$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa File: 8409dc48-d96d-387f-b8c6-f8da865cae9e.roa (raw, json) Hash identifier: YSbir8MyVsOZjJH7+gfiu5i6jbOqcxOzvr4x3qLYMRY= Subject key identifier: 3A:CD:8B:8C:F8:63:F8:C3:F6:72:D1:0A:96:A4:B0:E6:F9:A5:35:36 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA6F961E8C7FA92C26500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397243 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a6:f9:61:e8:c7:fa:92:c2:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=01ed2a26-47de-4bef-8530-7fee6156a5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:2a:15:6b:30:4d:43:b8:58:47:ed:84:70: 18:10:65:18:a2:65:3e:32:a4:c8:be:7f:31:3c:11: 08:30:ff:5c:42:97:ef:14:19:50:8b:ed:18:e1:96: 00:cd:8d:cc:f3:40:86:ec:da:dc:7c:62:c1:c2:e3: bf:60:43:dd:71:e1:1f:43:8b:5f:9b:a1:5b:e4:8e: 66:36:34:e2:de:80:d7:25:41:9d:c9:7c:a9:c0:2d: 65:ea:9f:4f:03:1f:44:97:d9:8b:5b:8d:69:c8:00: 48:79:78:91:aa:00:d0:ec:2d:75:c4:37:d8:57:27: 71:05:01:e6:21:3f:cf:b8:f3:3d:a9:33:6b:4d:c5: bf:c1:c3:72:64:99:5d:b5:de:d7:9c:26:ab:52:e6: 0f:d3:14:85:b2:ac:c2:8f:ac:ad:e1:84:af:de:27: 07:1c:e7:82:6d:bf:95:9d:ce:85:ba:62:b6:18:59: b5:30:52:02:a1:8a:fc:85:a9:75:fb:96:0c:40:7c: 02:d6:ef:8f:aa:d2:3d:35:39:04:18:da:bd:92:85: a5:7d:91:56:9b:9f:23:a1:18:a1:35:f8:62:c0:98: da:f8:8d:fd:f9:cb:c3:d5:6e:43:6c:a5:77:b7:0d: 58:cc:d2:27:68:cf:70:32:5a:91:07:cf:e4:10:1e: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CD:8B:8C:F8:63:F8:C3:F6:72:D1:0A:96:A4:B0:E6:F9:A5:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:af:f8:62:df:52:cd:4d:bb:17:e9:83:bd:6e:ee:da:2a: dd:4a:87:78:e9:d2:75:09:83:d6:38:40:28:56:8c:af:53:e7: 67:7e:5b:46:42:3c:24:7d:36:c5:f5:b3:55:17:74:37:73:68: 27:08:c0:dc:bf:d6:c3:dd:08:80:53:86:20:82:23:d1:4c:c4: 77:10:3e:45:23:b3:a1:c8:5a:3f:7e:3d:a9:9a:b3:b3:c9:0b: cd:3f:ce:82:a8:20:c5:2a:3e:66:1c:5e:ae:5e:d8:21:f0:e0: ba:00:9f:27:de:cb:2a:21:88:1e:04:f3:b7:2c:77:86:bd:f9: 05:a1:da:86:4c:56:a6:bd:54:0f:1e:e8:50:ff:7f:15:50:f8: 3e:da:ed:3e:d1:dd:b7:19:29:b2:57:5f:5e:23:85:4c:7c:04: a1:88:7a:51:65:9d:4e:66:74:29:77:ab:ff:20:e8:a5:4a:9d: f2:ba:fa:e2:d0:60:64:26:79:7e:a5:35:b5:cb:5b:ca:72:27: d4:4e:0f:cc:18:c4:75:4f:8b:cd:b1:79:16:69:51:55:49:80: f8:1a:18:c2:80:8b:51:3f:89:3d:11:01:ec:9d:6c:5f:f7:62: 4a:5d:50:41:35:aa:c8:d2:c5:7a:64:91:0f:0c:a1:d3:f4:a5: 48:af:4f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKb5YejH+pLCZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MDFlZDJhMjYtNDdkZS00YmVmLTg1MzAtN2ZlZTYxNTZhNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPUqFWswTUO4WEfthHAYEGUYomU+MqTIvn8x PBEIMP9cQpfvFBlQi+0Y4ZYAzY3M80CG7NrcfGLBwuO/YEPdceEfQ4tfm6Fb5I5m NjTi3oDXJUGdyXypwC1l6p9PAx9El9mLW41pyABIeXiRqgDQ7C11xDfYVydxBQHm IT/PuPM9qTNrTcW/wcNyZJldtd7XnCarUuYP0xSFsqzCj6yt4YSv3icHHOeCbb+V nc6FumK2GFm1MFICoYr8hal1+5YMQHwC1u+PqtI9NTkEGNq9koWlfZFWm58joRih NfhiwJja+I39+cvD1W5DbKV3tw1YzNInaM9wMlqRB8/kEB4OIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrNi4z4Y/jD9nLRCpaksOb5pTU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODQwOWRjNDgtZDk2ZC0z ODdmLWI4YzYtZjhkYTg2NWNhZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE0r/hi31LNTbsX6YO9bu7aKt1Kh3jp0nUJg9Y4QChWjK9T52d+W0ZC PCR9NsX1s1UXdDdzaCcIwNy/1sPdCIBThiCCI9FMxHcQPkUjs6HIWj9+Pamas7PJ C80/zoKoIMUqPmYcXq5e2CHw4LoAnyfeyyohiB4E87csd4a9+QWh2oZMVqa9VA8e 6FD/fxVQ+D7a7T7R3bcZKbJXX14jhUx8BKGIelFlnU5mdCl3q/8g6KVKnfK6+uLQ YGQmeX6lNbXLW8pyJ9ROD8wYxHVPi82xeRZpUVVJgPgaGMKAi1E/iT0RAeydbF/3 YkpdUEE1qsjSxXpkkQ8ModP0pUivT5o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:47 2025 by rpki-client