$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/736eff71-b070-3fb4-83d1-5adc569dc926.roa File: 736eff71-b070-3fb4-83d1-5adc569dc926.roa (raw, json) Hash identifier: J22otxxb45+FGNkAQ5mytoBI74yGwRkQj5iPWzAftLQ= Subject key identifier: 2D:53:A6:84:70:3A:F0:C9:2C:C9:04:63:7B:C9:87:C0:3C:34:29:89 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C9EF2D976496F756A6B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/736eff71-b070-3fb4-83d1-5adc569dc926.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397229 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:9e:f2:d9:76:49:6f:75:6a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=535dfa5c-53ff-4fea-8404-6a5c9e960181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:dc:7f:65:64:58:21:6b:31:1f:80:01:ea: 1e:66:19:2d:f3:1f:fa:30:19:ba:c1:fd:ae:d5:9a: 2e:d3:e3:ac:84:28:0f:50:aa:9e:bb:1a:46:29:48: 79:0e:60:a0:ad:99:15:8c:01:07:71:25:a2:49:03: 87:bf:72:fe:52:d3:bb:99:56:ae:09:81:39:28:1c: 8a:32:1c:26:8d:82:eb:ca:68:38:9c:46:fb:03:8f: 2f:14:4d:57:8e:40:73:0f:bb:27:01:66:94:4a:f6: de:36:eb:6f:98:e9:15:13:c3:37:27:d4:fd:4b:9a: 4a:18:9c:de:c6:f5:da:6d:ab:cd:ed:30:95:c8:40: d0:9f:35:09:fb:ed:46:44:59:17:f6:c8:04:75:69: 6e:b6:bf:32:0b:8e:5b:d4:e1:97:cf:1a:27:1d:5c: 4b:27:43:6f:34:a1:f3:4a:ae:74:c4:8e:44:e1:47: 7d:b3:77:3e:9e:94:b2:5a:05:cc:28:82:9d:4c:6a: 81:c8:93:ba:5f:1a:08:1b:84:a1:59:d9:9e:52:29: 00:04:14:b0:1b:1f:7b:71:7e:e4:d8:21:db:77:99: 8f:9f:81:c9:4d:b0:8f:60:e1:8a:84:c8:a2:8f:0c: c0:d0:c1:07:a3:db:37:d3:4f:aa:fb:7f:f6:7d:00: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:53:A6:84:70:3A:F0:C9:2C:C9:04:63:7B:C9:87:C0:3C:34:29:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/736eff71-b070-3fb4-83d1-5adc569dc926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a3:a4:ba:8a:6a:6a:8f:78:81:22:05:47:bf:87:79:c7:c9: c7:04:ce:1d:20:84:6a:fb:49:94:9e:6c:7e:be:68:3e:df:c9: cc:d7:f0:0a:7d:c0:b0:0f:8b:6c:3a:e8:c2:c2:49:61:40:93: 0c:71:f1:96:31:a1:18:4b:61:2c:46:df:f9:0d:1b:44:62:de: c0:ce:1a:92:eb:57:06:b0:6a:82:8a:2d:a6:77:8d:48:8b:10: 2c:aa:48:77:41:f3:86:4a:00:e7:69:d5:c0:cd:4a:d2:e7:92: a4:e4:e1:0b:39:3a:ee:d2:65:82:c9:a0:a4:b4:a2:20:00:5f: 5c:d7:f0:8d:cb:e1:99:6b:f3:99:f6:b6:2f:94:8c:78:c4:2f: 63:74:b1:a4:f6:0b:b0:59:8b:a2:74:27:ea:27:ac:d1:e0:17: 3b:66:08:e3:d9:f7:97:c8:b5:d5:0e:6f:e5:3d:79:f1:17:d0: d8:ff:55:24:27:7a:dd:1c:d9:02:b9:70:b2:e2:27:5c:14:7b: 1b:89:23:33:f8:9a:54:c9:48:61:58:18:93:d9:0c:2f:e4:49: f2:0f:a8:8d:8e:a2:ad:0e:f2:22:95:9b:c1:b3:7b:a8:26:2b: c0:67:32:85:8d:4c:65:ea:01:8a:57:f7:11:09:59:1b:b0:9e: eb:1d:26:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJ7y2XZJb3VqawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NTM1ZGZhNWMtNTNmZi00ZmVhLTg0MDQtNmE1YzllOTYwMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvrcf2VkWCFrMR+AAeoeZhkt8x/6MBm6wf2u 1Zou0+OshCgPUKqeuxpGKUh5DmCgrZkVjAEHcSWiSQOHv3L+UtO7mVauCYE5KByK MhwmjYLrymg4nEb7A48vFE1XjkBzD7snAWaUSvbeNutvmOkVE8M3J9T9S5pKGJze xvXabavN7TCVyEDQnzUJ++1GRFkX9sgEdWlutr8yC45b1OGXzxonHVxLJ0NvNKHz Sq50xI5E4Ud9s3c+npSyWgXMKIKdTGqByJO6XxoIG4ShWdmeUikABBSwGx97cX7k 2CHbd5mPn4HJTbCPYOGKhMiijwzA0MEHo9s300+q+3/2fQBaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1TpoRwOvDJLMkEY3vJh8A8NCmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzM2ZWZmNzEtYjA3MC0z ZmI0LTgzZDEtNWFkYzU2OWRjOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISjpLqKamqPeIEiBUe/h3nHyccEzh0ghGr7SZSebH6+aD7fyczX8Ap9 wLAPi2w66MLCSWFAkwxx8ZYxoRhLYSxG3/kNG0Ri3sDOGpLrVwawaoKKLaZ3jUiL ECyqSHdB84ZKAOdp1cDNStLnkqTk4Qs5Ou7SZYLJoKS0oiAAX1zX8I3L4Zlr85n2 ti+UjHjEL2N0saT2C7BZi6J0J+onrNHgFztmCOPZ95fItdUOb+U9efEX0Nj/VSQn et0c2QK5cLLiJ1wUexuJIzP4mlTJSGFYGJPZDC/kSfIPqI2Ooq0O8iKVm8Gze6gm K8BnMoWNTGXqAYpX9xEJWRuwnusdJlg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:21 2025 by rpki-client