$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa File: 76d7860a-5279-320c-9121-e1fa49a3a45e.roa (raw, json) Hash identifier: o6y2Tp5//nXICgBWPUJpcvslmCh8Q/CN0ODQKRjhRek= Subject key identifier: 23:7A:C0:BB:13:A3:61:EB:0E:57:5B:EA:02:D5:60:FA:82:0D:E0:6C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F2241A78F69FECC44B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397217 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f2:24:1a:78:f6:9f:ec:c4:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=6631a286-8c0e-450b-9f1d-82df29af6ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:d1:30:40:ee:40:90:e5:6f:f4:b3:34:35: 50:36:e2:99:ce:62:b0:98:dd:f1:d0:11:a9:00:7b: 78:33:cd:c5:be:f4:db:fb:1c:f9:6f:5b:e5:b9:8a: 5e:0b:af:89:41:b0:b8:5b:03:f4:ca:2e:02:c9:bf: f0:d7:00:aa:85:8c:11:d8:f6:66:cc:c3:7e:5a:72: 06:43:ce:b8:3f:0e:4f:29:29:5a:34:33:85:ac:04: 06:85:0f:34:84:6a:55:66:01:66:10:d4:e3:fe:18: 3c:2e:8f:c8:eb:86:d8:8d:dd:81:47:82:d2:95:26: 2d:86:9b:91:1f:ae:61:05:f2:99:2f:22:c9:2a:a4: a8:7b:cd:49:ef:65:97:00:c8:36:d1:c7:b9:b1:5f: ff:a5:bb:9a:d7:5e:03:8c:15:3d:90:f0:8f:96:4f: a1:23:eb:e0:54:c6:95:6e:c4:27:20:24:1f:5c:ac: 57:5f:52:d5:d6:51:68:b6:e6:d8:48:15:6b:af:4f: 63:c6:c4:e4:d3:c0:d4:b2:71:18:59:08:b3:e6:6a: 1d:3f:09:4b:51:33:9d:56:ac:9f:2d:3d:1e:33:b3: 36:d0:49:5e:ca:d5:f3:61:7e:ff:8d:b7:f8:94:2c: 01:04:f6:98:e2:ce:15:41:cf:a0:bc:21:e9:67:33: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7A:C0:BB:13:A3:61:EB:0E:57:5B:EA:02:D5:60:FA:82:0D:E0:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:94:88:5a:18:90:72:27:71:13:a0:1a:c9:2f:bb:a1:e6:cc: 61:52:ce:fa:dd:5a:c8:9e:ad:41:fc:36:d6:67:b1:da:6d:16: d5:2e:fb:ec:47:51:ad:65:ca:9f:f4:94:4d:6c:e2:be:e4:8f: 7a:15:90:1e:2a:f6:8e:06:52:8e:24:4e:80:57:ac:07:a4:c9: 0e:c3:3c:34:c3:4d:9d:75:b5:8f:00:bc:9b:6a:41:85:60:79: 06:4e:d8:09:f3:45:8d:c5:59:fd:a1:26:1e:30:5c:3d:72:d0: c5:c3:7f:be:8c:a6:fe:ac:dc:a0:6b:5e:04:a4:67:85:dd:a3: 22:b5:52:c9:53:c5:ca:d8:77:a9:75:6d:a1:6d:4a:4f:dd:53: 0d:cf:51:b2:2f:9a:da:43:e5:8d:cf:89:43:e9:f1:77:a6:ef: e1:01:5a:d4:ce:ca:b8:30:9b:6a:b6:f4:59:40:2d:34:4f:65: 12:47:93:67:aa:c3:7a:d1:fe:a5:58:5f:52:53:be:f4:c2:58: 74:93:18:df:72:04:db:0e:c3:91:cd:5f:1c:e1:6c:c5:49:60: 6e:a9:b4:50:ad:a0:ad:0a:f3:29:ef:88:05:a5:ec:0a:4a:9f: 73:a9:48:14:59:85:f1:45:ae:00:99:bd:ad:cc:9d:94:7f:90: 4f:d4:aa:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fIkGnj2n+zES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjYzMWEyODYtOGMwZS00NTBiLTlmMWQtODJkZjI5YWY2Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNbRMEDuQJDlb/SzNDVQNuKZzmKwmN3x0BGp AHt4M83FvvTb+xz5b1vluYpeC6+JQbC4WwP0yi4Cyb/w1wCqhYwR2PZmzMN+WnIG Q864Pw5PKSlaNDOFrAQGhQ80hGpVZgFmENTj/hg8Lo/I64bYjd2BR4LSlSYthpuR H65hBfKZLyLJKqSoe81J72WXAMg20ce5sV//pbua114DjBU9kPCPlk+hI+vgVMaV bsQnICQfXKxXX1LV1lFotubYSBVrr09jxsTk08DUsnEYWQiz5modPwlLUTOdVqyf LT0eM7M20EleytXzYX7/jbf4lCwBBPaY4s4VQc+gvCHpZzNMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN6wLsTo2HrDldb6gLVYPqCDeBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzZkNzg2MGEtNTI3OS0z MjBjLTkxMjEtZTFmYTQ5YTNhNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqUiFoYkHIncROgGskvu6HmzGFSzvrdWsierUH8NtZnsdptFtUu++xH Ua1lyp/0lE1s4r7kj3oVkB4q9o4GUo4kToBXrAekyQ7DPDTDTZ11tY8AvJtqQYVg eQZO2AnzRY3FWf2hJh4wXD1y0MXDf76Mpv6s3KBrXgSkZ4XdoyK1UslTxcrYd6l1 baFtSk/dUw3PUbIvmtpD5Y3PiUPp8Xem7+EBWtTOyrgwm2q29FlALTRPZRJHk2eq w3rR/qVYX1JTvvTCWHSTGN9yBNsOw5HNXxzhbMVJYG6ptFCtoK0K8ynviAWl7ApK n3OpSBRZhfFFrgCZva3MnZR/kE/Uqv0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:10 2025 by rpki-client