$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa File: 839c3cd9-6209-3cf0-888e-e8af054b3558.roa (raw, json) Hash identifier: lJ64Idsp4HbUQYdtXh1O4QLZoKoWi0DQYAXFOJ5+3X0= Subject key identifier: ED:BB:87:D9:73:E5:94:0A:B2:C0:00:46:09:0F:38:E4:7C:39:9B:5A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1CEDDC6A9528957CAB680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ce:dd:c6:a9:52:89:57:ca:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d0b3d006-741b-46a2-9c7f-e83f6a6b26f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:f3:25:f9:da:1a:1b:08:40:a7:f1:ce:69: f6:de:00:39:e6:41:a1:64:31:89:ef:5c:4a:81:11: c9:25:9f:e9:81:f1:cf:a3:80:bb:9c:84:25:55:a2: d4:d5:8e:33:7a:8e:76:db:32:89:f0:9a:51:ee:7e: 43:6e:7d:9a:d9:7c:d3:0b:de:8f:d9:ea:6f:00:ea: d3:3f:70:3a:e4:af:db:4e:dc:e6:9e:e4:68:3c:3f: bc:29:c1:bf:e3:0e:51:fd:1a:68:4c:ed:b7:07:c0: 0c:38:e4:fb:fe:2e:57:ea:26:cb:52:96:7f:2f:8d: 56:09:6b:d4:f8:d0:22:6a:d5:21:e6:52:83:38:36: f5:5f:71:ad:3d:bd:4a:e7:1d:16:d6:c9:e1:30:71: 79:18:d2:82:17:a6:7d:ed:bf:17:ce:28:85:e7:cd: e1:6e:f7:15:0a:77:b2:6e:3b:81:0d:f4:65:b9:f2: 4f:8a:fe:25:24:fa:0e:78:6d:36:a5:9b:3a:46:0b: cf:0a:62:fd:2e:1b:dd:30:81:ed:42:9a:48:11:5c: e3:11:1f:fe:e6:a0:38:75:12:0d:6b:03:bc:b1:dc: c5:8b:5b:97:9d:90:0e:81:5b:1f:c0:ee:ef:25:4a: ff:d7:1a:c4:cf:62:4f:5b:51:f9:ae:85:7b:95:3d: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BB:87:D9:73:E5:94:0A:B2:C0:00:46:09:0F:38:E4:7C:39:9B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3d:27:10:b3:12:71:11:26:a0:fa:03:f6:7d:0c:c6:6d:68: 51:5f:17:e9:55:c4:1a:4d:0c:3a:fa:de:b9:2f:de:0f:82:00: 6d:16:c9:c4:ca:f7:e3:2b:8d:69:0d:da:46:1e:ca:36:df:99: 31:6f:4e:85:a7:f2:26:09:99:36:d7:ec:f0:ae:41:da:ea:28: e5:9b:47:ba:a9:46:1e:7b:c2:fd:d2:44:c3:30:b5:b9:8a:42: d8:69:26:21:45:6d:da:fb:88:d3:47:c7:91:a8:ea:2c:08:7c: c2:ef:bd:83:f1:1d:b8:5b:c3:84:55:27:a7:18:e5:b6:3b:00: 55:80:98:f7:a7:41:a3:9f:88:41:01:67:8e:c8:d0:e6:b8:ce: 81:67:06:80:9f:0a:93:56:94:c4:ad:6f:bb:e1:38:66:b5:f2: e5:a4:da:c5:88:5c:6c:01:c0:e6:61:54:42:17:ac:ed:de:65: 5a:9f:f9:fb:26:3d:50:f3:db:b7:d0:f6:27:b5:31:41:4d:d5: f9:67:84:a4:87:09:1d:5b:dd:9b:45:7d:9d:e0:a3:e7:df:e2: be:31:c7:b3:23:b3:1e:6b:ae:5b:c0:00:a4:83:e8:d6:b4:63: b4:cb:ca:c1:ea:16:b3:55:f1:34:a0:c1:27:21:7a:97:61:c7: c6:a2:b5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4c7dxqlSiVfKtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDBiM2QwMDYtNzQxYi00NmEyLTljN2YtZTgzZjZhNmIyNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIPzJfnaGhsIQKfxzmn23gA55kGhZDGJ71xK gRHJJZ/pgfHPo4C7nIQlVaLU1Y4zeo522zKJ8JpR7n5Dbn2a2XzTC96P2epvAOrT P3A65K/bTtzmnuRoPD+8KcG/4w5R/RpoTO23B8AMOOT7/i5X6ibLUpZ/L41WCWvU +NAiatUh5lKDODb1X3GtPb1K5x0W1snhMHF5GNKCF6Z97b8XziiF583hbvcVCney bjuBDfRlufJPiv4lJPoOeG02pZs6RgvPCmL9LhvdMIHtQppIEVzjER/+5qA4dRIN awO8sdzFi1uXnZAOgVsfwO7vJUr/1xrEz2JPW1H5roV7lT3t9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO27h9lz5ZQKssAARgkPOOR8OZtaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODM5YzNjZDktNjIwOS0z Y2YwLTg4OGUtZThhZjA1NGIzNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg9JxCzEnERJqD6A/Z9DMZtaFFfF+lVxBpNDDr63rkv3g+CAG0WycTK 9+MrjWkN2kYeyjbfmTFvToWn8iYJmTbX7PCuQdrqKOWbR7qpRh57wv3SRMMwtbmK QthpJiFFbdr7iNNHx5Go6iwIfMLvvYPxHbhbw4RVJ6cY5bY7AFWAmPenQaOfiEEB Z47I0Oa4zoFnBoCfCpNWlMStb7vhOGa18uWk2sWIXGwBwOZhVEIXrO3eZVqf+fsm PVDz27fQ9ie1MUFN1flnhKSHCR1b3ZtFfZ3go+ff4r4xx7Mjsx5rrlvAAKSD6Na0 Y7TLysHqFrNV8TSgwSchepdhx8aitSY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:47:32 2025 by rpki-client