c5:78:62:f3:cb:46:96:ce: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:BA:45:4B:4B:D7:E2:80:3E:58:C3:47:DF:B5:B9:B2:E5:DC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2320dc98-a0d3-352d-a21b-937522d38ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:05:dd:1b:11:d0:2d:41:c4:39:9d:b1:a4:55:db:cf:eb:bc: 6e:6d:49:67:ee:16:a8:2b:3b:d2:8c:e5:76:3e:3b:37:f7:75: 5d:e1:38:64:b8:ec:07:2e:6d:d2:e8:09:da:9c:04:2b:cd:9a: 8b:ae:c6:33:9a:32:e1:c2:fb:5c:c0:02:4d:96:5a:3b:14:5e: a3:c9:3b:11:27:58:04:da:e4:ed:81:1c:3d:61:c2:27:fa:b6: b9:32:bf:20:7a:0c:e6:ad:6f:f7:a2:e4:b6:b0:c8:32:1e:78: c8:a0:eb:7d:71:f3:ce:01:ed:e6:5f:12:55:47:c6:67:9d:30: 78:b4:a5:30:77:37:e1:ae:15:fe:9e:23:99:07:c6:4c:76:01: 38:f9:3e:a6:16:ff:bb:38:b6:e9:05:17:4a:22:f4:99:f0:40: 4f:01:f0:ef:5e:fa:cc:25:f8:c7:5b:f2:e3:0b:1e:f0:0a:bc: 45:a8:6e:12:dc:23:dd:ae:75:63:74:76:6b:3d:f1:1f:58:75: 33:80:dd:72:20:25:45:c9:db:90:83:66:3d:58:ec:ba:b6:43: 37:69:67:d5:e5:6d:a3:78:7a:93:d1:c0:58:8d:8d:24:ce:21: 3c:c5:37:a1:29:b7:9e:ec:ec:ee:2a:d4:c5:f0:dd:cb:09:0d: 38:7a:88:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJtltrXVbay+sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTM2MTUzMjYtYmM3NS00OTZlLTkzNjgtN2Y4ZTRhZDBjODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmmhObNtguAJGHLkhiWIUavrjmmxBVS3F7b VEcDKiI+KBOybntmUtfUU299mzeKSkgUloOQbbd/ubQ/i6xJFFczcDxVWiJhAaxU 17Dn2N7Rebz03ipS0AgBiTuYYAvGtpTXZbkCSqTsjwNTxahmHdoswKw3ymQEiT2l A1bGgiENqxjF2hc2isdd/nVulY7tvrqOdRhbTBp307A6u0+KTQ10uO1OwW4xggpz 6zWUobw8RLgJKFcozoiUqGnahJQIlgr+JZZRaWYFPsSkvq8f2OCl4ArrRTGPh0Ne z2XJwWTyYyyH8Wj2X9EAZn7b0+BgQKiRC5uCxXhi88tGls6+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLSukVLS9figD5Yw0fftbmy5dw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjMyMGRjOTgtYTBkMy0z NTJkLWEyMWItOTM3NTIyZDM4ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQF3RsR0C1BxDmdsaRV28/rvG5tSWfuFqgrO9KM5XY+Ozf3dV3hOGS4 7AcubdLoCdqcBCvNmouuxjOaMuHC+1zAAk2WWjsUXqPJOxEnWATa5O2BHD1hwif6 trkyvyB6DOatb/ei5LawyDIeeMig631x884B7eZfElVHxmedMHi0pTB3N+GuFf6e I5kHxkx2ATj5PqYW/7s4tukFF0oi9JnwQE8B8O9e+swl+Mdb8uMLHvAKvEWobhLc I92udWN0dms98R9YdTOA3XIgJUXJ25CDZj1Y7Lq2QzdpZ9XlbaN4epPRwFiNjSTO ITzFN6Ept57s7O4q1MXw3csJDTh6iLg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:41 2025 by rpki-client