$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/646d24f4-9d80-3f96-98a7-83f2c6ed1723.roa File: 646d24f4-9d80-3f96-98a7-83f2c6ed1723.roa (raw, json) Hash identifier: KyF++ayzLq9iP46Iyr9uuA0KVDIA/GhBmj/wppL1YGg= Subject key identifier: EF:83:8F:55:34:6E:FC:39:82:31:BF:8F:18:A4:31:C4:05:4E:82:65 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B7F525FF32CA73DF4BE1EE240 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/646d24f4-9d80-3f96-98a7-83f2c6ed1723.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 12008 IP address blocks: 156.154.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5f:f3:2c:a7:3d:f4:be:1e:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9eb15d78-8291-4a47-99a7-ef6bb3ab9fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:05:04:8a:b6:1e:0c:79:79:99:73:35:1e: 33:a2:4d:5b:66:f6:c0:c3:81:82:eb:85:65:bc:a8: 4f:cc:e5:c4:82:63:26:01:fa:c2:ba:b0:bc:a8:1e: 50:48:cb:18:b9:74:0a:33:e0:ee:f2:28:c5:29:05: 07:8f:71:9e:09:4a:48:b0:58:94:53:03:e8:da:7d: 08:a6:31:5d:f0:e4:09:4c:73:7a:02:64:65:cc:ef: 62:06:d7:eb:20:43:30:8a:97:b8:77:9c:11:6a:97: 15:04:5e:16:88:b7:ab:8b:5b:b9:e4:df:c4:37:a3: 73:8c:cf:95:89:8c:d2:f7:cb:7e:43:ee:89:15:75: a4:fc:66:cc:34:68:0b:cc:f7:74:b1:c8:d6:db:cc: 06:30:cd:d4:d1:28:a1:77:19:ca:e7:e8:bf:58:d3: 89:54:b0:4b:06:0e:c9:72:a7:59:ca:81:94:a3:a3: 21:37:0f:4e:b9:d5:8f:f9:34:ea:69:46:5b:4a:32: 56:ff:58:42:c7:d9:24:fb:67:fc:24:6c:0d:61:21: 6c:b3:39:ae:91:7e:95:ff:39:fa:ea:7f:ac:be:aa: 88:8c:98:2f:bc:a8:ce:e2:a9:fa:41:6b:45:fb:f8: 17:e0:95:d2:3e:fb:92:6f:d5:8e:5c:b8:91:42:a6: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:83:8F:55:34:6E:FC:39:82:31:BF:8F:18:A4:31:C4:05:4E:82:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/646d24f4-9d80-3f96-98a7-83f2c6ed1723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:00:9a:74:6e:30:50:e7:87:40:48:4f:fa:02:d7:3d:2c: d5:e1:38:a6:7b:f5:0d:7d:a9:43:b4:03:4e:34:e2:22:b8:7b: d6:8c:de:5e:82:aa:23:01:9a:f4:23:70:b9:1b:27:b0:33:cc: 62:17:5a:96:e9:72:30:28:9c:fd:5a:ef:7f:71:86:5f:0e:51: 3c:4c:80:56:a3:2a:c9:e8:4b:53:3d:c6:f4:34:0a:50:2b:3f: e6:51:de:42:ee:e0:94:14:5e:06:8c:e1:90:04:f6:09:7e:0b: 4f:b7:ec:fb:9d:6f:81:81:f9:da:d9:e3:6c:da:ca:69:41:7b: 45:fe:d0:7d:ea:29:1d:f7:90:ac:f4:42:e5:f7:d9:45:b8:da: f7:b7:e0:dc:ca:1e:d1:11:86:62:2b:50:9e:89:fc:cc:70:d6: 97:1a:6b:ff:cf:97:c7:cf:c5:05:df:5d:47:1c:a8:4a:55:ac: 7f:85:9d:e5:3e:d8:5a:c8:5b:ca:a1:59:11:22:39:58:52:8c: 91:3e:c3:97:79:9d:4c:80:9c:14:46:0c:36:ef:53:82:ca:88: 95:18:d5:eb:6a:cb:39:77:c7:b8:0d:6f:11:3d:29:74:6b:85: 56:df:ad:3a:ff:e3:e2:84:a0:88:16:83:fc:21:8c:57:73:61: 40:91:7e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul/zLKc99L4e4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWViMTVkNzgtODI5MS00YTQ3LTk5YTctZWY2YmIzYWI5ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6QFBIq2Hgx5eZlzNR4zok1bZvbAw4GC64Vl vKhPzOXEgmMmAfrCurC8qB5QSMsYuXQKM+Du8ijFKQUHj3GeCUpIsFiUUwPo2n0I pjFd8OQJTHN6AmRlzO9iBtfrIEMwipe4d5wRapcVBF4WiLeri1u55N/EN6NzjM+V iYzS98t+Q+6JFXWk/GbMNGgLzPd0scjW28wGMM3U0SihdxnK5+i/WNOJVLBLBg7J cqdZyoGUo6MhNw9OudWP+TTqaUZbSjJW/1hCx9kk+2f8JGwNYSFsszmukX6V/zn6 6n+svqqIjJgvvKjO4qn6QWtF+/gX4JXSPvuSb9WOXLiRQqaKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+Dj1U0bvw5gjG/jxikMcQFToJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjQ2ZDI0ZjQtOWQ4MC0z Zjk2LTk4YTctODNmMmM2ZWQxNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdAJp0bjBQ54dASE/6Atc9LNXhOKZ79Q19qUO0A0404iK4e9aM3l6C qiMBmvQjcLkbJ7AzzGIXWpbpcjAonP1a739xhl8OUTxMgFajKsnoS1M9xvQ0ClAr P+ZR3kLu4JQUXgaM4ZAE9gl+C0+37Pudb4GB+drZ42zaymlBe0X+0H3qKR33kKz0 QuX32UW42ve34NzKHtERhmIrUJ6J/Mxw1pcaa//Pl8fPxQXfXUccqEpVrH+FneU+ 2FrIW8qhWREiOVhSjJE+w5d5nUyAnBRGDDbvU4LKiJUY1etqyzl3x7gNbxE9KXRr hVbfrTr/4+KEoIgWg/whjFdzYUCRfvs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:36:16 2025 by rpki-client