$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa File: 2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa (raw, json) Hash identifier: zVeFCt7YUS+/6DXmaAkVZ/DVuHeZhUfrXK3Ff5hj8DA= Subject key identifier: C7:84:90:8C:E5:D1:48:6E:BB:27:1F:29:EE:86:C1:FB:42:D9:2C:55 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CABA5C740821399026C90 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397213 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:ab:a5:c7:40:82:13:99:02:6c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=4ab78d95-81f8-42c2-8b8e-ce2b38636352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:f4:06:51:fc:12:fd:6a:93:08:76:ee:bc: 21:01:c0:93:af:4b:41:c4:20:dd:a5:f1:49:70:72: 1b:0a:47:5e:70:52:98:3b:70:81:1a:f7:e7:93:e8: b4:29:3d:58:e4:3e:44:26:45:04:fc:cf:26:aa:79: a8:30:92:7a:0a:86:60:34:e2:a1:80:a7:98:b6:9d: cb:d7:75:69:ab:9d:65:63:db:e4:5a:5e:c8:a6:af: ea:01:50:59:b9:6a:94:bd:04:86:90:5b:f0:08:60: bc:f9:3a:02:08:ca:23:8c:32:37:85:15:1a:28:50: 84:70:77:e3:71:b7:e3:c6:ed:8b:5a:6b:45:d4:9e: 3e:ea:56:0b:31:9f:94:39:6b:10:1e:00:74:62:06: 8a:39:fb:fa:85:81:69:e2:25:56:52:a9:65:ef:fa: 39:4b:1f:9c:f2:bb:ee:6d:5f:98:d9:09:aa:f8:d7: 90:70:ad:e3:9d:18:3c:97:35:f3:57:4e:33:da:cf: 04:e8:51:3c:f7:40:24:9a:da:5b:a5:c4:29:85:90: e2:a0:c6:99:a7:98:62:87:26:7f:41:57:a2:6d:5a: 53:a7:1e:07:6c:7c:b2:0d:2e:66:c5:49:6e:cf:c5: b8:a0:54:78:09:58:34:2a:a0:75:9b:c2:6d:77:3b: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:84:90:8C:E5:D1:48:6E:BB:27:1F:29:EE:86:C1:FB:42:D9:2C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a5bcf22-7e73-3b55-b7d9-f51a79014b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6f:46:e5:8b:b6:d2:30:65:38:e2:af:f5:5b:fb:9f:99:a3: 82:fa:77:f3:18:b8:7e:96:96:a6:3c:bb:07:25:db:99:1d:29: 6d:81:d6:5c:a6:6e:9f:e7:87:ab:9a:ad:ca:e8:12:fd:78:37: 3a:c2:de:30:43:ef:9b:f3:9e:33:f5:0b:92:13:17:ac:1a:d3: 84:a2:67:b9:f6:99:c6:4e:4a:64:45:55:64:44:e5:b2:39:78: 9d:a7:f4:29:a9:95:c3:43:08:82:16:e4:aa:a1:14:87:80:d5: 6f:d3:43:8b:33:fb:64:c5:a5:8c:98:1a:9b:62:8f:e8:ff:4c: 48:7d:c5:40:a9:ef:61:8e:a3:19:fd:a0:92:0e:d9:e0:74:1d: 89:47:53:1a:e8:aa:e6:b4:a2:31:9a:e8:13:2c:b5:a3:14:23: 13:4a:46:07:47:42:27:0d:f6:d6:07:2e:86:2c:8e:35:e4:a2: 8b:ff:d9:c6:41:f6:97:0e:7a:42:95:28:e7:a1:bd:4d:95:ec: b6:30:16:2b:23:ed:4b:7a:ae:89:ba:62:e8:63:5c:84:3a:95: b8:b0:ac:63:7d:02:16:a9:e3:86:10:4b:17:91:7e:49:51:2a: 3a:9b:eb:28:0a:f8:a4:2d:ec:1e:60:53:15:84:e0:df:b7:d9: 6b:dc:c5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKulx0CCE5kCbJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NGFiNzhkOTUtODFmOC00MmMyLThiOGUtY2UyYjM4NjM2MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRn0BlH8Ev1qkwh27rwhAcCTr0tBxCDdpfFJ cHIbCkdecFKYO3CBGvfnk+i0KT1Y5D5EJkUE/M8mqnmoMJJ6CoZgNOKhgKeYtp3L 13Vpq51lY9vkWl7Ipq/qAVBZuWqUvQSGkFvwCGC8+ToCCMojjDI3hRUaKFCEcHfj cbfjxu2LWmtF1J4+6lYLMZ+UOWsQHgB0YgaKOfv6hYFp4iVWUqll7/o5Sx+c8rvu bV+Y2Qmq+NeQcK3jnRg8lzXzV04z2s8E6FE890AkmtpbpcQphZDioMaZp5hihyZ/ QVeibVpTpx4HbHyyDS5mxUluz8W4oFR4CVg0KqB1m8Jtdzvy0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeEkIzl0UhuuycfKe6GwftC2SxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmE1YmNmMjItN2U3My0z YjU1LWI3ZDktZjUxYTc5MDE0YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9vRuWLttIwZTjir/Vb+5+Zo4L6d/MYuH6WlqY8uwcl25kdKW2B1lym bp/nh6uarcroEv14NzrC3jBD75vznjP1C5ITF6wa04SiZ7n2mcZOSmRFVWRE5bI5 eJ2n9CmplcNDCIIW5KqhFIeA1W/TQ4sz+2TFpYyYGptij+j/TEh9xUCp72GOoxn9 oJIO2eB0HYlHUxroqua0ojGa6BMstaMUIxNKRgdHQicN9tYHLoYsjjXkoov/2cZB 9pcOekKVKOehvU2V7LYwFisj7Ut6rom6YuhjXIQ6lbiwrGN9Ahap44YQSxeRfklR Kjqb6ygK+KQt7B5gUxWE4N+32WvcxZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:40 2025 by rpki-client