$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa File: 5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa (raw, json) Hash identifier: /Y4ixKZrumUIPWc856kvjAdXpXPk4caUJZmaz/ewvVg= Subject key identifier: A1:5C:DE:ED:D2:04:FC:D5:FA:03:A3:EB:CA:92:98:49:F6:70:C3:DA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1AAEBBAAFF8C30E99E980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397239 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:aa:eb:ba:af:f8:c3:0e:99:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=eb1f1e7c-6291-4189-b340-bb0f56f9afa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e2:9b:b0:86:f6:62:1b:8d:f2:cd:98:12:1a: d8:e4:3d:8d:78:db:5c:eb:6b:89:fc:7d:54:26:9a: b1:63:d1:91:6f:32:09:d4:10:17:c2:58:19:29:9a: 96:67:35:df:61:0b:46:18:8f:40:c6:bc:2d:ce:c1: b0:18:a1:06:24:bc:52:d9:b8:19:1c:f1:2c:c4:43: 86:21:47:23:f2:5d:52:b2:0d:d5:12:4d:21:53:f7: 55:b0:ef:3c:41:1d:f1:75:f9:1b:64:46:1d:d8:ad: f0:3f:10:15:32:c3:a5:1c:73:d3:dc:5d:d6:9e:dd: c4:4b:d1:76:23:26:0f:2c:e4:6c:c4:36:ee:65:4e: 86:44:6e:a2:66:64:94:52:6b:87:40:57:70:ca:51: 05:14:33:c4:50:1b:eb:2c:7e:e5:df:09:8c:94:f0: 97:07:e6:eb:6b:89:e5:33:39:e5:89:cb:52:01:82: 89:4f:23:09:95:e7:be:d9:67:db:fb:16:54:f3:d5: 22:72:2f:24:ba:31:9e:3c:55:7b:46:77:37:9b:74: 65:52:f8:bb:dd:41:de:62:e2:f3:e6:07:bb:f6:93: 18:e9:82:5d:5c:91:b7:b8:da:10:7b:d8:81:6c:47: ec:de:16:27:ec:39:73:30:f0:fa:3d:a1:61:06:aa: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5C:DE:ED:D2:04:FC:D5:FA:03:A3:EB:CA:92:98:49:F6:70:C3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5e5f45cc-cb1f-34cc-97a8-36fc954e035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:57:46:78:35:b3:27:de:b3:ec:32:59:a3:e8:fd:98:44:9e: 1d:4d:e8:6f:50:65:20:45:5e:03:8c:a8:70:5e:94:e7:95:b4: 62:ef:14:ef:1b:bc:64:82:d5:33:36:f0:b1:2b:5d:a7:ba:c3: b0:2d:f0:45:11:25:50:2e:0f:cc:51:93:d4:04:e2:35:bb:d8: 20:d2:8c:f3:32:e0:e0:a8:bc:63:28:a9:82:80:0d:06:a1:87: c3:6a:3d:12:26:44:cc:30:e5:a0:14:41:35:eb:ff:10:f2:41: ee:47:5f:5a:19:83:52:e5:90:52:4c:81:cd:b4:7c:41:af:a7: 98:98:45:0b:bf:68:89:ce:1c:2f:dd:18:63:48:5a:92:ed:08: b7:56:62:12:cb:48:b6:b9:53:9d:d1:f5:4b:73:ae:9a:ff:d0: 93:3b:ad:2c:f1:07:1f:08:0f:e2:17:5d:9e:9b:43:5c:33:83: 79:d7:77:b9:9a:26:98:39:f8:8b:a3:46:ba:c3:ba:51:87:d2: 8a:59:33:ef:90:94:c2:da:f5:60:39:20:03:c7:86:ea:3c:a5: 1f:09:5a:3b:f9:55:31:0d:4c:1d:97:60:a9:2a:5c:25:d9:e2: 2c:c1:07:f5:4e:22:d5:02:d5:04:de:31:d5:6c:f6:4d:fd:98: 4b:b2:4b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwarruq/4ww6Z6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZWIxZjFlN2MtNjI5MS00MTg5LWIzNDAtYmIwZjU2ZjlhZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+KbsIb2YhuN8s2YEhrY5D2NeNtc62uJ/H1U JpqxY9GRbzIJ1BAXwlgZKZqWZzXfYQtGGI9AxrwtzsGwGKEGJLxS2bgZHPEsxEOG IUcj8l1Ssg3VEk0hU/dVsO88QR3xdfkbZEYd2K3wPxAVMsOlHHPT3F3Wnt3ES9F2 IyYPLORsxDbuZU6GRG6iZmSUUmuHQFdwylEFFDPEUBvrLH7l3wmMlPCXB+bra4nl MznlictSAYKJTyMJlee+2Wfb+xZU89Uici8kujGePFV7Rnc3m3RlUvi73UHeYuLz 5ge79pMY6YJdXJG3uNoQe9iBbEfs3hYn7DlzMPD6PaFhBqoaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFc3u3SBPzV+gOj68qSmEn2cMPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWU1ZjQ1Y2MtY2IxZi0z NGNjLTk3YTgtMzZmYzk1NGUwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlXRng1syfes+wyWaPo/ZhEnh1N6G9QZSBFXgOMqHBelOeVtGLvFO8b vGSC1TM28LErXae6w7At8EURJVAuD8xRk9QE4jW72CDSjPMy4OCovGMoqYKADQah h8NqPRImRMww5aAUQTXr/xDyQe5HX1oZg1LlkFJMgc20fEGvp5iYRQu/aInOHC/d GGNIWpLtCLdWYhLLSLa5U53R9Utzrpr/0JM7rSzxBx8ID+IXXZ6bQ1wzg3nXd7ma Jpg5+IujRrrDulGH0opZM++QlMLa9WA5IAPHhuo8pR8JWjv5VTENTB2XYKkqXCXZ 4izBB/VOItUC1QTeMdVs9k39mEuyS1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:08 2025 by rpki-client