$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa File: 78e9a42a-752a-37e6-b8d6-39b147c015ef.roa (raw, json) Hash identifier: /ShaUl7XkPspOKCPikzB7VJzhlSBqTRR3hyMgG3xVUw= Subject key identifier: D6:11:99:D6:99:70:58:1E:E1:5F:D6:C4:33:E7:94:F9:FE:40:1D:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D528E576122238DB8380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397219 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:28:e5:76:12:22:38:db:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f230ddb5-ce95-4adf-ab9a-2198d53c16ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:f4:29:a6:93:bb:4d:6e:22:9c:b2:51:e8: 34:94:1b:66:d8:2c:56:03:40:31:01:8c:d3:d4:d8: 33:9e:4f:f7:cc:1a:85:f0:9b:44:91:33:c4:4a:bb: c8:2d:24:eb:f5:41:03:82:6a:4c:cc:cc:ca:94:91: 97:33:f6:a4:61:93:63:0d:5f:40:17:a0:77:09:e0: 08:ee:0f:a7:43:4d:bf:23:b3:cd:2a:5e:a1:0f:3b: 26:86:98:2b:ef:b7:d1:ed:19:51:08:d2:52:04:38: 40:a0:5c:9e:0a:b9:80:b1:a1:9f:f8:1f:13:b8:ee: 1b:9e:85:1c:2f:17:cf:39:e6:86:70:f6:ae:df:08: ae:43:a7:68:8e:a3:b6:bc:ec:68:97:15:7d:30:96: f6:be:ce:6e:13:42:0d:4f:af:6e:ec:22:fc:c3:55: 6d:3c:91:90:cc:46:30:7e:69:f5:9b:c9:2d:fb:2d: 8a:bc:d7:0b:13:c1:b2:47:97:ea:7e:84:0f:5d:d8: 53:5c:30:56:d9:82:a6:8f:9a:64:38:03:73:71:7f: a3:9f:92:49:18:90:72:c3:b8:95:c0:3c:f7:a7:a0: d2:54:e1:d7:23:13:37:b9:0f:81:17:37:8d:2c:50: 13:33:92:49:c5:a6:18:f0:91:55:71:3e:d6:3c:b9: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:11:99:D6:99:70:58:1E:E1:5F:D6:C4:33:E7:94:F9:FE:40:1D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:48:26:c3:12:f9:76:66:86:0a:70:d0:63:d7:71:de:1f:9b: bf:2b:5f:1a:64:af:92:46:82:c2:62:d6:8f:3e:04:32:96:0f: c3:59:8f:4a:4c:87:07:90:53:db:1d:7d:2f:5e:0f:07:ac:a0: 18:06:84:93:da:9c:15:41:3b:ea:db:71:46:b9:ca:51:0c:99: cb:a7:76:6e:dd:9d:eb:f9:39:a0:69:e5:5c:6e:3d:d5:93:75: dc:85:47:23:94:03:59:6b:01:80:c9:73:84:a1:7c:e5:30:1c: 92:44:49:98:12:f8:9c:2e:bf:ec:d8:68:b0:79:60:19:17:51: 60:17:c2:8f:0a:79:b4:80:93:6f:20:1e:bf:85:a5:df:a5:7b: 5b:a6:f7:fc:ba:d3:27:53:fe:57:72:4e:ad:92:5a:7f:80:a4: 51:fa:90:9f:b5:4a:f8:47:3f:a6:07:39:66:e1:f3:c9:0d:06: db:34:a8:37:7d:db:ad:0f:3a:58:4b:98:45:37:6e:71:61:15: ba:a7:d2:ae:ab:89:70:bd:40:e9:78:e6:03:1e:15:8f:5d:a8: 12:47:5b:31:d7:31:f9:97:8c:f0:a0:60:13:67:00:39:a4:f1: 99:60:4c:be:cf:f7:1a:e4:7e:0f:f8:0b:25:7e:b6:27:22:2e: 65:cf:66:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dUo5XYSIjjbg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjIzMGRkYjUtY2U5NS00YWRmLWFiOWEtMjE5OGQ1M2MxNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXL0KaaTu01uIpyyUeg0lBtm2CxWA0AxAYzT 1Ngznk/3zBqF8JtEkTPESrvILSTr9UEDgmpMzMzKlJGXM/akYZNjDV9AF6B3CeAI 7g+nQ02/I7PNKl6hDzsmhpgr77fR7RlRCNJSBDhAoFyeCrmAsaGf+B8TuO4bnoUc LxfPOeaGcPau3wiuQ6dojqO2vOxolxV9MJb2vs5uE0INT69u7CL8w1VtPJGQzEYw fmn1m8kt+y2KvNcLE8GyR5fqfoQPXdhTXDBW2YKmj5pkOANzcX+jn5JJGJByw7iV wDz3p6DSVOHXIxM3uQ+BFzeNLFATM5JJxaYY8JFVcT7WPLn0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYRmdaZcFge4V/WxDPnlPn+QB0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzhlOWE0MmEtNzUyYS0z N2U2LWI4ZDYtMzliMTQ3YzAxNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9IJsMS+XZmhgpw0GPXcd4fm78rXxpkr5JGgsJi1o8+BDKWD8NZj0pM hweQU9sdfS9eDwesoBgGhJPanBVBO+rbcUa5ylEMmcundm7dnev5OaBp5VxuPdWT ddyFRyOUA1lrAYDJc4ShfOUwHJJESZgS+Jwuv+zYaLB5YBkXUWAXwo8KebSAk28g Hr+Fpd+le1um9/y60ydT/ldyTq2SWn+ApFH6kJ+1SvhHP6YHOWbh88kNBts0qDd9 260POlhLmEU3bnFhFbqn0q6riXC9QOl45gMeFY9dqBJHWzHXMfmXjPCgYBNnADmk 8ZlgTL7P9xrkfg/4CyV+ticiLmXPZp0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:34:56 2025 by rpki-client