$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa File: 842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa (raw, json) Hash identifier: W4BOAzRhv5BpNUmb+AxqMVmdwWTJtyAoOnS30Niq8IU= Subject key identifier: 3E:36:E9:35:2B:6D:4B:1C:7E:CB:92:C5:C0:2A:84:5A:24:F6:9C:6D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D5BB473993C8D302B800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397227 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:bb:47:39:93:c8:d3:02:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=df249c26-73b4-4423-a9ef-0242f20f72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:71:23:bf:09:89:44:d9:fe:7a:54:85:9c: a9:e8:22:5b:bd:cb:1e:22:23:88:16:5d:4f:18:12: 9d:04:65:62:ea:27:e2:68:f3:6d:85:ed:dd:a9:e3: aa:59:f2:aa:3a:bc:cc:d5:f5:4a:54:ce:27:08:a7: 4d:c1:39:cd:e1:9e:9b:96:5a:49:ae:6d:b3:b5:34: 8d:7f:57:7d:d3:9e:86:f2:95:9a:46:2e:2b:13:25: 45:62:a7:69:84:b9:2a:e1:7d:31:c1:52:ea:9d:9d: 63:09:48:98:14:f7:29:a7:fa:78:8b:fa:f8:3a:13: b6:7c:b6:9f:09:c4:89:1f:96:ba:d8:10:ce:1f:dc: 57:bd:85:72:01:66:84:cc:28:51:73:08:e4:c5:a5: 41:2d:e9:62:05:70:63:4a:1c:f2:f4:79:ae:b5:e1: 9d:9f:af:99:9c:04:22:aa:17:af:de:6f:af:e1:77: 82:cc:b0:6f:65:b1:2b:70:a8:73:3f:72:95:16:a1: 90:19:0c:d4:45:65:9d:14:ea:7c:45:3b:e6:b6:7f: 46:84:73:ce:40:3f:26:7c:5e:7c:ed:75:cb:cc:f1: 9d:28:33:a8:36:f8:d9:f9:22:6a:8a:c7:12:9d:21: af:1d:ab:a8:26:1f:06:18:b0:e8:7b:c4:69:9f:a2: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:E9:35:2B:6D:4B:1C:7E:CB:92:C5:C0:2A:84:5A:24:F6:9C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/842ce42e-23c2-3c4c-a4b7-7a6314be48e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:67:3e:7e:b1:fa:e5:bd:c5:72:06:c5:7b:45:23:e0:92:84: fa:f0:eb:ca:06:ae:a2:5c:66:49:d2:89:e5:67:ac:7a:92:2d: 5a:55:00:06:c3:9a:56:80:31:97:97:eb:74:42:c3:a6:e8:ae: e2:5c:bb:b2:55:8b:19:37:08:96:b0:7f:9d:8d:d6:db:4e:f5: e7:6f:a1:d4:cf:d7:1d:e1:4b:8f:5f:02:3c:a2:27:79:65:68: 54:0c:a6:fd:04:fb:d9:d0:32:37:48:05:bd:75:32:77:3c:c3: 1b:8b:be:c6:4a:8d:a9:48:09:b8:47:65:0a:28:d7:dc:23:b7: fe:ce:a7:81:55:73:76:9c:1d:3f:ba:25:0d:4b:ed:f5:d0:8a: 60:fd:51:7a:9b:62:23:02:2f:32:e4:7b:a3:da:f5:bb:5c:39: f8:a4:0d:73:a8:c8:39:3e:0c:6c:14:d8:7d:43:bb:8f:72:2c: 7c:d2:07:5b:71:17:b3:21:e0:b9:14:12:13:fc:0a:8f:a6:17: cc:24:ac:81:36:ee:d7:9e:1c:68:1c:60:bb:eb:b0:46:98:e2: 39:1e:b6:a5:3b:bb:0c:1c:76:67:bf:5a:f6:60:b8:2c:27:fd: 44:58:b7:a2:66:c5:9b:cc:46:43:de:80:1d:49:92:6b:6e:8a: 2a:04:00:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dW7RzmTyNMCuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGYyNDljMjYtNzNiNC00NDIzLWE5ZWYtMDI0MmYyMGY3MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdRxI78JiUTZ/npUhZyp6CJbvcseIiOIFl1P GBKdBGVi6ifiaPNthe3dqeOqWfKqOrzM1fVKVM4nCKdNwTnN4Z6bllpJrm2ztTSN f1d9056G8pWaRi4rEyVFYqdphLkq4X0xwVLqnZ1jCUiYFPcpp/p4i/r4OhO2fLaf CcSJH5a62BDOH9xXvYVyAWaEzChRcwjkxaVBLeliBXBjShzy9HmuteGdn6+ZnAQi qhev3m+v4XeCzLBvZbErcKhzP3KVFqGQGQzURWWdFOp8RTvmtn9GhHPOQD8mfF58 7XXLzPGdKDOoNvjZ+SJqiscSnSGvHauoJh8GGLDoe8Rpn6KKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD426TUrbUscfsuSxcAqhFok9pxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODQyY2U0MmUtMjNjMi0z YzRjLWE0YjctN2E2MzE0YmU0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhnPn6x+uW9xXIGxXtFI+CShPrw68oGrqJcZknSieVnrHqSLVpVAAbD mlaAMZeX63RCw6boruJcu7JVixk3CJawf52N1ttO9edvodTP1x3hS49fAjyiJ3ll aFQMpv0E+9nQMjdIBb11Mnc8wxuLvsZKjalICbhHZQoo19wjt/7Op4FVc3acHT+6 JQ1L7fXQimD9UXqbYiMCLzLke6Pa9btcOfikDXOoyDk+DGwU2H1Du49yLHzSB1tx F7Mh4LkUEhP8Co+mF8wkrIE27teeHGgcYLvrsEaY4jketqU7uwwcdme/WvZguCwn /URYt6JmxZvMRkPegB1JkmtuiioEAGY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:46 2025 by rpki-client