$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa File: 6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa (raw, json) Hash identifier: 1s9UpeNGR/BXjxN/Onj6eFHAuh5nOAmXQ3ZGv3tozpI= Subject key identifier: 8C:F6:64:3A:F2:CF:2A:85:80:32:FE:99:8A:3C:D5:D1:20:36:4E:E2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D497A323543354AC7400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d4:97:a3:23:54:33:54:ac:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7178aedf-34db-45d6-83a0-6033511ad306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:6f:c2:fa:0a:80:29:97:d5:17:79:c7:47: fd:c3:1a:86:88:68:17:13:1a:2e:9f:1f:66:13:b8: 1f:68:7d:f2:4d:45:4f:95:d4:8b:05:a4:f4:33:10: 2c:6e:41:11:7c:ff:33:31:38:ba:b2:b4:b9:2b:cc: 75:e8:40:79:c0:1a:08:ef:24:a5:b7:e4:83:55:1c: ce:10:e7:56:ee:ff:60:d8:d3:04:fd:52:b2:04:3d: 7e:96:58:54:c7:43:c0:49:9f:b8:96:ab:af:f3:c6: 6e:b4:0d:42:d4:cc:38:53:b9:17:a3:15:74:1d:e5: d0:e7:b5:be:cb:30:e2:f4:ac:61:3e:a8:ac:11:9c: 7a:b8:95:40:2a:1d:7d:4b:7a:5d:03:ef:6e:39:51: 40:31:65:72:66:eb:c8:b2:6d:19:56:99:eb:33:10: 89:18:a1:4d:31:f3:5d:76:07:82:3d:98:26:db:99: ad:c1:6f:07:f2:38:d3:d8:a3:8c:ae:25:57:ae:a6: 57:67:1d:65:31:8f:74:e6:07:9f:2b:b7:34:73:db: 1f:cf:ff:e6:9e:13:af:68:93:61:10:d7:15:d0:0a: 92:7a:7a:a9:be:90:c5:49:b7:87:fb:7c:c6:11:72: bb:9b:de:e2:7a:28:99:5a:35:f2:30:d7:09:88:fd: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:64:3A:F2:CF:2A:85:80:32:FE:99:8A:3C:D5:D1:20:36:4E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6acef5dc-e0dc-312b-9d5f-f70613ff372f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:91:87:d8:10:d5:c3:06:29:8c:13:13:ea:3e:e3:66:3c:75: 4c:d8:ac:90:5a:27:01:97:41:a9:36:eb:3f:52:02:1f:3f:54: 2a:4e:f6:be:c5:7f:2d:96:f9:7b:38:5c:4c:2e:73:d2:c4:31: 76:85:58:f3:28:ea:e9:53:49:f0:7b:73:0b:eb:91:b4:d7:4d: 21:04:58:7c:6d:26:a4:a4:25:43:6b:5d:8b:12:fb:a1:46:9f: 57:96:db:3a:65:64:4b:8b:bc:f8:40:9c:a8:e1:8c:f3:31:fe: 16:6e:23:ba:77:c2:3e:56:51:b9:15:69:87:03:69:37:38:2d: 03:cc:bb:63:de:69:9d:e8:f3:92:49:94:fe:a5:32:67:22:0a: 4b:56:e5:9e:2b:8b:76:3e:52:c0:d7:43:a6:b7:39:6a:98:08: 04:e0:88:22:6a:47:60:f0:8d:38:33:c6:5d:33:5d:f2:e1:f9: 94:d8:44:66:4a:f7:b4:e8:db:f9:69:07:5a:83:11:c6:a2:9d: d5:ad:c0:30:c2:65:6b:35:1e:c4:cd:c2:65:34:a3:7b:82:ca: 6c:f8:cc:26:bc:a1:17:aa:25:79:d2:3c:96:b5:95:d0:f2:92: f9:37:a2:97:52:cc:2e:4f:5d:b4:2c:61:3b:16:89:c3:7f:99: a7:a6:9a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dSXoyNUM1SsdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzE3OGFlZGYtMzRkYi00NWQ2LTgzYTAtNjAzMzUxMWFkMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28pvwvoKgCmX1Rd5x0f9wxqGiGgXExounx9m E7gfaH3yTUVPldSLBaT0MxAsbkERfP8zMTi6srS5K8x16EB5wBoI7ySlt+SDVRzO EOdW7v9g2NME/VKyBD1+llhUx0PASZ+4lquv88ZutA1C1Mw4U7kXoxV0HeXQ57W+ yzDi9KxhPqisEZx6uJVAKh19S3pdA+9uOVFAMWVyZuvIsm0ZVpnrMxCJGKFNMfNd dgeCPZgm25mtwW8H8jjT2KOMriVXrqZXZx1lMY905gefK7c0c9sfz//mnhOvaJNh ENcV0AqSenqpvpDFSbeH+3zGEXK7m97ieiiZWjXyMNcJiP3fHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz2ZDryzyqFgDL+mYo81dEgNk7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmFjZWY1ZGMtZTBkYy0z MTJiLTlkNWYtZjcwNjEzZmYzNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCRh9gQ1cMGKYwTE+o+42Y8dUzYrJBaJwGXQak26z9SAh8/VCpO9r7F fy2W+Xs4XEwuc9LEMXaFWPMo6ulTSfB7cwvrkbTXTSEEWHxtJqSkJUNrXYsS+6FG n1eW2zplZEuLvPhAnKjhjPMx/hZuI7p3wj5WUbkVaYcDaTc4LQPMu2PeaZ3o85JJ lP6lMmciCktW5Z4ri3Y+UsDXQ6a3OWqYCATgiCJqR2DwjTgzxl0zXfLh+ZTYRGZK 97To2/lpB1qDEcaindWtwDDCZWs1HsTNwmU0o3uCymz4zCa8oReqJXnSPJa1ldDy kvk3opdSzC5PXbQsYTsWicN/maemmtM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:21 2025 by rpki-client