$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa File: 667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa (raw, json) Hash identifier: OAwJQFUwWf9x37+EjOCGtdwBg8x/3GpXvHC+zDQB9K4= Subject key identifier: F9:44:C5:DB:B5:0D:48:B5:CB:54:F3:A9:05:8C:F6:8F:D2:23:1B:86 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D507D6233FB5E4925440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397217 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:07:d6:23:3f:b5:e4:92:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b4a160a4-389e-4e9c-81fa-2ed66609d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:30:28:81:3c:ff:59:6a:d5:99:39:0f:6c: fa:f1:ca:9f:c2:1a:df:c6:44:3f:2e:7d:18:9f:1d: 36:cb:16:b7:30:ac:b5:34:13:be:8a:08:70:4c:d8: 71:2e:dc:b6:be:49:64:e2:b9:a8:0d:ac:da:9d:9d: b1:64:41:ab:0b:5c:49:9b:17:f0:f0:55:c1:4e:f7: eb:e2:2d:c1:ed:84:6b:15:87:fa:e0:ba:55:2d:54: 01:af:f5:fb:7d:37:d6:ab:f6:a5:86:76:ff:c9:4e: 5f:b8:ff:4b:ca:a8:0f:6f:fe:23:de:d1:47:fd:b2: 8f:0a:4d:e8:0a:60:b3:b0:6b:fb:e7:c7:18:ef:09: 47:5d:f1:93:42:2d:3a:60:59:31:fc:cf:ea:a8:74: 6f:7c:c8:9d:ce:95:30:97:07:90:6d:82:86:da:84: ba:c4:8d:06:d4:02:d8:c5:0b:6d:07:51:23:fe:5d: bc:ea:4d:d9:9f:a9:45:04:0a:7d:2f:9b:19:7d:1d: 65:49:80:58:03:a4:dc:fc:9e:64:99:5e:19:d8:70: 07:bf:93:5f:81:75:fc:67:c0:ca:59:ab:04:42:df: 3f:22:3a:f0:62:e8:18:c6:83:6c:d2:2b:0d:c9:42: de:41:74:06:54:a6:d5:17:8b:df:02:c2:70:17:4a: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:44:C5:DB:B5:0D:48:B5:CB:54:F3:A9:05:8C:F6:8F:D2:23:1B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/667abe0c-b39d-3f26-a5e8-6061b5d0789a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9b:b8:72:c4:79:4a:a7:62:2d:f4:34:54:7d:ef:6c:52:12: 86:8a:60:7a:bf:f7:cb:cd:c3:2e:d3:f1:34:dc:74:fd:c1:6b: 26:d2:46:a9:f1:ac:a5:a7:4b:da:43:10:ae:7f:7d:86:d6:90: d6:1a:2a:4f:5f:8d:18:34:ba:fe:1d:8d:1f:8c:79:5c:f0:c7: bb:e3:89:58:3e:2f:47:cf:32:db:54:b2:67:b1:9a:4e:6e:03: 71:c1:17:7b:1c:67:9e:89:2c:23:34:37:6c:fd:71:18:82:10: c2:05:c7:77:1b:50:4f:16:07:82:c1:1d:72:9c:02:9c:07:9f: 89:d5:e3:26:9e:f4:44:ca:e6:ec:20:b4:e7:5f:e8:57:d2:5e: 1e:e4:5f:3c:25:60:49:86:35:e4:a4:0b:6b:1b:d6:af:c4:65: 98:5e:84:6e:0a:b0:75:f7:d2:51:6e:da:ca:8e:4b:8e:aa:e7: d9:4b:68:b1:d7:d4:fd:c4:04:0a:4b:4d:92:42:d0:fb:36:93: 3a:2e:46:c2:e6:1c:33:66:38:84:63:5d:fa:ed:d2:ce:df:52: 6f:11:0b:28:bc:cb:09:31:3b:93:c9:f2:e5:73:86:47:d3:1d: fa:18:36:74:b0:e1:28:f7:d2:59:b5:c3:ae:0f:89:61:ea:60: 0e:5b:3c:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dUH1iM/teSSVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjRhMTYwYTQtMzg5ZS00ZTljLTgxZmEtMmVkNjY2MDlkMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQkwKIE8/1lq1Zk5D2z68cqfwhrfxkQ/Ln0Y nx02yxa3MKy1NBO+ighwTNhxLty2vklk4rmoDazanZ2xZEGrC1xJmxfw8FXBTvfr 4i3B7YRrFYf64LpVLVQBr/X7fTfWq/alhnb/yU5fuP9LyqgPb/4j3tFH/bKPCk3o CmCzsGv758cY7wlHXfGTQi06YFkx/M/qqHRvfMidzpUwlweQbYKG2oS6xI0G1ALY xQttB1Ej/l286k3Zn6lFBAp9L5sZfR1lSYBYA6Tc/J5kmV4Z2HAHv5NfgXX8Z8DK WasEQt8/IjrwYugYxoNs0isNyULeQXQGVKbVF4vfAsJwF0pwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlExdu1DUi1y1TzqQWM9o/SIxuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjY3YWJlMGMtYjM5ZC0z ZjI2LWE1ZTgtNjA2MWI1ZDA3ODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqbuHLEeUqnYi30NFR972xSEoaKYHq/98vNwy7T8TTcdP3BaybSRqnx rKWnS9pDEK5/fYbWkNYaKk9fjRg0uv4djR+MeVzwx7vjiVg+L0fPMttUsmexmk5u A3HBF3scZ56JLCM0N2z9cRiCEMIFx3cbUE8WB4LBHXKcApwHn4nV4yae9ETK5uwg tOdf6FfSXh7kXzwlYEmGNeSkC2sb1q/EZZhehG4KsHX30lFu2sqOS46q59lLaLHX 1P3EBApLTZJC0Ps2kzouRsLmHDNmOIRjXfrt0s7fUm8RCyi8ywkxO5PJ8uVzhkfT HfoYNnSw4Sj30lm1w64PiWHqYA5bPNw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:04 2025 by rpki-client