$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72a68665-6df3-374b-91e4-1351538f8a1b.roa File: 72a68665-6df3-374b-91e4-1351538f8a1b.roa (raw, json) Hash identifier: BchUilqIlzKBu42mhRXnl5sm+0ZH85DyqyXXuBT77B4= Subject key identifier: 34:5E:2F:90:79:33:73:B1:D8:C7:E0:C4:32:DF:FA:DD:78:FD:C4:23 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C825A4F644CBB06C7C600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72a68665-6df3-374b-91e4-1351538f8a1b.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397232 IP address blocks: 156.154.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:82:5a:4f:64:4c:bb:06:c7:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=650c70c2-6d98-48e7-a6ae-7c0c24e8fe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:2b:ca:98:da:ec:35:e2:c9:88:59:a2:ab: 99:1e:ad:18:21:6b:fa:b1:74:81:da:d3:b5:06:b7: cb:76:15:db:d6:69:89:9a:c0:84:aa:f8:ad:63:bc: 42:21:ae:fb:5e:07:98:32:d8:05:72:9c:67:d6:cc: df:4f:22:92:cd:f6:1a:f0:6b:c3:02:32:e9:fd:a3: 87:60:18:92:de:0b:77:3e:07:09:5b:25:06:f2:fc: 8f:23:2d:3e:3a:50:7c:41:8e:30:4a:69:24:0c:ec: 32:48:97:a6:48:17:cb:8b:b5:6a:0c:bd:b5:e1:ba: a4:bd:f3:6e:6c:e1:12:55:b1:a6:00:b2:0f:73:85: c8:ee:88:68:86:2b:56:4c:dc:47:b9:42:78:a8:3a: 83:ec:c4:26:cd:fd:22:26:11:39:34:8d:73:b1:34: e2:54:cf:53:45:3f:c9:5e:f9:15:ef:0c:a0:ae:90: 92:6b:ad:c6:f4:05:31:a1:25:2b:5e:9c:a3:0c:ce: 9f:ef:86:d1:96:83:96:f6:9a:bc:13:0c:07:8b:d5: e9:2c:83:85:53:5d:37:67:9c:63:36:92:39:66:a9: cb:7d:d7:74:94:10:b4:15:66:f8:c8:06:69:a8:c0: c1:fc:1c:b2:45:0d:b9:21:36:f7:c9:3f:ce:28:b5: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5E:2F:90:79:33:73:B1:D8:C7:E0:C4:32:DF:FA:DD:78:FD:C4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/72a68665-6df3-374b-91e4-1351538f8a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a9:10:fb:99:9d:6b:66:bd:c5:10:d1:40:6c:5c:ad:7f:31: 38:ed:6e:04:2e:44:cd:42:9e:20:ce:7c:0a:3c:7d:01:25:69: 09:0e:f5:f7:e6:20:0e:92:4d:15:4e:40:58:0a:f2:21:34:b4: b8:62:c1:12:a1:48:76:01:8a:5b:b0:2b:a5:0e:f4:e5:83:42: 4b:ce:46:39:9a:ee:69:fb:51:b2:ee:e9:13:62:b3:ff:9a:dd: 79:26:13:ae:40:c7:ec:0c:49:a8:4b:ad:0e:eb:d1:23:4b:60: 54:35:dc:02:e9:c7:53:48:bb:10:a5:41:a3:97:4b:65:da:d6: 53:5f:58:5b:3e:28:7d:10:bc:06:9e:30:04:d4:6c:0a:56:66: 20:aa:53:e0:cd:37:e0:be:3b:cd:c6:88:f6:12:0a:27:dd:2a: 7c:48:8f:06:1e:5a:c6:72:f7:2a:7e:d0:0a:db:fe:09:d7:8b: 0b:d9:88:e2:de:fe:d9:c5:ab:9d:31:13:b5:d7:3d:52:48:9a: f0:74:68:5d:2c:42:0e:e7:36:10:0b:90:19:cb:54:b7:11:84: 65:1f:39:e6:81:53:87:26:f4:51:75:0d:6e:b6:a0:3e:71:9d: 6d:43:17:8b:6b:02:9a:5c:c2:5f:e2:df:87:12:38:5b:22:29: de:73:6b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIJaT2RMuwbHxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjUwYzcwYzItNmQ5OC00OGU3LWE2YWUtN2MwYzI0ZThmZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OQrypja7DXiyYhZoquZHq0YIWv6sXSB2tO1 BrfLdhXb1mmJmsCEqvitY7xCIa77XgeYMtgFcpxn1szfTyKSzfYa8GvDAjLp/aOH YBiS3gt3PgcJWyUG8vyPIy0+OlB8QY4wSmkkDOwySJemSBfLi7VqDL214bqkvfNu bOESVbGmALIPc4XI7ohohitWTNxHuUJ4qDqD7MQmzf0iJhE5NI1zsTTiVM9TRT/J XvkV7wygrpCSa63G9AUxoSUrXpyjDM6f74bRloOW9pq8EwwHi9XpLIOFU103Z5xj NpI5ZqnLfdd0lBC0FWb4yAZpqMDB/ByyRQ25ITb3yT/OKLUIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDReL5B5M3Ox2MfgxDLf+t14/cQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzJhNjg2NjUtNmRmMy0z NzRiLTkxZTQtMTM1MTUzOGY4YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6pEPuZnWtmvcUQ0UBsXK1/MTjtbgQuRM1CniDOfAo8fQElaQkO9ffm IA6STRVOQFgK8iE0tLhiwRKhSHYBiluwK6UO9OWDQkvORjma7mn7UbLu6RNis/+a 3XkmE65Ax+wMSahLrQ7r0SNLYFQ13ALpx1NIuxClQaOXS2Xa1lNfWFs+KH0QvAae MATUbApWZiCqU+DNN+C+O83GiPYSCifdKnxIjwYeWsZy9yp+0Arb/gnXiwvZiOLe /tnFq50xE7XXPVJImvB0aF0sQg7nNhALkBnLVLcRhGUfOeaBU4cm9FF1DW62oD5x nW1DF4trAppcwl/i34cSOFsiKd5za7I= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:12 2025 by rpki-client