$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa File: 2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa (raw, json) Hash identifier: GQqF3O05Hh+FVuI0+Qsn/0WiBgFd31STqjc4rfTVHQA= Subject key identifier: 2A:40:1B:D9:B0:E3:71:1A:19:08:AC:50:31:60:81:82:77:8F:F5:9F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1CFCBC499F3FB0F5BD840 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cf:cb:c4:99:f3:fb:0f:5b:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=537673a3-a430-4744-a709-743cb35e877a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:64:39:4c:91:86:e6:f8:1f:15:20:5b:69: 68:03:16:9f:4f:0f:e0:e0:62:2d:28:02:db:16:fc: 46:e8:c9:e0:2e:b5:87:17:ba:de:f1:47:79:eb:ee: 99:c8:34:5d:cf:ae:44:92:64:d9:59:e4:97:ca:58: 32:4f:a8:d4:26:93:f8:95:9c:cd:1e:e3:f1:c7:9f: 66:4d:c3:4d:11:90:9e:1b:7d:42:4e:a0:7c:05:6a: a4:2d:ae:a3:49:e4:8e:95:d3:cf:69:3b:bd:cb:5a: 45:76:1a:6b:f1:d5:c7:f8:bf:ef:7a:01:1a:ca:ef: c5:df:dd:f1:63:1b:cf:45:0b:c9:d6:ca:c4:ab:f3: e6:4d:71:8a:c5:24:62:f9:40:8e:8c:aa:40:ad:08: 48:45:13:fd:f3:e1:c2:b2:44:16:51:41:d8:9e:a3: aa:cd:ec:e6:2a:f7:7b:a4:0a:ab:d5:6e:76:01:3e: aa:26:c3:68:ac:57:e4:80:04:44:a8:2a:f1:a2:ab: ba:a1:40:fb:de:66:06:78:4f:e9:d9:ca:48:72:de: 77:68:29:52:6e:78:24:cf:62:41:b0:f5:bb:d7:0b: 45:9b:74:f9:67:67:07:54:47:3d:2b:6f:12:0d:22: b8:20:f6:3f:6b:8a:bf:12:33:0a:75:c2:c8:a2:12: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:40:1B:D9:B0:E3:71:1A:19:08:AC:50:31:60:81:82:77:8F:F5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2ac9d7ab-965c-39c7-8fc9-114877b4dbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e9:f9:0e:4a:27:ff:11:2a:f9:a3:42:c7:14:9d:cd:d3:15: 9c:5e:68:01:a3:59:bc:53:5d:ce:2f:b8:c5:55:bd:07:34:b1: e9:e5:98:cc:24:07:18:69:24:71:17:10:e1:8d:a2:77:be:bb: 87:d1:74:da:17:57:d5:cd:9a:f8:32:c9:0d:03:6d:e7:34:12: 94:12:da:67:da:28:2a:7c:3f:80:05:ac:c2:26:95:9c:96:46: 31:11:06:4b:51:b7:92:95:08:c2:6b:1c:c1:bd:74:67:76:3a: 1a:11:bc:43:5e:37:ed:0e:ae:b7:34:e2:5f:3e:79:2c:e4:81: 89:66:0d:18:9c:80:0a:c9:b1:04:06:2e:be:37:9d:1c:df:4e: ed:71:8c:c0:ed:1d:7c:23:80:5a:e1:93:cc:0d:d1:ca:22:48: db:fb:50:58:d6:1b:50:ad:0a:36:87:15:23:63:16:1a:d7:42: 04:af:2e:78:f6:11:d3:00:d5:2d:99:2f:5e:ae:78:ae:d2:90: 0a:b0:89:56:e1:d6:f6:7d:7d:39:ee:42:8e:66:56:9a:7a:bc: 4c:02:c3:e7:60:aa:32:0a:4f:5b:1c:cd:5a:79:fd:e4:6e:e5: b4:68:36:73:23:41:b4:96:d0:0e:39:02:ce:5d:85:64:ea:ef: 72:15:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4c/LxJnz+w9b2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTM3NjczYTMtYTQzMC00NzQ0LWE3MDktNzQzY2IzNWU4NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RFkOUyRhub4HxUgW2loAxafTw/g4GItKALb FvxG6MngLrWHF7re8Ud56+6ZyDRdz65EkmTZWeSXylgyT6jUJpP4lZzNHuPxx59m TcNNEZCeG31CTqB8BWqkLa6jSeSOldPPaTu9y1pFdhpr8dXH+L/vegEayu/F393x YxvPRQvJ1srEq/PmTXGKxSRi+UCOjKpArQhIRRP98+HCskQWUUHYnqOqzezmKvd7 pAqr1W52AT6qJsNorFfkgAREqCrxoqu6oUD73mYGeE/p2cpIct53aClSbngkz2JB sPW71wtFm3T5Z2cHVEc9K28SDSK4IPY/a4q/EjMKdcLIohJyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpAG9mw43EaGQisUDFggYJ3j/WfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmFjOWQ3YWItOTY1Yy0z OWM3LThmYzktMTE0ODc3YjRkYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfp+Q5KJ/8RKvmjQscUnc3TFZxeaAGjWbxTXc4vuMVVvQc0senlmMwk BxhpJHEXEOGNone+u4fRdNoXV9XNmvgyyQ0Dbec0EpQS2mfaKCp8P4AFrMImlZyW RjERBktRt5KVCMJrHMG9dGd2OhoRvENeN+0Orrc04l8+eSzkgYlmDRicgArJsQQG Lr43nRzfTu1xjMDtHXwjgFrhk8wN0coiSNv7UFjWG1CtCjaHFSNjFhrXQgSvLnj2 EdMA1S2ZL16ueK7SkAqwiVbh1vZ9fTnuQo5mVpp6vEwCw+dgqjIKT1sczVp5/eRu 5bRoNnMjQbSW0A45As5dhWTq73IVv0A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:44 2025 by rpki-client