$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa File: 7cc63738-3600-3e12-8631-4d0fa3845ad8.roa (raw, json) Hash identifier: qImU6YguqaqtoyOzvsl46i1jzJ7yGwbhjAfMTE0wAKs= Subject key identifier: 44:B4:4D:2B:8D:5E:D8:CE:6F:7C:B4:CC:3A:CD:6F:4E:96:78:08:9B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C976EEE91D400B5EC4F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397222 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:97:6e:ee:91:d4:00:b5:ec:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=b1d558fe-141f-4e2b-b014-4d60a7bb9d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:2e:b2:48:59:e3:72:07:f6:ad:f5:3e:7f: ba:6c:00:2c:bd:73:da:51:91:c5:06:01:da:74:32: de:d4:4e:93:08:f8:9f:42:31:36:f0:81:3b:ec:43: e2:90:86:4e:16:49:e3:fb:4a:92:ce:2a:e7:12:7b: c6:be:72:61:b0:6a:d3:01:56:76:a3:6f:99:22:1d: 2e:01:09:29:88:95:36:31:0f:49:44:53:28:29:83: 7f:3a:40:5b:f2:88:56:4b:67:0b:75:01:ab:37:16: 69:83:25:ad:1f:59:40:f9:42:f0:bf:1b:0c:39:05: 23:25:c7:02:7f:25:ac:e2:68:8a:9f:9d:be:de:8c: e0:de:9e:46:5b:7f:ab:28:e3:4c:07:82:7f:a3:38: eb:04:6e:1c:be:f1:4c:16:a0:93:54:58:80:24:bb: 6e:c4:91:d9:3c:7b:84:0a:3e:4e:6a:08:21:e5:ac: 0a:fc:1a:7f:2c:d7:23:ea:7a:63:5f:2e:91:10:b5: 88:94:e8:d6:3e:fa:5a:5c:46:17:ec:99:50:7f:ed: 71:14:5b:00:c9:a3:ae:27:fd:c2:04:2e:37:94:fa: 2d:5e:68:04:cb:f1:4d:e8:16:a7:c4:8d:1d:7e:0d: 8d:34:92:b9:e6:e0:52:d4:73:ff:25:14:5b:9d:95: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B4:4D:2B:8D:5E:D8:CE:6F:7C:B4:CC:3A:CD:6F:4E:96:78:08:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cc63738-3600-3e12-8631-4d0fa3845ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6a:e9:60:a1:b7:67:af:04:62:4c:ec:b4:91:7e:1e:05:3f: da:cb:19:73:46:66:cf:cb:bc:ce:0f:1e:b4:06:8f:bc:a7:e1: 55:e6:98:4e:5f:18:89:68:a1:22:48:cb:7e:f5:32:76:8f:eb: 69:97:f8:5c:3a:df:ea:1a:65:51:c2:47:b3:8c:b9:ab:77:85: 16:9a:83:e3:7a:52:2a:6f:b5:4e:73:81:bb:3b:71:08:78:00: 31:d5:f0:15:97:3d:5b:ea:4f:ac:1f:fb:33:ba:64:14:79:f2: 84:08:95:c8:f2:c5:8c:2d:52:3c:05:db:5a:d9:5d:ae:04:48: 49:ea:df:13:e7:13:f6:62:26:5a:1a:0e:7e:68:80:f5:ca:3a: b9:5c:de:c8:25:aa:c8:cf:03:89:d9:ad:b5:97:56:0d:b6:a8: f1:d4:8b:78:11:21:24:97:0f:51:bc:37:46:69:b5:91:72:d1: 99:c1:2b:46:1c:51:a7:c0:33:07:8f:83:ed:4b:23:76:17:60: 7a:f9:73:c7:e6:a7:fa:1d:00:5f:5d:7f:5a:cf:b7:8b:72:09: 5f:bf:c7:21:48:d3:0e:53:e4:16:01:5a:e1:e7:af:af:23:a7: e3:fe:cc:1b:d8:f3:53:bc:44:21:c2:ff:23:36:c2:12:f5:66: 61:6f:3f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJdu7pHUALXsT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YjFkNTU4ZmUtMTQxZi00ZTJiLWIwMTQtNGQ2MGE3YmI5ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTouskhZ43IH9q31Pn+6bAAsvXPaUZHFBgHa dDLe1E6TCPifQjE28IE77EPikIZOFknj+0qSzirnEnvGvnJhsGrTAVZ2o2+ZIh0u AQkpiJU2MQ9JRFMoKYN/OkBb8ohWS2cLdQGrNxZpgyWtH1lA+ULwvxsMOQUjJccC fyWs4miKn52+3ozg3p5GW3+rKONMB4J/ozjrBG4cvvFMFqCTVFiAJLtuxJHZPHuE Cj5Oaggh5awK/Bp/LNcj6npjXy6RELWIlOjWPvpaXEYX7JlQf+1xFFsAyaOuJ/3C BC43lPotXmgEy/FN6BanxI0dfg2NNJK55uBS1HP/JRRbnZXdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES0TSuNXtjOb3y0zDrNb06WeAibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NjNjM3MzgtMzYwMC0z ZTEyLTg2MzEtNGQwZmEzODQ1YWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9q6WCht2evBGJM7LSRfh4FP9rLGXNGZs/LvM4PHrQGj7yn4VXmmE5f GIlooSJIy371MnaP62mX+Fw63+oaZVHCR7OMuat3hRaag+N6UipvtU5zgbs7cQh4 ADHV8BWXPVvqT6wf+zO6ZBR58oQIlcjyxYwtUjwF21rZXa4ESEnq3xPnE/ZiJloa Dn5ogPXKOrlc3sglqsjPA4nZrbWXVg22qPHUi3gRISSXD1G8N0ZptZFy0ZnBK0Yc UafAMwePg+1LI3YXYHr5c8fmp/odAF9df1rPt4tyCV+/xyFI0w5T5BYBWuHnr68j p+P+zBvY81O8RCHC/yM2whL1ZmFvP/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 12:13:27 2025 by rpki-client