$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96bf9f94-cd02-3097-931c-235bf6d1bf6a.roa File: 96bf9f94-cd02-3097-931c-235bf6d1bf6a.roa (raw, json) Hash identifier: je03kwWAwr0c4A8a9TOnioYCXw4ujXpvdj8F02x1MN8= Subject key identifier: 3B:46:20:B2:92:AF:54:B4:A9:BF:96:FB:1C:DE:22:F1:06:7B:AD:F0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAF1F68F80E47576B9C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96bf9f94-cd02-3097-931c-235bf6d1bf6a.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397232 IP address blocks: 156.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:af:1f:68:f8:0e:47:57:6b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=937a2bed-54c7-4972-b423-77223bbbac7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:bb:84:a3:1e:09:65:57:41:bf:3d:a3:34: 9c:0e:30:a5:e0:cc:2c:24:9e:ca:7a:b5:61:91:89: d7:23:40:9d:6f:12:a0:11:d4:8f:d4:db:eb:e1:22: c1:d2:ed:82:d9:25:fe:31:32:b9:90:a2:90:0f:50: 0f:45:dc:76:4e:13:1c:f7:3b:61:a0:27:57:94:37: fe:b7:14:8a:24:df:66:76:1f:28:19:6c:6a:18:52: c3:e0:cd:18:e9:ff:5a:c9:ab:1a:85:57:f3:4a:5b: ac:3c:35:01:af:23:49:de:f1:ec:94:96:d2:6a:f1: 50:b0:42:24:59:48:b6:45:8e:88:71:30:d5:19:74: a6:0f:b4:44:0e:56:ea:f3:c9:d8:e7:c0:aa:e8:b3: 86:ad:cf:9b:3d:b2:1d:8a:dc:32:2d:c8:73:7b:b3: 1e:9a:ef:0a:5b:d1:26:cb:ca:78:2e:01:9a:5d:bc: ce:2c:17:96:22:ea:90:87:30:28:1e:37:bf:d9:d8: fc:a6:88:c4:a8:41:cf:f2:84:e4:b9:9f:ff:81:93: 98:28:19:3e:78:e1:f6:22:a6:56:9a:56:34:c9:b3: 41:0b:64:c7:a6:0b:1a:86:10:be:87:e1:7c:98:47: 47:c1:fb:f9:d6:8e:f0:18:02:18:5f:3b:80:b6:8e: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:46:20:B2:92:AF:54:B4:A9:BF:96:FB:1C:DE:22:F1:06:7B:AD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96bf9f94-cd02-3097-931c-235bf6d1bf6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:13:2d:89:b9:53:f6:4f:34:f7:e4:3b:45:25:43:9f:9f:cd: 6f:4c:60:d6:90:1d:df:3f:6a:20:bc:5d:ea:0e:07:5d:7a:e4: f7:7e:69:8e:56:18:47:10:b9:a6:30:7e:88:c6:b5:d6:84:d9: c4:93:83:f7:62:5e:9b:0d:bf:d3:cf:8c:15:e5:0d:60:3b:f0: f9:ce:2f:93:f8:a7:d0:58:7b:11:29:53:24:73:83:23:4e:45: 0a:d2:01:5a:29:52:6a:a1:f7:01:68:42:21:44:db:cf:c2:a2: 65:e4:23:b9:ce:2e:25:a9:be:95:d6:3b:f4:43:03:c4:c0:0b: 05:fa:74:38:c2:8a:ac:3f:50:1b:6f:d8:9a:68:70:53:28:4a: d9:38:fa:26:8e:38:7d:fa:13:bc:a4:f1:44:43:33:70:43:5a: 37:be:1c:e2:76:6b:32:c6:56:0c:74:dd:1e:1b:18:d6:b0:89: 2b:ce:8a:e4:52:1b:b3:25:03:e1:57:bc:9d:ee:a9:04:49:16: 2f:a4:f7:23:33:91:8d:9f:b3:3a:49:a2:98:79:20:b0:a4:6d: ed:ea:ab:cb:2d:ef:3d:aa:a6:14:b7:81:0b:f2:61:97:0b:87: ad:68:66:a9:b1:01:08:bb:42:91:ab:26:a2:01:ac:ed:a5:54: 6f:e2:6c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbK8faPgOR1drnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OTM3YTJiZWQtNTRjNy00OTcyLWI0MjMtNzcyMjNiYmJhYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhC7hKMeCWVXQb89ozScDjCl4MwsJJ7KerVh kYnXI0CdbxKgEdSP1Nvr4SLB0u2C2SX+MTK5kKKQD1APRdx2ThMc9zthoCdXlDf+ txSKJN9mdh8oGWxqGFLD4M0Y6f9ayasahVfzSlusPDUBryNJ3vHslJbSavFQsEIk WUi2RY6IcTDVGXSmD7REDlbq88nY58Cq6LOGrc+bPbIditwyLchze7Memu8KW9Em y8p4LgGaXbzOLBeWIuqQhzAoHje/2dj8pojEqEHP8oTkuZ//gZOYKBk+eOH2IqZW mlY0ybNBC2THpgsahhC+h+F8mEdHwfv51o7wGAIYXzuAto7ZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtGILKSr1S0qb+W+xzeIvEGe63wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTZiZjlmOTQtY2QwMi0z MDk3LTkzMWMtMjM1YmY2ZDFiZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0TLYm5U/ZPNPfkO0UlQ5+fzW9MYNaQHd8/aiC8XeoOB1165Pd+aY5W GEcQuaYwfojGtdaE2cSTg/diXpsNv9PPjBXlDWA78PnOL5P4p9BYexEpUyRzgyNO RQrSAVopUmqh9wFoQiFE28/ComXkI7nOLiWpvpXWO/RDA8TACwX6dDjCiqw/UBtv 2JpocFMoStk4+iaOOH36E7yk8URDM3BDWje+HOJ2azLGVgx03R4bGNawiSvOiuRS G7MlA+FXvJ3uqQRJFi+k9yMzkY2fszpJoph5ILCkbe3qq8st7z2qphS3gQvyYZcL h61oZqmxAQi7QpGrJqIBrO2lVG/ibMA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:14 2025 by rpki-client