$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa File: 3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa (raw, json) Hash identifier: qaVtJpdWHZWf3ZE4VUn6YTmjCVYQDKvEghB0Wstgw9A= Subject key identifier: 46:BE:EE:1C:E9:F4:2B:D7:20:92:21:E7:C0:34:89:C7:FF:1E:10:57 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FDDC112052547254FCC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397222 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fd:dc:11:20:52:54:72:54:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4a51e93b-2c89-4066-9061-5ba0202e6044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b2:8f:8b:6e:a3:12:53:42:4b:fd:45:9d:e7: 38:48:bf:be:73:08:0a:29:f3:da:92:e3:1b:d8:fb: 73:1d:10:ac:09:d3:80:1b:f6:ac:41:40:df:45:54: 49:51:22:a0:58:86:ef:2c:9b:c8:dd:a8:bc:85:8a: 4d:27:2c:47:34:99:28:80:ee:20:38:6f:ee:ff:95: cc:d0:b7:35:9a:fe:76:ef:1e:c7:d7:1b:42:42:a8: 0f:eb:41:ce:73:e4:ca:95:4c:6f:57:87:39:f5:8e: d5:3f:07:08:2d:3b:8c:5a:94:c3:18:71:13:89:99: 66:22:87:90:da:91:4d:c9:95:57:fa:1d:d5:95:0e: a0:0d:96:55:53:33:f7:d2:d7:2e:97:8a:e5:27:08: f3:2a:05:fb:a9:a5:bc:45:80:a2:5b:6f:21:2c:f6: 1c:26:44:1a:67:87:44:aa:f5:88:da:1a:1a:98:a6: af:cc:24:e8:eb:9f:49:ba:b7:24:14:a3:a8:bc:16: d7:83:90:7c:6a:01:10:4a:ef:c1:be:05:8f:80:1c: 83:ad:2f:bb:9a:ad:20:c8:15:f2:c5:f9:cf:99:49: b1:5a:f0:7a:83:31:b0:4b:07:a8:54:fd:fb:ad:20: 2a:13:db:74:7b:7f:c8:29:bf:58:4b:a6:85:06:e5: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BE:EE:1C:E9:F4:2B:D7:20:92:21:E7:C0:34:89:C7:FF:1E:10:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3b5ff281-7f3f-30f9-8cdb-1d6abca318a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5c:6b:40:0e:ee:09:ee:c6:e2:2e:17:b2:c6:1e:0c:ee:fe: 62:96:25:d8:77:6f:e2:61:9c:3a:ed:3b:e6:f2:9c:5d:df:7c: ce:fe:56:bd:72:45:bb:e9:5e:ae:a2:be:aa:d7:fd:a8:89:e8: f8:17:7a:9d:95:d3:15:3b:91:73:72:93:3e:c6:bd:e5:23:46: 7c:05:ae:f5:6f:7d:fb:ce:bd:da:de:d3:d1:ce:a6:f6:cf:b4: e7:ac:19:d0:00:ec:aa:b6:47:7b:eb:03:97:74:5c:72:b3:70: bd:e8:d2:9c:8e:dd:cc:a3:c6:02:ff:e0:d7:b0:71:85:72:9e: ec:8b:12:b1:c6:56:31:83:de:cb:8c:bf:91:0e:e8:99:f1:b9: f3:50:21:ef:e3:f5:f7:0f:d3:2f:39:70:03:77:3a:57:4e:10: 41:19:81:eb:5c:ac:84:8c:f0:6e:c4:4f:68:7e:2e:4f:e2:c2: 22:94:cf:6e:63:54:7b:23:65:56:ec:3b:9c:3c:29:12:cb:6f: 4f:b1:dc:38:8b:40:0d:e1:ac:2c:fa:78:17:ad:92:2c:b3:95: fe:de:39:40:36:fd:91:48:ea:dd:99:9e:58:f2:fc:9e:1b:98: 6f:1e:9d:45:0a:35:74:d8:46:14:f3:94:9b:1a:ed:bd:fa:0c: 9a:2e:ff:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4f3cESBSVHJU/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGE1MWU5M2ItMmM4OS00MDY2LTkwNjEtNWJhMDIwMmU2MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLKPi26jElNCS/1Fnec4SL++cwgKKfPakuMb 2PtzHRCsCdOAG/asQUDfRVRJUSKgWIbvLJvI3ai8hYpNJyxHNJkogO4gOG/u/5XM 0Lc1mv527x7H1xtCQqgP60HOc+TKlUxvV4c59Y7VPwcILTuMWpTDGHETiZlmIoeQ 2pFNyZVX+h3VlQ6gDZZVUzP30tcul4rlJwjzKgX7qaW8RYCiW28hLPYcJkQaZ4dE qvWI2hoamKavzCTo659JurckFKOovBbXg5B8agEQSu/BvgWPgByDrS+7mq0gyBXy xfnPmUmxWvB6gzGwSweoVP37rSAqE9t0e3/IKb9YS6aFBuXl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa+7hzp9CvXIJIh58A0icf/HhBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2I1ZmYyODEtN2YzZi0z MGY5LThjZGItMWQ2YWJjYTMxOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNca0AO7gnuxuIuF7LGHgzu/mKWJdh3b+JhnDrtO+bynF3ffM7+Vr1y RbvpXq6ivqrX/aiJ6PgXep2V0xU7kXNykz7GveUjRnwFrvVvffvOvdre09HOpvbP tOesGdAA7Kq2R3vrA5d0XHKzcL3o0pyO3cyjxgL/4NewcYVynuyLErHGVjGD3suM v5EO6JnxufNQIe/j9fcP0y85cAN3OldOEEEZgetcrISM8G7ET2h+Lk/iwiKUz25j VHsjZVbsO5w8KRLLb0+x3DiLQA3hrCz6eBetkiyzlf7eOUA2/ZFI6t2Znljy/J4b mG8enUUKNXTYRhTzlJsa7b36DJou/1w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:15 2025 by rpki-client