$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa File: 3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa (raw, json) Hash identifier: DQf1444zMfCUMlZqVEa8sSqiU1DbNUekPbwpVDRJc1c= Subject key identifier: 79:DE:AD:88:99:C2:E4:AC:FB:95:97:BD:D8:71:24:01:89:9D:F8:6A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAF407843307B5AE26C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397234 IP address blocks: 156.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:af:40:78:43:30:7b:5a:e2:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=e6b37130-78cb-46bc-918d-038b9f302cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:cc:cc:35:f8:3c:9f:7c:24:60:8b:95:5f: 32:6f:18:d4:89:da:a5:db:79:e2:b4:24:bf:a9:21: 48:ae:b4:fd:07:35:28:0f:f6:a6:16:39:b8:91:6e: 5f:e7:a4:4d:fe:09:84:f5:91:c9:48:7f:6f:cb:c3: 5a:8f:c2:0b:a6:4b:1a:d2:38:c6:06:72:f4:fb:f1: 0f:c9:03:e0:a4:74:4f:55:0a:6e:c5:11:20:d8:09: d6:00:e5:7a:47:f4:fb:40:aa:ce:5c:3c:28:dd:38: 9c:c3:c9:33:72:83:ba:5c:4f:9a:ae:8e:04:48:47: 9c:b8:0f:39:80:da:cf:a4:4c:dd:20:00:8a:2c:fa: d5:ac:8b:19:ec:11:2a:ce:2b:06:94:36:41:91:86: c2:c1:ef:5d:7c:44:45:9d:59:9a:a4:0f:7d:a6:7c: 09:5c:12:7b:c6:a9:63:ee:75:b6:16:12:97:f5:a8: a0:63:6b:35:b7:d6:14:4c:9e:46:4d:e2:6c:d9:55: b7:bd:a1:c9:7e:95:c9:ad:72:60:de:42:9d:fe:4f: 3d:ef:53:d3:45:a4:60:59:9d:e4:62:0d:e9:fb:ef: 4a:e5:e3:ee:b6:b1:2d:bf:4c:66:b5:4c:e0:75:c5: c9:ce:05:ac:72:64:c3:d5:e9:9d:a4:4d:35:a7:8a: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:AD:88:99:C2:E4:AC:FB:95:97:BD:D8:71:24:01:89:9D:F8:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bbd8d1e-5eba-30af-98be-1dbee1cd3106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a8:61:25:d9:2e:a5:b5:23:4d:10:61:d9:07:b4:38:d1:d0: ab:ee:ce:00:40:93:5f:ad:7d:cf:35:9c:36:cd:f0:12:6f:93: c0:51:2c:72:93:ac:69:18:e7:6a:d8:2d:04:e0:2b:01:88:a6: ac:73:33:54:e9:b2:2f:62:08:7e:ad:21:e5:79:26:60:c1:c3: a2:63:b7:e7:ea:3f:47:ca:3a:54:03:c9:8b:68:00:b5:4b:ca: be:70:59:19:6e:02:2d:f7:c6:1d:41:43:27:fa:7b:14:c0:8e: 7c:d7:eb:17:c5:ef:09:b8:4e:60:0f:b3:2a:d4:1e:fc:13:2b: 83:23:9a:be:30:03:8e:25:33:ab:e7:3b:b0:28:04:88:85:75: 37:42:6e:47:f9:a2:25:29:9c:43:eb:af:18:08:c5:b8:61:bf: af:cd:10:58:3a:66:05:72:2d:fa:9a:00:d8:c5:e0:ec:ca:ce: 31:54:b0:66:5a:0c:c6:54:94:35:2d:f1:f1:dc:53:08:bf:ee: 98:4e:d0:87:64:d7:e2:e9:b9:9f:f5:9e:bb:95:84:77:c9:37: 87:83:ec:14:fc:9d:db:ea:bb:95:99:9e:b4:0e:c4:db:21:b5: 93:8c:f2:9c:46:4d:04:56:cd:3b:4f:41:00:0f:68:67:96:60: 6a:a2:4a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbK9AeEMwe1ribAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZTZiMzcxMzAtNzhjYi00NmJjLTkxOGQtMDM4YjlmMzAyY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitDMzDX4PJ98JGCLlV8ybxjUidql23nitCS/ qSFIrrT9BzUoD/amFjm4kW5f56RN/gmE9ZHJSH9vy8Naj8ILpksa0jjGBnL0+/EP yQPgpHRPVQpuxREg2AnWAOV6R/T7QKrOXDwo3Ticw8kzcoO6XE+aro4ESEecuA85 gNrPpEzdIACKLPrVrIsZ7BEqzisGlDZBkYbCwe9dfERFnVmapA99pnwJXBJ7xqlj 7nW2FhKX9aigY2s1t9YUTJ5GTeJs2VW3vaHJfpXJrXJg3kKd/k8971PTRaRgWZ3k Yg3p++9K5ePutrEtv0xmtUzgdcXJzgWscmTD1emdpE01p4pB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnerYiZwuSs+5WXvdhxJAGJnfhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JiZDhkMWUtNWViYS0z MGFmLTk4YmUtMWRiZWUxY2QzMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKoYSXZLqW1I00QYdkHtDjR0KvuzgBAk1+tfc81nDbN8BJvk8BRLHKT rGkY52rYLQTgKwGIpqxzM1Tpsi9iCH6tIeV5JmDBw6Jjt+fqP0fKOlQDyYtoALVL yr5wWRluAi33xh1BQyf6exTAjnzX6xfF7wm4TmAPsyrUHvwTK4Mjmr4wA44lM6vn O7AoBIiFdTdCbkf5oiUpnEPrrxgIxbhhv6/NEFg6ZgVyLfqaANjF4OzKzjFUsGZa DMZUlDUt8fHcUwi/7phO0Idk1+LpuZ/1nruVhHfJN4eD7BT8ndvqu5WZnrQOxNsh tZOM8pxGTQRWzTtPQQAPaGeWYGqiSk0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:40:35 2025 by rpki-client