$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa File: 7834fd71-e591-33e9-a028-f67ba699f5fa.roa (raw, json) Hash identifier: 3hCR2jBsUJZn91YHrQwu4V/nrhd+eup26rsx9BMiRUk= Subject key identifier: 36:5E:F9:3C:1D:B0:0A:4A:6A:81:47:1F:7E:3E:BB:A4:1A:24:CC:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FDAABF29FAE0A9BF30C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397219 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fd:aa:bf:29:fa:e0:a9:bf:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=22b59452-e125-4828-8a74-cfcaae180179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:8e:8f:bf:74:bf:f4:8d:29:4c:0e:95:ff: 7e:a9:ad:fa:03:2d:7f:66:bf:45:6f:fa:27:7f:cc: 42:a7:81:84:70:48:87:c0:ab:ef:c4:16:b3:3e:41: 65:8b:c4:88:86:e8:d2:40:63:5f:80:27:0a:a8:65: bc:5a:12:26:2d:8e:07:ea:a5:e1:a7:95:f4:39:d7: d5:3f:6b:32:9d:73:a0:b2:22:e7:64:2e:6f:90:7f: 19:be:b3:06:ff:46:6b:34:ef:46:17:d9:82:d1:4d: 94:9e:ec:81:58:e7:e4:c1:ec:9f:e5:20:b2:f4:a8: 4f:86:6e:61:1d:13:90:d7:44:18:a5:20:e9:99:32: a3:4f:ef:4e:c7:41:f7:b6:66:0d:66:fc:7e:25:6f: 0f:28:40:72:4f:15:bd:3d:d5:90:b2:e7:47:1e:22: 02:84:ca:64:40:a0:35:fe:66:99:44:fe:c0:97:ba: 6e:36:9f:73:c0:11:ae:0f:bd:38:95:7a:0d:26:c4: f1:99:90:1c:65:1e:d0:14:ed:21:50:0f:f5:02:a4: df:61:42:4b:5e:22:60:65:e6:11:86:b3:d2:29:97: 9b:a1:08:03:52:27:a8:04:1e:2e:91:3f:85:34:05: 61:f6:db:bf:b4:f2:b8:e6:58:cc:71:3a:58:65:7d: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5E:F9:3C:1D:B0:0A:4A:6A:81:47:1F:7E:3E:BB:A4:1A:24:CC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7834fd71-e591-33e9-a028-f67ba699f5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7b:ad:05:bd:a7:06:d9:af:6b:8f:7d:bf:66:84:55:7a:4a: c5:18:63:e4:e4:65:4b:0a:13:e5:0b:0b:38:77:15:d7:6b:35: a1:9b:6f:5d:b4:70:1b:6d:1f:bb:bb:6d:a1:37:73:cb:9a:4f: 04:93:f1:5e:88:cd:2e:ec:65:bd:f9:a6:39:31:25:5e:36:2e: 95:04:98:d2:df:d8:db:d3:07:10:03:5f:a4:2c:6b:6a:67:05: 5b:05:ff:1b:1d:20:20:0a:8b:e3:16:b2:b4:df:e1:48:41:72: 0f:9a:c7:f3:4f:3c:a2:a0:f0:cc:e2:f5:25:77:f9:28:25:ad: 73:ec:fc:89:07:c9:0e:85:30:b4:7b:fd:48:62:7a:97:14:9e: 3a:63:a6:9d:62:4a:cc:75:c1:eb:6e:ed:e3:65:ee:a0:6f:03: f4:16:4b:07:1f:13:92:ef:7a:7c:fd:3c:5b:d3:28:80:f7:c2: 75:7f:d9:4e:46:de:f2:3b:7a:2a:5a:b6:cf:8a:a5:c6:1f:6b: 24:19:85:52:62:bb:47:78:8b:5d:b8:bd:06:8b:82:70:0b:68: c9:88:8f:f7:1d:33:53:5d:d8:02:35:15:c0:6c:89:0d:a9:62: 25:7e:35:e7:60:77:1b:64:bb:e4:b1:fd:1a:98:28:e1:52:6a: 43:a8:38:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4f2qvyn64Km/MMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjJiNTk0NTItZTEyNS00ODI4LThhNzQtY2ZjYWFlMTgwMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ2Oj790v/SNKUwOlf9+qa36Ay1/Zr9Fb/on f8xCp4GEcEiHwKvvxBazPkFli8SIhujSQGNfgCcKqGW8WhImLY4H6qXhp5X0OdfV P2synXOgsiLnZC5vkH8ZvrMG/0ZrNO9GF9mC0U2UnuyBWOfkweyf5SCy9KhPhm5h HROQ10QYpSDpmTKjT+9Ox0H3tmYNZvx+JW8PKEByTxW9PdWQsudHHiIChMpkQKA1 /maZRP7Al7puNp9zwBGuD704lXoNJsTxmZAcZR7QFO0hUA/1AqTfYUJLXiJgZeYR hrPSKZeboQgDUieoBB4ukT+FNAVh9tu/tPK45ljMcTpYZX1sIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZe+TwdsApKaoFHH34+u6QaJMwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzgzNGZkNzEtZTU5MS0z M2U5LWEwMjgtZjY3YmE2OTlmNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh7rQW9pwbZr2uPfb9mhFV6SsUYY+TkZUsKE+ULCzh3FddrNaGbb120 cBttH7u7baE3c8uaTwST8V6IzS7sZb35pjkxJV42LpUEmNLf2NvTBxADX6Qsa2pn BVsF/xsdICAKi+MWsrTf4UhBcg+ax/NPPKKg8Mzi9SV3+SglrXPs/IkHyQ6FMLR7 /UhiepcUnjpjpp1iSsx1wetu7eNl7qBvA/QWSwcfE5Lvenz9PFvTKID3wnV/2U5G 3vI7eipats+KpcYfayQZhVJiu0d4i124vQaLgnALaMmIj/cdM1Nd2AI1FcBsiQ2p YiV+Nedgdxtku+Sx/RqYKOFSakOoOL8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:15 2025 by rpki-client