$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f35e937-af7a-3822-bd72-12556b61f3b8.roa File: 7f35e937-af7a-3822-bd72-12556b61f3b8.roa (raw, json) Hash identifier: 5DzpvQ1ZF6XCq+F0P1unCXjnh0z+JZ9RXATvOVnkq54= Subject key identifier: 4A:62:14:6F:EC:F9:00:78:E5:14:C0:FD:17:19:BD:DA:2A:15:29:AD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1CD61C7DF7633E0623980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f35e937-af7a-3822-bd72-12556b61f3b8.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cd:61:c7:df:76:33:e0:62:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b4a832f4-f25d-4509-b5d8-879e116d4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:fa:51:bc:8f:14:51:fb:a3:a5:4e:67:98: df:12:c5:9f:1b:a4:f9:6e:9a:b2:d8:d8:a3:88:69: 35:29:d2:2b:45:49:c9:cc:82:03:56:07:db:bc:69: 59:24:18:79:64:19:a1:5f:4f:aa:f5:7c:36:3b:21: eb:38:68:48:62:3b:8a:0d:83:54:80:2f:8d:91:ef: c1:e9:0a:95:3a:92:e1:34:d6:3c:4e:e3:dc:ea:06: 23:2d:13:71:37:ec:ef:65:ab:89:60:ae:1d:b4:b3: b0:14:43:2c:50:17:bf:e8:e5:db:2d:1c:e9:ca:d7: fc:d3:20:07:2f:e0:33:57:51:b8:41:9c:ad:eb:95: 22:0a:95:c0:00:f0:9e:1c:06:b8:fa:28:30:0c:45: e2:0e:c9:eb:05:81:31:e3:32:4f:2f:6e:b0:45:0b: e2:4c:a7:8b:da:5e:94:56:13:9b:0e:19:ad:82:8d: 01:eb:53:1e:8d:e2:8a:11:66:81:ca:e7:a9:c8:99: f2:e2:c9:ca:60:ce:a4:40:51:98:d8:04:5e:1d:bc: 46:32:bc:ac:7b:cc:e2:ab:da:09:ea:0d:a2:92:09: 66:dd:72:de:c7:3c:65:0d:6c:19:9c:71:d1:a9:ce: fe:8d:84:89:1f:af:72:ed:de:a4:a2:5b:50:4a:79: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:62:14:6F:EC:F9:00:78:E5:14:C0:FD:17:19:BD:DA:2A:15:29:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7f35e937-af7a-3822-bd72-12556b61f3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d9:9e:78:9d:ca:8b:9e:8e:4b:a7:cd:f4:a3:e7:80:1b:2d: cc:37:8a:13:64:65:b8:11:7b:8c:c6:61:55:b2:84:ab:79:d7: 18:64:d5:5d:7d:36:e6:3b:5c:37:29:1d:76:f8:25:7b:64:33: 3f:ee:d4:5e:6c:d3:e3:23:f4:e4:6d:cb:db:34:68:b1:7e:b4: bb:a5:e4:2e:d9:2d:da:e6:c8:df:94:c7:e8:19:e2:ee:bb:c3: 30:e4:57:b4:b8:28:26:a7:f5:47:55:f7:32:4a:25:6b:ae:e1: dc:df:f1:7f:04:0e:8b:11:a9:77:75:d4:ca:a1:78:54:4a:57: f3:35:e4:35:e2:cd:ce:aa:a9:be:81:d7:fd:2e:44:32:82:90: 29:0e:e6:00:ae:90:2d:97:d6:a2:b3:4d:cd:9d:05:fa:94:45: be:f6:9a:19:70:e5:33:80:8c:cd:6e:98:7b:01:e4:1b:76:79: 3e:46:11:d9:ee:91:e6:0b:1d:f2:38:11:fb:9e:ed:ef:ff:28: 10:6d:ca:74:e0:ec:51:85:3a:0f:07:a7:31:0d:40:7f:3f:1f: 69:da:25:ab:d1:76:f9:7f:18:7f:63:24:8c:07:6b:d1:14:11: fb:6c:30:66:bd:b9:a5:45:af:4f:35:9f:2c:4d:96:25:6a:e6: bb:26:d6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4c1hx992M+BiOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjRhODMyZjQtZjI1ZC00NTA5LWI1ZDgtODc5ZTExNmQ0MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgv6UbyPFFH7o6VOZ5jfEsWfG6T5bpqy2Nij iGk1KdIrRUnJzIIDVgfbvGlZJBh5ZBmhX0+q9Xw2OyHrOGhIYjuKDYNUgC+Nke/B 6QqVOpLhNNY8TuPc6gYjLRNxN+zvZauJYK4dtLOwFEMsUBe/6OXbLRzpytf80yAH L+AzV1G4QZyt65UiCpXAAPCeHAa4+igwDEXiDsnrBYEx4zJPL26wRQviTKeL2l6U VhObDhmtgo0B61MejeKKEWaByuepyJny4snKYM6kQFGY2AReHbxGMryse8ziq9oJ 6g2ikglm3XLexzxlDWwZnHHRqc7+jYSJH69y7d6koltQSnlrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpiFG/s+QB45RTA/RcZvdoqFSmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2YzNWU5MzctYWY3YS0z ODIyLWJkNzItMTI1NTZiNjFmM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHZnnidyouejkunzfSj54AbLcw3ihNkZbgRe4zGYVWyhKt51xhk1V19 NuY7XDcpHXb4JXtkMz/u1F5s0+Mj9ORty9s0aLF+tLul5C7ZLdrmyN+Ux+gZ4u67 wzDkV7S4KCan9UdV9zJKJWuu4dzf8X8EDosRqXd11MqheFRKV/M15DXizc6qqb6B 1/0uRDKCkCkO5gCukC2X1qKzTc2dBfqURb72mhlw5TOAjM1umHsB5Bt2eT5GEdnu keYLHfI4Efue7e//KBBtynTg7FGFOg8HpzENQH8/H2naJavRdvl/GH9jJIwHa9EU EftsMGa9uaVFr081nyxNliVq5rsm1ug= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:14 2025 by rpki-client