$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa File: 42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa (raw, json) Hash identifier: XpRA3NhXzUZQwyk2cqz/NlYWR6IY1AiuB0YCVDdNV7A= Subject key identifier: F0:67:0D:3E:8A:EE:CE:97:99:83:BB:D5:DD:C1:37:A4:CC:4F:C4:C6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D37ED5956873D0F4C780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397229 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d3:7e:d5:95:68:73:d0:f4:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2a7cf181-739f-445c-bf9d-8252f9cb9386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ea:7c:ec:30:6a:12:35:e1:8b:f6:31:12:36: 2c:d9:77:48:35:b3:5e:6c:80:3f:5b:78:f7:c2:bf: 9a:1f:51:2b:f1:3f:1e:a3:01:b3:b6:d6:18:e8:06: cc:63:98:13:f4:bc:cd:36:13:0b:72:79:32:af:2f: 13:cc:7f:f5:39:45:2a:f7:58:ef:42:07:02:e1:b1: 04:ed:c5:e2:41:15:28:4a:2d:4b:0e:b7:29:17:13: 30:e2:32:df:da:9e:b6:01:16:18:31:60:f1:40:3f: 31:d7:15:52:0a:4e:e3:de:8b:ad:16:d8:36:94:0d: e5:43:30:e0:ed:1a:1b:01:f7:34:54:ae:7b:7b:f3: 5a:2b:34:52:3d:b1:ee:f8:32:96:46:8e:49:3e:5f: d5:5c:37:c5:32:a3:7a:19:98:75:e2:ab:f7:23:0c: 0c:c1:da:07:27:f3:e0:38:5a:35:fc:9f:4f:66:3d: ba:a2:53:6b:ab:c5:03:18:b2:d6:37:db:66:e8:a4: 1f:bf:cb:3e:e9:53:15:1b:bb:6e:b2:c7:53:a2:f6: 9c:90:b7:80:22:8e:76:0a:b3:eb:fa:52:fc:15:4f: e8:19:38:8a:b0:d0:31:e1:22:d2:7a:da:d9:52:3d: ff:de:93:0b:7a:a9:01:4c:e4:67:d3:d4:d3:68:3c: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:0D:3E:8A:EE:CE:97:99:83:BB:D5:DD:C1:37:A4:CC:4F:C4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42ca9357-9da3-374f-a3f3-d7af2b7d5ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:21:cd:15:3f:fe:16:62:14:ca:22:6c:b5:f1:32:59:81:c8: 8b:54:07:d5:3e:75:93:43:da:80:3f:50:73:94:32:bc:83:f3: 2f:9b:f4:e7:b9:a6:63:68:ac:1c:e4:33:97:28:59:f9:ad:bf: b1:08:e4:c9:d2:ec:50:00:5e:1e:12:8c:7d:0f:d7:0b:c5:23: 46:b9:f5:33:6e:19:d4:20:d1:53:b6:28:17:06:12:20:36:ab: f4:16:cb:dd:d2:eb:0f:ee:71:b9:e6:92:24:ec:d4:36:1f:03: 19:3b:3e:36:7a:e5:90:0c:26:3c:f4:f0:04:c6:c6:3e:64:c2: bf:0c:da:ab:37:ae:ab:c1:46:26:9c:cf:ae:a2:36:9a:b1:9b: f2:00:3a:05:bc:8c:db:7c:2d:25:2e:f5:56:99:51:eb:3d:0f: 5c:54:b2:bf:b5:88:3f:61:33:45:d2:09:f8:5c:5a:cf:f0:82: 58:60:a0:9f:81:d9:db:61:c8:5b:dc:e7:be:0b:4b:c0:d9:ee: 29:42:2c:35:8b:ed:bd:89:be:f7:9b:4b:85:95:19:73:bc:38: c6:c8:c7:e8:c2:f8:4d:12:55:89:31:b9:36:7f:c2:28:31:96: cf:53:0d:a4:43:69:55:e5:fc:08:1f:2c:43:ea:5e:80:6a:75: 68:1d:33:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dN+1ZVoc9D0x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmE3Y2YxODEtNzM5Zi00NDVjLWJmOWQtODI1MmY5Y2I5Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiep87DBqEjXhi/YxEjYs2XdINbNebIA/W3j3 wr+aH1Er8T8eowGzttYY6AbMY5gT9LzNNhMLcnkyry8TzH/1OUUq91jvQgcC4bEE 7cXiQRUoSi1LDrcpFxMw4jLf2p62ARYYMWDxQD8x1xVSCk7j3outFtg2lA3lQzDg 7RobAfc0VK57e/NaKzRSPbHu+DKWRo5JPl/VXDfFMqN6GZh14qv3IwwMwdoHJ/Pg OFo1/J9PZj26olNrq8UDGLLWN9tm6KQfv8s+6VMVG7tussdTovackLeAIo52CrPr +lL8FU/oGTiKsNAx4SLSetrZUj3/3pMLeqkBTORn09TTaDzJ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBnDT6K7s6XmYO71d3BN6TMT8TGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDJjYTkzNTctOWRhMy0z NzRmLWEzZjMtZDdhZjJiN2Q1YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIhzRU//hZiFMoibLXxMlmByItUB9U+dZND2oA/UHOUMryD8y+b9Oe5 pmNorBzkM5coWfmtv7EI5MnS7FAAXh4SjH0P1wvFI0a59TNuGdQg0VO2KBcGEiA2 q/QWy93S6w/ucbnmkiTs1DYfAxk7PjZ65ZAMJjz08ATGxj5kwr8M2qs3rqvBRiac z66iNpqxm/IAOgW8jNt8LSUu9VaZUes9D1xUsr+1iD9hM0XSCfhcWs/wglhgoJ+B 2dthyFvc574LS8DZ7ilCLDWL7b2JvvebS4WVGXO8OMbIx+jC+E0SVYkxuTZ/wigx ls9TDaRDaVXl/AgfLEPqXoBqdWgdM7w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:04 2025 by rpki-client