$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42bb6399-f2d5-3673-acc8-87785d032cbf.roa File: 42bb6399-f2d5-3673-acc8-87785d032cbf.roa (raw, json) Hash identifier: 7JSTaTI2vitzHkdDa8QyoCSQNH9cC5Df5JNgum8ZchQ= Subject key identifier: 58:6A:5F:06:CA:A4:A8:99:F5:B4:77:0F:AD:FB:20:8D:7D:E6:D4:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FCFE5CCBECBAB8522500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42bb6399-f2d5-3673-acc8-87785d032cbf.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fc:fe:5c:cb:ec:ba:b8:52:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8570c929-645a-4a01-9240-dd7b5c725d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:85:8b:14:b3:21:b4:d8:bb:48:30:2a:ea: 67:58:e4:8a:70:97:bb:60:b7:5c:18:33:6b:95:fd: 7b:d1:29:d5:01:1c:57:bd:2c:fe:1d:73:67:a1:04: f2:7c:b5:58:c0:d8:0b:30:02:c3:54:21:b6:a9:cf: ec:06:e1:66:42:a9:b2:d0:b0:4e:38:92:98:53:4a: c1:0b:7e:bb:e3:b9:e6:21:f8:54:1e:2c:cc:e7:f0: 71:db:16:b7:1f:2c:0c:8c:53:e9:9e:14:f6:6f:fb: bc:ae:a0:58:4a:a2:b0:6a:0c:be:b7:46:aa:5c:09: 0c:8f:85:fe:cd:d8:b7:5e:5c:95:60:72:a5:bb:59: 16:50:23:67:bd:ea:9b:19:04:6d:d3:6d:54:38:ac: 99:5a:df:f5:d7:c5:58:b5:4c:7c:04:14:41:86:36: 18:e7:45:89:b5:36:f9:8e:cc:51:47:b9:8f:ab:42: 5f:8b:81:4a:a2:54:50:b7:02:20:e2:9f:93:55:4b: e4:29:a1:37:45:34:80:e0:42:a8:98:8e:26:31:e1: 65:c4:9b:29:b1:b9:d9:e2:8e:e1:42:ae:c4:e0:a7: e2:6b:fa:27:37:1a:fb:c0:86:61:a1:dc:e5:ef:10: 48:02:35:e0:c1:53:d0:2d:03:10:09:8e:11:d1:27: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6A:5F:06:CA:A4:A8:99:F5:B4:77:0F:AD:FB:20:8D:7D:E6:D4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42bb6399-f2d5-3673-acc8-87785d032cbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:18:e8:a7:9c:f3:16:e1:14:7d:74:bb:85:de:bc:6c:87:37: 38:30:43:05:02:03:69:b5:04:d6:a5:6d:43:49:22:8c:1c:9d: ff:ed:a1:b0:3c:5b:ae:55:d8:1f:4a:30:ae:b2:52:66:ab:ce: 36:91:cf:1e:31:a8:0e:60:f0:cf:0c:6f:73:84:bb:d9:88:4a: 00:16:58:57:03:e7:38:04:73:f1:24:3f:bb:1c:14:a5:88:ee: a3:bf:81:c8:19:b1:e4:90:66:df:dc:f6:3c:ab:5a:44:cb:0b: 69:53:e1:45:25:3c:5c:68:bb:2b:e5:5e:e3:20:6d:a3:e0:0b: fa:a7:b0:dd:b5:f3:b8:e3:12:1b:9d:33:ea:67:85:7c:cc:1b: 45:25:57:b1:70:a5:36:00:9c:31:ec:0e:95:1e:a9:b7:fe:0d: cf:4a:4c:08:58:c2:ec:d8:6f:2f:da:e9:77:d6:6e:ae:50:c2: 8c:e7:f5:ae:56:2c:c1:80:fc:fe:85:c2:99:74:e6:24:3d:9c: 24:b8:7b:0a:15:e0:00:1a:9d:e6:05:d5:e6:58:93:9d:41:cf: 56:0b:80:c8:f6:8b:15:a3:ec:35:60:7b:ae:7c:8f:51:47:c6: 81:68:c8:48:00:ee:00:ed:da:2f:8c:3c:41:31:a5:be:12:da: dd:41:e9:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fz+XMvsurhSJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODU3MGM5MjktNjQ1YS00YTAxLTkyNDAtZGQ3YjVjNzI1ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopSFixSzIbTYu0gwKupnWOSKcJe7YLdcGDNr lf170SnVARxXvSz+HXNnoQTyfLVYwNgLMALDVCG2qc/sBuFmQqmy0LBOOJKYU0rB C36747nmIfhUHizM5/Bx2xa3HywMjFPpnhT2b/u8rqBYSqKwagy+t0aqXAkMj4X+ zdi3XlyVYHKlu1kWUCNnveqbGQRt021UOKyZWt/118VYtUx8BBRBhjYY50WJtTb5 jsxRR7mPq0Jfi4FKolRQtwIg4p+TVUvkKaE3RTSA4EKomI4mMeFlxJspsbnZ4o7h Qq7E4Kfia/onNxr7wIZhodzl7xBIAjXgwVPQLQMQCY4R0ScG7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhqXwbKpKiZ9bR3D637II195tQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDJiYjYzOTktZjJkNS0z NjczLWFjYzgtODc3ODVkMDMyY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIY6Kec8xbhFH10u4XevGyHNzgwQwUCA2m1BNalbUNJIowcnf/tobA8 W65V2B9KMK6yUmarzjaRzx4xqA5g8M8Mb3OEu9mISgAWWFcD5zgEc/EkP7scFKWI 7qO/gcgZseSQZt/c9jyrWkTLC2lT4UUlPFxouyvlXuMgbaPgC/qnsN2187jjEhud M+pnhXzMG0UlV7FwpTYAnDHsDpUeqbf+Dc9KTAhYwuzYby/a6XfWbq5Qwozn9a5W LMGA/P6Fwpl05iQ9nCS4ewoV4AAaneYF1eZYk51Bz1YLgMj2ixWj7DVge658j1FH xoFoyEgA7gDt2i+MPEExpb4S2t1B6Xg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:48 2025 by rpki-client