$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cce253-050a-33ea-85a2-9e284c7953b3.roa File: 67cce253-050a-33ea-85a2-9e284c7953b3.roa (raw, json) Hash identifier: Q07rgle2rdi/prNIrSsZAQ1n7AyJ7EiAypCyZuyHj10= Subject key identifier: 42:CA:C0:6D:28:8C:DD:49:0E:D2:CB:76:49:FA:D4:E9:EE:39:3A:12 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAEB97A3A0782EDCB4400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cce253-050a-33ea-85a2-9e284c7953b3.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397226 IP address blocks: 156.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:ae:b9:7a:3a:07:82:ed:cb:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=2cd408d2-a3bf-4c7d-b192-c046fce6e22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:2c:e1:38:60:13:d0:2d:9d:3e:b5:9f:14: 43:25:9e:e4:39:81:f7:19:66:cb:8e:db:7d:3a:7f: 30:1a:41:6e:2b:dd:db:b3:de:15:4e:d5:8b:89:08: 0f:c1:3d:00:e3:82:85:ec:00:69:2c:18:b4:9f:fe: 00:ee:7f:ad:c9:97:ee:4e:64:3e:34:83:35:21:bb: 3f:55:3e:47:21:eb:83:e1:95:e8:8e:16:cc:21:9b: 11:44:8f:dc:7a:3b:88:b9:c0:a3:5f:0a:5a:cd:23: 57:c1:dc:b0:98:a0:10:31:e7:69:ed:af:0d:d1:16: 15:86:80:56:60:e8:b4:ce:0e:de:fa:01:1e:fd:89: a3:e9:a7:02:c3:36:34:ff:24:1f:36:11:74:d2:21: f8:9a:b3:ee:29:cd:c4:e7:d4:82:e4:0f:54:f0:3b: 18:73:36:c2:db:83:98:0f:44:5c:a9:98:0b:fe:d3: 9b:a1:e0:41:5a:cf:65:64:bc:66:fd:1c:d9:a2:23: 46:ec:41:db:5f:e2:ec:99:ed:16:8d:d2:1b:a8:22: af:d8:cf:cd:85:15:1d:5b:6f:4b:ef:c5:e2:07:55: 22:82:6a:d9:e2:d7:cf:a5:6e:85:b7:fe:0d:3a:11: 48:31:cc:2d:19:8c:af:b8:35:3f:cf:cb:c4:8a:ba: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:C0:6D:28:8C:DD:49:0E:D2:CB:76:49:FA:D4:E9:EE:39:3A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67cce253-050a-33ea-85a2-9e284c7953b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9c:76:a9:f2:35:77:13:12:57:07:4d:de:91:c7:0c:5d:a0: 9d:93:f4:76:de:51:cb:ea:f7:5f:42:35:3f:d3:6f:dc:de:0c: 43:49:56:72:fb:c3:09:f8:16:a2:7a:45:5f:88:41:95:12:b3: 76:f9:04:e0:8b:d2:66:51:33:8c:ce:dd:d3:63:04:8c:67:83: 16:40:69:45:a4:04:98:67:f4:8f:8a:27:e7:94:08:3e:08:21: 79:15:3e:07:c3:23:f9:df:20:ef:41:ae:b8:87:7d:95:fd:5a: 9b:b5:5c:6d:9a:3f:cf:8b:25:b8:95:8b:27:67:79:2c:f5:0a: d9:91:1f:be:f0:43:d6:21:f2:c6:38:85:84:2f:05:30:a9:e5: 65:1c:3e:fd:4b:d9:ca:02:23:d2:d3:44:d8:bd:94:44:ab:90: 3a:18:4f:f3:fe:7c:5c:5f:72:54:5c:16:e6:fb:95:f6:5b:6b: c1:ea:d1:47:74:f4:61:e8:7e:26:e9:de:2a:89:68:22:74:65: 42:d5:e2:98:53:34:7f:9d:14:dd:ce:ee:c9:45:74:6b:64:66: 2e:1e:08:23:e6:0c:9d:1c:ed:40:15:43:b8:a2:4d:ab:5a:b7: 15:57:0f:7d:16:9b:43:fc:8d:60:b1:3f:a1:21:09:36:dd:d4: 96:08:bc:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbK65ejoHgu3LRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MmNkNDA4ZDItYTNiZi00YzdkLWIxOTItYzA0NmZjZTZlMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb4s4ThgE9AtnT61nxRDJZ7kOYH3GWbLjtt9 On8wGkFuK93bs94VTtWLiQgPwT0A44KF7ABpLBi0n/4A7n+tyZfuTmQ+NIM1Ibs/ VT5HIeuD4ZXojhbMIZsRRI/cejuIucCjXwpazSNXwdywmKAQMedp7a8N0RYVhoBW YOi0zg7e+gEe/Ymj6acCwzY0/yQfNhF00iH4mrPuKc3E59SC5A9U8DsYczbC24OY D0RcqZgL/tOboeBBWs9lZLxm/RzZoiNG7EHbX+Lsme0WjdIbqCKv2M/NhRUdW29L 78XiB1UigmrZ4tfPpW6Ft/4NOhFIMcwtGYyvuDU/z8vEirpVuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELKwG0ojN1JDtLLdkn61OnuOToSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjdjY2UyNTMtMDUwYS0z M2VhLTg1YTItOWUyODRjNzk1M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmcdqnyNXcTElcHTd6RxwxdoJ2T9HbeUcvq919CNT/Tb9zeDENJVnL7 wwn4FqJ6RV+IQZUSs3b5BOCL0mZRM4zO3dNjBIxngxZAaUWkBJhn9I+KJ+eUCD4I IXkVPgfDI/nfIO9BrriHfZX9Wpu1XG2aP8+LJbiViydneSz1CtmRH77wQ9Yh8sY4 hYQvBTCp5WUcPv1L2coCI9LTRNi9lESrkDoYT/P+fFxfclRcFub7lfZba8Hq0Ud0 9GHofibp3iqJaCJ0ZULV4phTNH+dFN3O7slFdGtkZi4eCCPmDJ0c7UAVQ7iiTata txVXD30Wm0P8jWCxP6EhCTbd1JYIvKc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:01 2025 by rpki-client