$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95978432-a23b-3b72-a7e1-1d85d95d865e.roa File: 95978432-a23b-3b72-a7e1-1d85d95d865e.roa (raw, json) Hash identifier: OuPyqs/Hr2o10zZ4ceKRCMkz5idPLD3WSRhiKkhJy9k= Subject key identifier: C6:2F:6C:23:E9:B2:93:E0:03:60:38:5C:A1:24:55:FF:94:C7:8E:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1EE79BED8AC6B345E0C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95978432-a23b-3b72-a7e1-1d85d95d865e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397229 IP address blocks: 156.154.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ee:79:be:d8:ac:6b:34:5e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4c605675-30a6-4dfc-8758-137d6c46f09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:a3:ef:5a:f3:18:ed:7a:fb:b0:48:8f:f4: 27:68:d6:bb:03:c2:99:04:14:7a:40:58:f3:1d:f9: 5c:91:89:fb:93:4e:f5:7a:9e:bf:52:51:02:fe:ad: 5c:74:f2:30:67:16:4e:dc:95:08:66:6c:1f:92:1e: 90:21:96:25:67:2f:1a:e6:8a:7c:9d:50:1d:a8:9a: 0f:91:87:39:57:63:d6:44:e0:72:ea:98:b1:57:a9: 51:46:1e:7d:c0:09:f3:c0:a4:54:18:f1:8e:a5:ca: 3e:72:b9:2f:16:55:7a:c7:96:7d:20:23:94:82:4f: 92:34:69:3b:da:17:1c:f3:4a:eb:2f:4a:04:52:fa: 13:1e:3b:bf:ca:24:e8:c0:61:56:fb:86:cb:06:49: 7a:31:8b:4e:ec:95:a1:fa:7d:67:ae:c9:01:1b:97: 12:e3:94:d4:d4:82:4f:74:68:38:23:92:95:93:ef: 88:0f:1b:72:20:cc:41:13:5b:93:b5:bf:13:d3:ae: 79:d4:f3:9e:f1:5b:26:55:ca:de:85:25:c7:13:1e: 76:cb:88:70:b5:ff:49:d4:10:99:4b:e8:a8:2d:00: 6d:5b:d2:cd:3e:38:90:e7:f2:1f:f0:46:aa:5e:2a: d0:7f:1c:5f:15:15:b7:c5:ff:f0:e6:22:18:0a:de: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2F:6C:23:E9:B2:93:E0:03:60:38:5C:A1:24:55:FF:94:C7:8E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95978432-a23b-3b72-a7e1-1d85d95d865e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0a:51:37:17:a4:a4:0f:1a:de:d7:31:65:2d:f5:24:37:f0: 95:4f:dd:66:5f:07:8a:60:b3:35:a6:57:1a:7b:39:90:7b:e9: 3b:a3:7a:a5:8c:75:fe:53:42:af:be:c3:21:84:59:ae:75:9f: 9b:e4:69:2f:72:be:9c:57:50:84:5a:a8:2e:1a:24:cf:50:d9: 2c:f3:2e:35:e4:3b:d7:29:6e:83:5e:cb:15:91:6a:39:08:6e: 43:7e:ef:30:e6:25:b4:c3:fd:a9:1a:6a:e4:a6:b0:57:e5:ab: e6:db:8d:7c:52:ba:15:d8:54:e3:fa:a7:57:37:6e:59:5b:53: cd:3b:42:71:92:04:d0:84:28:75:89:b5:43:80:42:3b:e2:40: 48:0d:11:d8:83:db:64:05:df:f4:24:3c:8d:1b:46:29:33:a2: 42:d5:e3:32:eb:78:3b:09:75:7e:e8:24:0b:de:f5:bd:bb:85: fe:48:cb:3b:2b:3d:4c:a5:04:f7:87:9c:09:c1:5b:3a:0d:8d: 0e:9f:4a:8b:97:7c:c5:2c:59:03:45:56:96:7e:56:82:d8:86: 10:f2:a3:83:3b:33:df:c1:34:b5:f5:1d:a7:8e:83:5c:d9:2c: bf:5a:a0:f7:8d:31:e8:4b:3c:8e:53:2d:ae:65:d9:47:b4:f1: d8:a0:02:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4e55vtisazReDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGM2MDU2NzUtMzBhNi00ZGZjLTg3NTgtMTM3ZDZjNDZmMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yj71rzGO16+7BIj/QnaNa7A8KZBBR6QFjz HflckYn7k071ep6/UlEC/q1cdPIwZxZO3JUIZmwfkh6QIZYlZy8a5op8nVAdqJoP kYc5V2PWROBy6pixV6lRRh59wAnzwKRUGPGOpco+crkvFlV6x5Z9ICOUgk+SNGk7 2hcc80rrL0oEUvoTHju/yiTowGFW+4bLBkl6MYtO7JWh+n1nrskBG5cS45TU1IJP dGg4I5KVk++IDxtyIMxBE1uTtb8T06551POe8VsmVcrehSXHEx52y4hwtf9J1BCZ S+ioLQBtW9LNPjiQ5/If8EaqXirQfxxfFRW3xf/w5iIYCt6BIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYvbCPpspPgA2A4XKEkVf+Ux46dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTU5Nzg0MzItYTIzYi0z YjcyLWE3ZTEtMWQ4NWQ5NWQ4NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEKUTcXpKQPGt7XMWUt9SQ38JVP3WZfB4pgszWmVxp7OZB76TujeqWM df5TQq++wyGEWa51n5vkaS9yvpxXUIRaqC4aJM9Q2SzzLjXkO9cpboNeyxWRajkI bkN+7zDmJbTD/akaauSmsFflq+bbjXxSuhXYVOP6p1c3bllbU807QnGSBNCEKHWJ tUOAQjviQEgNEdiD22QF3/QkPI0bRikzokLV4zLreDsJdX7oJAve9b27hf5Iyzsr PUylBPeHnAnBWzoNjQ6fSouXfMUsWQNFVpZ+VoLYhhDyo4M7M9/BNLX1HaeOg1zZ LL9aoPeNMehLPI5TLa5l2Ue08digAq8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:21:42 2025 by rpki-client