$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7db73fb2-deee-3723-9d59-dbe360cda78c.roa File: 7db73fb2-deee-3723-9d59-dbe360cda78c.roa (raw, json) Hash identifier: FmhJdkjQpyMc7etT42HKtmsx0Fqy1bT2EYPPY26pAck= Subject key identifier: 2A:13:6E:93:65:1E:77:76:2C:61:2E:92:26:9B:98:27:98:8C:60:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E4FFD783875E7F7A9780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7db73fb2-deee-3723-9d59-dbe360cda78c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397215 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e4:ff:d7:83:87:5e:7f:7a:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=21bb31ed-1767-4818-8720-14f9b68ea7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:18:23:0b:56:82:8b:76:e6:24:d3:e8:b7: d7:2d:68:11:2a:96:b0:a6:11:96:07:22:9a:f9:7a: 05:51:23:4f:bf:59:ff:0c:2e:71:c2:2e:a2:b9:4e: d3:7d:92:16:b7:a8:d7:ae:a9:d7:f7:b2:94:96:f5: 04:ec:19:19:41:8a:4e:3e:71:36:9e:77:e7:53:48: ec:48:f9:d9:79:ab:84:ae:1f:c6:00:49:8d:92:e6: af:bb:22:dc:b4:db:bc:1d:8c:3e:f5:df:3e:fe:1c: f5:80:6f:81:2d:8c:b3:60:4b:24:f7:15:9a:41:63: f0:c6:1f:53:c8:df:12:11:c9:a0:03:f2:2b:1d:22: bf:7c:17:20:b9:13:6d:22:fc:f6:f9:d9:7f:55:56: 39:51:88:df:34:bf:74:c4:e6:db:cc:83:45:c5:fb: 8d:c4:04:9e:df:70:8e:73:26:06:48:81:7f:a9:85: 1b:bd:9f:4a:35:f1:62:b2:2d:bc:54:8f:af:73:39: 22:87:f9:e1:30:e9:71:7b:4c:55:4b:c5:85:1b:8f: 3e:f7:55:98:7a:a6:e1:79:6e:83:ba:ce:6d:6e:cb: a8:2f:21:54:f0:30:db:b5:04:59:56:b7:60:ab:32: e1:58:94:5b:59:3e:ab:cb:2c:b6:13:24:13:ec:35: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:13:6E:93:65:1E:77:76:2C:61:2E:92:26:9B:98:27:98:8C:60:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7db73fb2-deee-3723-9d59-dbe360cda78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f0:60:9c:57:f4:92:b1:b7:e6:49:b4:7a:c7:53:67:b0:57: 15:02:fc:84:b8:3f:93:a6:cb:d2:db:03:7e:f4:8c:aa:72:d3: 95:83:1c:13:18:54:12:fb:dd:b5:43:c0:53:e2:c1:c3:0e:89: da:ac:9f:8c:02:16:a1:01:af:c9:75:71:35:b8:df:10:50:f6: 49:f7:21:ac:b6:e8:72:7d:7b:c7:b3:42:53:10:00:ac:f7:de: 10:37:84:76:b3:a9:85:71:c0:a7:fd:20:43:18:18:48:ae:80: 77:aa:67:65:4e:bc:f6:a9:03:e6:00:88:27:3f:ee:e1:6d:87: 85:89:f6:29:83:ed:e8:2a:f1:a3:fe:e0:fd:a1:68:02:cf:a4: be:55:5a:51:01:e3:7a:4b:e8:99:75:09:e7:3a:2d:5c:81:ee: 13:eb:ef:92:70:f8:32:b9:90:e7:03:f0:a0:8a:0d:db:79:da: c4:28:cb:4d:c9:bd:5f:2a:62:0f:67:cd:d6:3c:8b:34:35:54: 3c:65:17:2c:7d:29:05:7d:fe:7c:78:f4:65:7f:35:a3:d0:d3: 41:cc:19:6e:06:b7:d2:a8:5f:9d:f1:12:94:48:cb:0c:f4:48: dd:d5:f2:40:8e:d5:34:4b:f1:64:bd:dd:a3:ec:84:8b:b0:49: 6f:f8:e6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eT/14OHXn96l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjFiYjMxZWQtMTc2Ny00ODE4LTg3MjAtMTRmOWI2OGVhN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil0YIwtWgot25iTT6LfXLWgRKpawphGWByKa +XoFUSNPv1n/DC5xwi6iuU7TfZIWt6jXrqnX97KUlvUE7BkZQYpOPnE2nnfnU0js SPnZeauErh/GAEmNkuavuyLctNu8HYw+9d8+/hz1gG+BLYyzYEsk9xWaQWPwxh9T yN8SEcmgA/IrHSK/fBcguRNtIvz2+dl/VVY5UYjfNL90xObbzINFxfuNxASe33CO cyYGSIF/qYUbvZ9KNfFisi28VI+vczkih/nhMOlxe0xVS8WFG48+91WYeqbheW6D us5tbsuoLyFU8DDbtQRZVrdgqzLhWJRbWT6ryyy2EyQT7DUeJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoTbpNlHnd2LGEukiabmCeYjGAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2RiNzNmYjItZGVlZS0z NzIzLTlkNTktZGJlMzYwY2RhNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfwYJxX9JKxt+ZJtHrHU2ewVxUC/IS4P5Omy9LbA370jKpy05WDHBMY VBL73bVDwFPiwcMOidqsn4wCFqEBr8l1cTW43xBQ9kn3Iay26HJ9e8ezQlMQAKz3 3hA3hHazqYVxwKf9IEMYGEiugHeqZ2VOvPapA+YAiCc/7uFth4WJ9imD7egq8aP+ 4P2haALPpL5VWlEB43pL6Jl1Cec6LVyB7hPr75Jw+DK5kOcD8KCKDdt52sQoy03J vV8qYg9nzdY8izQ1VDxlFyx9KQV9/nx49GV/NaPQ00HMGW4Gt9KoX53xEpRIywz0 SN3V8kCO1TRL8WS93aPshIuwSW/45kE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:43:46 2025 by rpki-client