$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9072a475-dc80-3ae5-b766-96e3a109c5b3.roa File: 9072a475-dc80-3ae5-b766-96e3a109c5b3.roa (raw, json) Hash identifier: 0JQx6zkeEag02pHpeMZb7KzVFfejreiv/RhhjiZfLys= Subject key identifier: BF:9D:45:8F:42:49:D1:D0:B0:39:4B:1E:93:A6:C1:50:55:E5:51:D4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F8BFD8028F4B901FEF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9072a475-dc80-3ae5-b766-96e3a109c5b3.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f8:bf:d8:02:8f:4b:90:1f:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=dd15fd08-29d1-45cc-8460-c0d3d4717098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:ce:fd:3e:44:a3:24:f9:e2:c3:c2:8b:9f: bd:d1:13:9c:8d:29:e6:ab:39:01:f0:00:67:eb:15: 9d:56:9f:e9:5a:fe:03:db:5d:da:a3:6c:51:31:1c: 29:d7:09:27:62:63:b8:22:71:e3:66:14:6d:4b:4c: db:74:36:17:38:55:c3:48:60:1d:d6:94:3c:df:70: 10:76:71:36:8b:68:59:82:9f:d2:80:9a:83:f3:df: 2a:d9:b4:88:d1:5f:3f:e1:b9:db:d7:b3:11:8a:e7: ba:c2:42:43:22:7c:2e:21:fa:e6:e0:03:d8:cb:ca: d3:d1:c9:32:08:ea:f2:83:b7:e1:43:c0:2a:e0:f1: 1e:3b:a3:49:be:8f:40:49:e7:65:fa:7d:3b:54:d6: 2e:e8:35:33:bc:56:2a:57:b1:0a:3b:45:a0:c5:ff: 8e:8c:6e:3d:18:24:4e:e6:d4:07:73:0f:e9:80:a9: 88:b7:c4:14:4f:a4:9c:5f:40:b4:f9:f3:e8:a1:9b: d3:69:17:4b:65:11:55:e2:82:f0:d6:55:3e:69:c7: d0:97:72:be:95:0f:18:eb:09:7a:51:7c:f1:dd:5f: 81:da:2e:a7:93:a0:2a:3e:85:34:97:07:28:bd:f1: 25:50:b9:79:5b:10:16:3a:fd:63:6e:60:a6:9c:e6: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9D:45:8F:42:49:D1:D0:B0:39:4B:1E:93:A6:C1:50:55:E5:51:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9072a475-dc80-3ae5-b766-96e3a109c5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:cf:06:ab:25:b1:ec:5c:22:2b:10:68:98:bf:c0:f9:56: 76:60:b9:7e:22:88:e0:db:54:fc:15:32:b9:97:83:e9:80:7b: 34:bf:0a:c3:f0:ee:2d:13:72:dd:0e:db:21:41:3a:25:e7:bd: 5b:8e:eb:6f:ea:7e:22:2a:48:37:db:34:f2:c5:d7:bc:93:0d: 7f:11:89:5d:6c:7b:f0:c4:13:f1:e8:62:fb:6c:7e:3d:da:21: be:f2:9a:47:bf:7f:fc:91:de:b8:73:c8:97:b6:2a:3d:07:4e: b7:3c:d2:4c:b7:26:7b:9b:87:26:55:e3:90:be:d1:b2:e7:f4: ac:ee:8a:17:8d:67:d9:ff:89:f1:b9:8f:17:7a:e3:e0:15:7b: f4:78:70:7c:9b:27:5e:38:2f:67:7a:73:30:56:70:41:b1:00: a6:85:f3:4f:8d:94:88:10:05:1c:73:8b:2d:53:21:f7:26:30: c7:17:80:40:32:63:4e:66:e5:31:30:c6:79:27:44:aa:23:3a: 59:14:b9:39:1b:b5:46:82:42:d1:36:1b:b1:cf:e7:34:95:e5: 56:4d:4f:30:2c:01:c5:7b:15:5d:6b:36:fb:96:44:a7:36:c1: 1a:e3:e9:ea:23:e8:97:ce:b1:86:39:41:f4:6c:8f:2a:63:69: ce:e0:57:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvi/2AKPS5Af7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQxNWZkMDgtMjlkMS00NWNjLTg0NjAtYzBkM2Q0NzE3MDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6XO/T5EoyT54sPCi5+90ROcjSnmqzkB8ABn 6xWdVp/pWv4D213ao2xRMRwp1wknYmO4InHjZhRtS0zbdDYXOFXDSGAd1pQ833AQ dnE2i2hZgp/SgJqD898q2bSI0V8/4bnb17MRiue6wkJDInwuIfrm4APYy8rT0cky COryg7fhQ8Aq4PEeO6NJvo9ASedl+n07VNYu6DUzvFYqV7EKO0Wgxf+OjG49GCRO 5tQHcw/pgKmIt8QUT6ScX0C0+fPooZvTaRdLZRFV4oLw1lU+acfQl3K+lQ8Y6wl6 UXzx3V+B2i6nk6AqPoU0lwcovfElULl5WxAWOv1jbmCmnOY1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+dRY9CSdHQsDlLHpOmwVBV5VHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTA3MmE0NzUtZGM4MC0z YWU1LWI3NjYtOTZlM2ExMDljNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf6zwarJbHsXCIrEGiYv8D5VnZguX4iiODbVPwVMrmXg+mAezS/CsPw 7i0Tct0O2yFBOiXnvVuO62/qfiIqSDfbNPLF17yTDX8RiV1se/DEE/HoYvtsfj3a Ib7ymke/f/yR3rhzyJe2Kj0HTrc80ky3JnubhyZV45C+0bLn9KzuiheNZ9n/ifG5 jxd64+AVe/R4cHybJ144L2d6czBWcEGxAKaF80+NlIgQBRxziy1TIfcmMMcXgEAy Y05m5TEwxnknRKojOlkUuTkbtUaCQtE2G7HP5zSV5VZNTzAsAcV7FV1rNvuWRKc2 wRrj6eoj6JfOsYY5QfRsjypjac7gV5o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:25 2025 by rpki-client