$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa File: 7cf2603a-075d-3a24-850f-ff16f6f88964.roa (raw, json) Hash identifier: BezJU5xH3toCcqzIkJPaE2oe8sQZydDlRqswpJoTY1U= Subject key identifier: 02:3D:C0:E9:74:21:1D:18:E6:14:70:4E:43:CF:75:93:76:95:10:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F87BB389521682527500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f8:7b:b3:89:52:16:82:52:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=bd7e3f74-5f90-4603-ae7d-7117810a7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:ea:d4:ea:a4:87:dc:95:5b:3a:33:3f:77: 06:a9:4d:d4:45:f4:be:79:18:6f:c9:7b:e2:c3:82: a3:2f:be:06:4f:b6:cb:02:f0:f7:5f:64:cd:49:ea: 69:7b:07:a9:66:1d:49:25:96:c9:a8:49:de:c2:a1: 90:70:e7:f0:6e:40:12:b0:2c:83:43:81:fd:6c:ae: f5:e4:e6:25:d6:c2:15:e1:7e:35:b7:95:f1:a0:f5: 1b:cc:74:8c:4d:0b:0e:05:3f:58:aa:86:41:4f:89: 09:03:7a:c7:b2:8e:51:fc:dc:93:63:d8:af:52:71: 6e:ee:a4:43:bc:a4:b0:19:82:8d:b4:20:05:0c:94: d4:2d:40:95:b5:17:49:1f:39:07:6b:a4:6b:0c:12: 59:a8:82:40:c4:c9:ef:8d:de:9a:a4:65:95:63:55: b3:26:1b:0a:27:d8:be:46:d5:27:81:6a:a5:0a:8e: c9:00:28:e8:8b:d0:d5:fc:3e:55:81:66:40:1f:65: 04:41:e5:06:b8:d0:1e:68:77:10:31:33:f9:0d:45: 9b:3f:68:b4:ed:2a:cf:c6:3f:36:cf:7b:27:f6:f6: f7:30:c4:7d:9a:c3:1a:f2:b5:f2:ba:0e:36:37:13: 91:36:29:39:07:1e:b6:15:50:e4:5d:21:70:95:84: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3D:C0:E9:74:21:1D:18:E6:14:70:4E:43:CF:75:93:76:95:10:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7cf2603a-075d-3a24-850f-ff16f6f88964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b3:cb:0f:5a:2b:15:ca:b4:32:85:2d:f2:4a:8c:0c:a1:10: 2a:98:ad:a0:3c:a2:be:d2:2f:b0:80:2f:42:e4:a4:78:32:e5: 46:86:51:75:4f:7c:6c:8d:c3:19:6c:a6:e0:e4:5f:af:e5:d2: 20:16:24:9c:81:88:e8:93:82:d5:b0:bc:83:1f:63:2a:b8:9e: a8:32:25:f4:ff:67:36:1f:f2:77:1f:ae:18:cf:f9:df:38:64: cc:9c:63:4c:73:a2:4a:b5:fa:fb:f5:1a:06:4b:b2:f9:bb:c9: 40:94:74:39:27:87:79:66:cb:5c:dc:2c:d6:3c:e4:71:06:10: 74:f3:6b:15:30:9a:56:67:fa:f1:21:0b:48:87:6d:95:91:b5: 8b:23:23:1c:ec:6e:bd:c8:8b:79:da:c4:3b:db:df:fc:69:07: 35:31:b5:49:c1:b2:6f:53:1b:b0:fb:66:26:74:39:c9:0e:7c: 72:9b:f3:b4:19:5d:49:13:1b:c9:67:ba:14:7a:e0:cc:30:bb: c2:40:ec:c7:e7:f2:df:86:92:36:d1:40:6c:ae:e7:09:e3:1f: d1:d0:fc:a5:d3:58:7f:95:ec:d5:85:e4:f8:30:5c:4e:9e:ee: 4f:19:87:81:bb:02:36:37:d8:91:b8:13:06:0e:5b:3a:d6:18: d4:77:ff:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fh7s4lSFoJSdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmQ3ZTNmNzQtNWY5MC00NjAzLWFlN2QtNzExNzgxMGE3MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqPq1Oqkh9yVWzozP3cGqU3URfS+eRhvyXvi w4KjL74GT7bLAvD3X2TNSeppewepZh1JJZbJqEnewqGQcOfwbkASsCyDQ4H9bK71 5OYl1sIV4X41t5XxoPUbzHSMTQsOBT9YqoZBT4kJA3rHso5R/NyTY9ivUnFu7qRD vKSwGYKNtCAFDJTULUCVtRdJHzkHa6RrDBJZqIJAxMnvjd6apGWVY1WzJhsKJ9i+ RtUngWqlCo7JACjoi9DV/D5VgWZAH2UEQeUGuNAeaHcQMTP5DUWbP2i07SrPxj82 z3sn9vb3MMR9msMa8rXyug42NxORNik5Bx62FVDkXSFwlYRJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI9wOl0IR0Y5hRwTkPPdZN2lRDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NmMjYwM2EtMDc1ZC0z YTI0LTg1MGYtZmYxNmY2Zjg4OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuzyw9aKxXKtDKFLfJKjAyhECqYraA8or7SL7CAL0LkpHgy5UaGUXVP fGyNwxlspuDkX6/l0iAWJJyBiOiTgtWwvIMfYyq4nqgyJfT/ZzYf8ncfrhjP+d84 ZMycY0xzokq1+vv1GgZLsvm7yUCUdDknh3lmy1zcLNY85HEGEHTzaxUwmlZn+vEh C0iHbZWRtYsjIxzsbr3Ii3naxDvb3/xpBzUxtUnBsm9TG7D7ZiZ0OckOfHKb87QZ XUkTG8lnuhR64Mwwu8JA7Mfn8t+GkjbRQGyu5wnjH9HQ/KXTWH+V7NWF5PgwXE6e 7k8Zh4G7AjY32JG4EwYOWzrWGNR3/1M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:35 2025 by rpki-client