$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/868da4ed-11b3-3f65-8add-947ee60dac1e.roa File: 868da4ed-11b3-3f65-8add-947ee60dac1e.roa (raw, json) Hash identifier: ukLvFXgaeeN+fBU/8cj1+zsoluX5pBDvw9ucCI1GR88= Subject key identifier: CA:44:E9:B8:24:9A:F7:04:50:3A:C0:91:95:4C:78:75:48:26:C7:A6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A50F27BB7E1BC7709CD0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/868da4ed-11b3-3f65-8add-947ee60dac1e.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a5:0f:27:bb:7e:1b:c7:70:9c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=e2307f2d-4a2c-4361-a289-ceb7adb6df29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:2d:12:73:bf:0e:be:15:28:df:99:a3:9d: 89:09:a2:a4:d2:11:eb:7c:f5:90:fe:f5:58:4c:6e: c0:3d:d0:c1:1f:9e:84:57:bc:96:ba:89:dc:38:68: 80:76:73:aa:89:78:e8:7e:28:ec:cc:5e:a8:c5:3b: 46:7a:95:c8:3f:a3:e1:55:07:99:c9:89:6c:20:51: 70:d9:12:ed:83:72:ae:b2:7b:27:f5:26:78:6f:c2: 98:c3:62:b6:98:11:60:06:eb:6b:b0:fe:1d:e1:7c: 60:4f:b5:e4:05:ee:41:e6:de:1f:97:5f:60:53:8c: 33:17:3c:fc:5b:ff:80:ed:71:d0:f7:bb:67:b5:18: 86:87:d6:0f:60:1d:29:47:3f:43:d0:03:dd:53:61: 34:bf:82:bd:76:af:60:10:c1:57:90:8c:80:73:f5: fe:d1:73:b3:f2:33:2c:5b:cb:5b:dc:28:f1:af:36: 22:ae:5d:d9:b3:7a:6b:f9:a9:46:e2:40:25:3d:38: 7b:8a:0c:c9:16:7b:89:09:4d:3e:a6:f4:37:2b:13: b4:ba:7a:93:76:9c:5e:4d:6a:c6:0b:79:06:4f:02: 75:42:40:ea:8d:4b:81:9b:8f:c5:a1:39:0f:43:48: 7f:b8:41:e0:f7:4f:13:5e:63:2f:64:d0:1d:ff:e1: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:44:E9:B8:24:9A:F7:04:50:3A:C0:91:95:4C:78:75:48:26:C7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/868da4ed-11b3-3f65-8add-947ee60dac1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7d:a1:75:b9:ec:d5:ee:9f:66:f2:8d:89:3b:a7:51:65:0b: fe:48:0a:e6:74:47:01:71:a8:60:09:c5:61:c5:b5:c2:dc:c9: 8e:a1:70:10:24:4a:89:72:df:df:99:c4:b5:10:81:50:79:3d: 3d:af:1f:ca:8a:db:77:9b:e3:58:fc:0f:b4:a9:69:2b:67:e8: df:e1:11:e2:4b:cd:95:0d:d1:f7:87:7a:7f:54:32:47:18:66: fe:b3:53:fb:08:36:48:4f:bc:63:28:19:28:03:d9:ca:c4:27: 90:6b:90:03:ec:98:88:7d:81:4a:ad:8a:9e:30:16:c1:43:53: c6:b6:73:f7:c8:4a:c9:10:af:c8:42:25:ad:e9:0e:7b:a2:3d: 39:fb:0a:af:d9:2a:8b:6b:05:be:1c:78:8a:c3:88:a6:59:e8: 6c:5c:4e:f0:14:6a:3b:00:a7:b9:09:c7:ee:0a:92:b8:f5:82: 50:0e:68:3b:28:22:60:20:75:0f:98:03:61:be:da:1e:88:41: a2:c3:f1:e9:07:ca:eb:81:e7:03:39:41:b9:3d:33:72:3f:fa: ae:a1:12:69:4c:a4:37:aa:70:ef:45:9d:f2:58:2e:e7:7b:5f: 3d:0c:e1:d0:29:c4:35:c8:38:c8:4f:56:ec:72:02:19:ac:3a: 90:b4:02:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaUPJ7t+G8dwnNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZTIzMDdmMmQtNGEyYy00MzYxLWEyODktY2ViN2FkYjZkZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbQtEnO/Dr4VKN+Zo52JCaKk0hHrfPWQ/vVY TG7APdDBH56EV7yWuoncOGiAdnOqiXjofijszF6oxTtGepXIP6PhVQeZyYlsIFFw 2RLtg3Kusnsn9SZ4b8KYw2K2mBFgButrsP4d4XxgT7XkBe5B5t4fl19gU4wzFzz8 W/+A7XHQ97tntRiGh9YPYB0pRz9D0APdU2E0v4K9dq9gEMFXkIyAc/X+0XOz8jMs W8tb3CjxrzYirl3Zs3pr+alG4kAlPTh7igzJFnuJCU0+pvQ3KxO0unqTdpxeTWrG C3kGTwJ1QkDqjUuBm4/FoTkPQ0h/uEHg908TXmMvZNAd/+E12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpE6bgkmvcEUDrAkZVMeHVIJsemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODY4ZGE0ZWQtMTFiMy0z ZjY1LThhZGQtOTQ3ZWU2MGRhYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF9oXW57NXun2byjYk7p1FlC/5ICuZ0RwFxqGAJxWHFtcLcyY6hcBAk Soly39+ZxLUQgVB5PT2vH8qK23eb41j8D7SpaStn6N/hEeJLzZUN0feHen9UMkcY Zv6zU/sINkhPvGMoGSgD2crEJ5BrkAPsmIh9gUqtip4wFsFDU8a2c/fISskQr8hC Ja3pDnuiPTn7Cq/ZKotrBb4ceIrDiKZZ6GxcTvAUajsAp7kJx+4Kkrj1glAOaDso ImAgdQ+YA2G+2h6IQaLD8ekHyuuB5wM5Qbk9M3I/+q6hEmlMpDeqcO9FnfJYLud7 Xz0M4dApxDXIOMhPVuxyAhmsOpC0Ajs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:41 2025 by rpki-client