$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/437fcc7d-7b56-3569-9ecd-de53b60f6069.roa File: 437fcc7d-7b56-3569-9ecd-de53b60f6069.roa (raw, json) Hash identifier: T99PwpXqQjAlhZJ92/1pdJ98gOwk9KnDXbDmxMm2W80= Subject key identifier: 16:A7:5E:0E:C0:31:E4:FE:FB:11:96:22:FD:07:15:40:3C:28:19:A1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FE9B74BD09F9F91F9840 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/437fcc7d-7b56-3569-9ecd-de53b60f6069.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fe:9b:74:bd:09:f9:f9:1f:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=48909311-19ae-418f-a4fa-e0fa8b8d44ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:a8:fe:71:1f:70:e4:62:ca:9d:fa:db:11: 59:7e:f6:ab:0b:74:e5:ba:66:5f:35:f4:76:10:c5: 15:09:b3:5c:fb:09:99:bb:c9:3a:6d:3c:3b:23:12: 8b:4e:0d:2c:7c:7a:b2:4a:26:a9:d1:1d:82:47:3e: 23:a0:78:31:6f:18:cc:65:20:b8:4c:df:2c:95:fd: 96:ad:80:19:96:26:6d:e6:9f:b9:dd:4f:c9:fc:a0: 71:98:de:64:3c:25:ef:97:ca:41:63:33:61:1a:fc: fc:b5:b3:04:45:ae:4f:68:28:8b:f8:2e:a5:a2:fa: cd:db:33:6d:dd:43:b7:86:e1:3c:7f:e3:c8:ee:11: a3:bc:a3:b0:0f:de:7f:ff:20:48:69:6a:1f:55:bf: ed:1a:2e:c8:17:9e:e8:4b:75:ba:58:db:55:7e:9a: 21:40:d0:bd:d8:0c:3c:d7:13:60:b4:8d:9d:34:ef: e0:2e:eb:d2:dd:55:5d:e1:10:ee:de:f7:94:e6:39: 8f:7a:56:ec:e1:76:d2:c5:45:96:65:74:82:bd:fa: 0b:de:e3:8b:03:5e:99:4c:3b:91:80:b5:c6:d1:d5: 0f:9e:d7:2c:ac:a3:da:99:58:59:27:64:6b:42:92: f1:b2:23:94:c4:af:dc:43:48:0c:48:c0:69:b0:5c: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:5E:0E:C0:31:E4:FE:FB:11:96:22:FD:07:15:40:3C:28:19:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/437fcc7d-7b56-3569-9ecd-de53b60f6069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:01:d3:6e:6a:a1:b6:9d:0a:f3:37:67:2d:ae:d1:fc:72:7c: 4b:8f:ca:a4:58:53:4a:2e:09:93:f2:de:38:69:05:6f:64:22: ca:1c:ba:f6:94:be:0a:9e:4e:c5:4f:8c:d9:d2:34:2a:94:cf: d4:1c:43:1a:48:4b:6f:bd:94:61:f3:ff:63:af:e7:fe:f4:0c: 8f:7f:45:36:18:1d:0f:cf:d6:ef:a8:67:b6:03:77:1b:e3:ae: 6b:8a:63:35:de:3a:51:f2:9b:f9:b9:81:fd:bd:c2:f1:1b:df: 5d:6e:c4:a4:94:6a:d5:fe:c3:1f:53:68:b4:85:5d:f8:7d:77: 51:51:21:cd:5d:70:b0:16:cd:8d:98:ce:0a:b1:12:cf:bc:14: ea:8d:67:cd:19:f0:b9:32:ae:4b:ab:fd:8a:43:91:e0:71:b9: f2:54:90:91:66:ea:a0:d2:c8:31:90:18:9f:85:db:96:8a:74: 3f:e8:64:58:0e:68:6a:4e:a7:0b:cb:fb:2e:2c:82:a1:9c:08: c6:04:d5:dd:60:3f:5d:4d:bc:39:ca:f5:f3:9c:fa:f8:2f:dd: 96:0f:f3:e9:c1:bf:c3:be:5b:83:92:06:60:10:a3:8a:53:c2: b1:2a:50:10:04:08:9e:a2:57:e2:b6:9c:5a:c8:c4:13:84:da: dd:ff:f9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4f6bdL0J+fkfmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDg5MDkzMTEtMTlhZS00MThmLWE0ZmEtZTBmYThiOGQ0NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitWo/nEfcORiyp362xFZfvarC3TlumZfNfR2 EMUVCbNc+wmZu8k6bTw7IxKLTg0sfHqySiap0R2CRz4joHgxbxjMZSC4TN8slf2W rYAZliZt5p+53U/J/KBxmN5kPCXvl8pBYzNhGvz8tbMERa5PaCiL+C6lovrN2zNt 3UO3huE8f+PI7hGjvKOwD95//yBIaWofVb/tGi7IF57oS3W6WNtVfpohQNC92Aw8 1xNgtI2dNO/gLuvS3VVd4RDu3veU5jmPelbs4XbSxUWWZXSCvfoL3uOLA16ZTDuR gLXG0dUPntcsrKPamVhZJ2RrQpLxsiOUxK/cQ0gMSMBpsFzQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBanXg7AMeT++xGWIv0HFUA8KBmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDM3ZmNjN2QtN2I1Ni0z NTY5LTllY2QtZGU1M2I2MGY2MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsB025qobadCvM3Zy2u0fxyfEuPyqRYU0ouCZPy3jhpBW9kIsocuvaU vgqeTsVPjNnSNCqUz9QcQxpIS2+9lGHz/2Ov5/70DI9/RTYYHQ/P1u+oZ7YDdxvj rmuKYzXeOlHym/m5gf29wvEb311uxKSUatX+wx9TaLSFXfh9d1FRIc1dcLAWzY2Y zgqxEs+8FOqNZ80Z8Lkyrkur/YpDkeBxufJUkJFm6qDSyDGQGJ+F25aKdD/oZFgO aGpOpwvL+y4sgqGcCMYE1d1gP11NvDnK9fOc+vgv3ZYP8+nBv8O+W4OSBmAQo4pT wrEqUBAECJ6iV+K2nFrIxBOE2t3/+fk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:28 2025 by rpki-client