$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f296b1-d780-3bcf-b0c6-c3f1c7722d73.roa File: 99f296b1-d780-3bcf-b0c6-c3f1c7722d73.roa (raw, json) Hash identifier: xsrnCq+6xMH+9YrHJYiwgX5GOzYL01MxCRCoS7YB2Sg= Subject key identifier: E0:0D:AB:1A:62:23:36:9E:D6:FA:E2:DD:7B:69:E5:9D:20:EE:25:1C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E714B907916D428F4F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f296b1-d780-3bcf-b0c6-c3f1c7722d73.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397216 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e7:14:b9:07:91:6d:42:8f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=63a14b54-3de4-49ca-bceb-9c1f371c41a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:a2:66:8c:e8:da:57:77:ef:72:57:b1:eb: d4:29:46:6c:27:66:fd:72:9a:f2:2e:a8:f1:a3:ce: 24:52:1d:75:60:10:bc:8a:e1:27:35:7d:b1:bb:09: c1:f7:a1:6a:e5:a0:b2:fd:1e:4f:cb:4b:ff:89:a4: b6:9e:4b:0e:49:06:7d:bf:2f:d4:af:dc:35:f3:23: fc:c2:fc:fe:17:0a:84:8f:8a:c6:c4:41:b4:77:2f: cc:bf:67:af:15:08:2c:69:9b:6d:df:88:7d:b8:04: 90:05:aa:94:9f:2b:35:b9:3b:2d:14:0c:63:82:c1: 48:84:f4:df:67:10:5f:e8:86:91:23:28:bd:01:17: 06:e3:68:93:ab:b8:f2:96:5d:4b:fc:84:c6:7a:7e: 53:8c:9c:bb:19:36:52:c0:03:b7:04:8a:be:0b:3d: c7:3a:76:94:0a:05:c7:76:39:75:bc:73:d2:56:99: 0e:bd:80:0b:5f:0c:f4:c3:50:83:46:dd:e7:da:eb: 7e:8e:bb:55:da:dd:55:0b:91:61:26:90:09:4e:8b: 50:2f:89:1f:f5:c4:57:6a:d4:2d:2c:a0:f1:c0:0a: 8a:69:b7:35:da:19:89:8c:a9:80:26:bf:26:0a:54: ac:ea:1b:0e:85:51:fc:cf:e0:02:5b:d1:7d:f4:03: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:AB:1A:62:23:36:9E:D6:FA:E2:DD:7B:69:E5:9D:20:EE:25:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99f296b1-d780-3bcf-b0c6-c3f1c7722d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8c:ce:6c:ed:40:ce:85:e8:88:87:37:65:65:57:21:4e:22: 46:c8:0d:26:90:fa:ff:4d:9f:7a:e3:31:09:b9:10:f6:1f:40: 43:9d:b4:2b:94:b2:f3:0d:3b:8f:db:6c:03:1a:a5:d2:b0:e5: 87:b0:07:bf:7a:66:12:37:d4:9b:44:b7:5a:1a:27:bf:97:bb: d6:8c:78:4b:43:a0:b4:61:d6:12:65:3d:1d:c3:7f:62:12:3a: b3:2f:0f:ec:3b:62:45:74:e9:34:20:05:fd:e7:b7:75:fd:d3: 5a:d4:c3:ca:2c:20:33:94:1b:74:82:71:75:fa:21:e1:f2:72: 7b:a5:18:0f:7c:f1:e9:6d:24:45:54:97:bd:5e:23:a4:d9:58: 70:2f:7f:9b:20:e9:86:c7:4e:9c:36:50:3a:9f:b2:de:d9:09: b7:1b:47:9e:4e:c4:1a:8c:f9:66:eb:db:22:5c:2e:af:0c:3a: 4d:5c:f8:dc:d2:21:7d:6a:d4:b3:08:47:5f:0c:a7:8e:0f:5b: c9:82:84:d3:97:b5:01:f5:76:a2:55:ff:72:1f:bf:02:9e:9b: f9:22:10:c8:cc:ee:c4:9e:68:74:a8:50:c9:1c:28:f0:e1:8a: 33:ff:87:31:60:f9:36:69:1d:f4:d5:70:0d:48:d5:49:ef:5c: 26:a2:af:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ecUuQeRbUKPTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjNhMTRiNTQtM2RlNC00OWNhLWJjZWItOWMxZjM3MWM0MWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP+iZozo2ld373JXsevUKUZsJ2b9cpryLqjx o84kUh11YBC8iuEnNX2xuwnB96Fq5aCy/R5Py0v/iaS2nksOSQZ9vy/Ur9w18yP8 wvz+FwqEj4rGxEG0dy/Mv2evFQgsaZtt34h9uASQBaqUnys1uTstFAxjgsFIhPTf ZxBf6IaRIyi9ARcG42iTq7jyll1L/ITGen5TjJy7GTZSwAO3BIq+Cz3HOnaUCgXH djl1vHPSVpkOvYALXwz0w1CDRt3n2ut+jrtV2t1VC5FhJpAJTotQL4kf9cRXatQt LKDxwAqKabc12hmJjKmAJr8mClSs6hsOhVH8z+ACW9F99AP3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOANqxpiIzae1vri3Xtp5Z0g7iUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTlmMjk2YjEtZDc4MC0z YmNmLWIwYzYtYzNmMWM3NzIyZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKMzmztQM6F6IiHN2VlVyFOIkbIDSaQ+v9Nn3rjMQm5EPYfQEOdtCuU svMNO4/bbAMapdKw5YewB796ZhI31JtEt1oaJ7+Xu9aMeEtDoLRh1hJlPR3Df2IS OrMvD+w7YkV06TQgBf3nt3X901rUw8osIDOUG3SCcXX6IeHycnulGA988eltJEVU l71eI6TZWHAvf5sg6YbHTpw2UDqfst7ZCbcbR55OxBqM+Wbr2yJcLq8MOk1c+NzS IX1q1LMIR18Mp44PW8mChNOXtQH1dqJV/3IfvwKem/kiEMjM7sSeaHSoUMkcKPDh ijP/hzFg+TZpHfTVcA1I1UnvXCair5M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:37 2025 by rpki-client