$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e131460-eba8-3e0b-84ed-d7f0fd457d18.roa File: 2e131460-eba8-3e0b-84ed-d7f0fd457d18.roa (raw, json) Hash identifier: 8pbfqMt7epNP+6YPnAocLnk9Wlw0VFXvazjAtP51eSE= Subject key identifier: BF:F8:E8:EB:2E:B6:E5:53:B1:4F:70:67:65:F9:66:DA:84:5A:4C:7D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F794321CD0D29D367024 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e131460-eba8-3e0b-84ed-d7f0fd457d18.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f7:94:32:1c:d0:d2:9d:36:70:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9b40b478-8957-4982-b3c2-9f64b250241e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:08:1c:92:51:f8:d4:98:2b:06:8a:e8:39:bd: 54:47:dc:9c:f6:bf:b4:3f:26:d8:01:d6:9a:3c:aa: d4:2c:ae:0e:d2:75:69:45:da:d7:07:a9:e7:73:a1: 65:c6:58:15:5d:a0:af:fb:69:2f:e5:5e:1e:69:c5: c0:25:08:95:5b:00:08:06:84:d6:ff:b7:be:24:c1: 53:4c:20:ea:70:be:08:f4:53:52:f0:d0:27:10:1d: 88:c6:09:95:22:ef:01:63:83:76:6c:3c:51:c3:58: 92:45:fe:ac:37:9c:25:f1:ac:95:b6:a0:c2:8c:61: d2:bf:1f:35:0a:fd:d4:21:cc:17:25:a8:b3:71:da: 7d:a4:00:b8:2b:82:6c:b5:fd:57:fe:bf:8f:ca:88: f9:54:51:90:ac:49:86:7c:55:c8:56:3e:73:7b:cd: a0:27:a2:37:f5:fd:03:22:e2:98:5c:f5:b2:b7:5a: c0:f0:1f:79:b6:86:15:e4:62:77:f2:bf:91:c7:28: 69:62:55:ae:13:60:03:b6:b0:1a:1c:02:50:60:3a: 12:67:aa:9a:e5:96:5d:09:d3:ca:7a:af:b7:93:56: 69:10:59:80:e8:e4:e3:37:a1:ea:bc:59:53:a8:3a: 20:cf:50:f3:95:59:08:ae:63:83:67:16:96:51:d8: b9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:E8:EB:2E:B6:E5:53:B1:4F:70:67:65:F9:66:DA:84:5A:4C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e131460-eba8-3e0b-84ed-d7f0fd457d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:73:59:02:6a:b3:87:cb:cd:cf:9a:f4:e5:59:41:f0:e7:8e: 2a:aa:d6:16:02:41:53:71:9b:bd:42:ac:46:ea:b9:88:c9:80: 35:3c:9e:4f:2d:b2:b1:7e:c5:30:1c:87:7f:43:5e:be:d9:12: 56:00:0c:c6:3a:d1:08:84:6d:26:bf:73:8b:62:e5:73:22:70: b1:16:8a:6b:22:de:bb:c8:87:26:75:be:6d:bd:6b:4f:e2:bd: 2e:fe:38:b5:25:c5:a9:1b:20:b1:bd:4d:bc:e9:1f:3a:be:2c: 17:1b:0c:67:1d:5e:e4:b7:99:a9:0e:33:36:8b:89:88:94:e0: ab:91:86:74:a9:d7:95:39:5f:c7:21:8f:91:40:3d:79:68:8c: b1:34:90:60:17:a9:74:de:8e:12:32:19:b9:cb:fa:ea:d4:c8: 65:f3:7e:98:ca:0a:d2:ca:cf:bc:11:a3:7d:01:24:da:89:dc: 5b:b2:27:bd:d0:8d:f8:8d:86:0a:fd:40:90:58:d3:f2:60:85: 5c:e7:b7:75:ba:46:63:48:c0:9a:c8:ea:75:52:15:04:54:33: 80:03:bb:8f:f8:ca:ff:8b:bf:23:a1:d2:7f:05:01:c7:55:c4: 45:1a:b8:dd:83:eb:4a:15:fd:4e:04:e5:3a:b4:97:d6:4c:2f: dd:04:e3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4feUMhzQ0p02cCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWI0MGI0NzgtODk1Ny00OTgyLWIzYzItOWY2NGIyNTAyNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ggcklH41JgrBoroOb1UR9yc9r+0PybYAdaa PKrULK4O0nVpRdrXB6nnc6FlxlgVXaCv+2kv5V4eacXAJQiVWwAIBoTW/7e+JMFT TCDqcL4I9FNS8NAnEB2IxgmVIu8BY4N2bDxRw1iSRf6sN5wl8ayVtqDCjGHSvx81 Cv3UIcwXJaizcdp9pAC4K4Jstf1X/r+Pyoj5VFGQrEmGfFXIVj5ze82gJ6I39f0D IuKYXPWyt1rA8B95toYV5GJ38r+RxyhpYlWuE2ADtrAaHAJQYDoSZ6qa5ZZdCdPK eq+3k1ZpEFmA6OTjN6HqvFlTqDogz1DzlVkIrmODZxaWUdi5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/46OsutuVTsU9wZ2X5ZtqEWkx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmUxMzE0NjAtZWJhOC0z ZTBiLTg0ZWQtZDdmMGZkNDU3ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJzWQJqs4fLzc+a9OVZQfDnjiqq1hYCQVNxm71CrEbquYjJgDU8nk8t srF+xTAch39DXr7ZElYADMY60QiEbSa/c4ti5XMicLEWimsi3rvIhyZ1vm29a0/i vS7+OLUlxakbILG9TbzpHzq+LBcbDGcdXuS3makOMzaLiYiU4KuRhnSp15U5X8ch j5FAPXlojLE0kGAXqXTejhIyGbnL+urUyGXzfpjKCtLKz7wRo30BJNqJ3FuyJ73Q jfiNhgr9QJBY0/JghVznt3W6RmNIwJrI6nVSFQRUM4ADu4/4yv+LvyOh0n8FAcdV xEUauN2D60oV/U4E5Tq0l9ZML90E45c= -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:47 2025 by rpki-client