$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa File: 9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa (raw, json) Hash identifier: uFSJ3YDXZ7tRtsNdrIvOMbPnxxKDilqlTnNXA7Mu7w8= Subject key identifier: 70:17:94:55:55:90:2F:6F:91:78:B5:AD:9F:FD:5E:D2:A1:17:7C:8E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F59A6AEA7B2238025860 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397236 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f5:9a:6a:ea:7b:22:38:02:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e8982090-f4f3-4632-b0c4-433de748f86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:90:08:a3:4a:c0:3a:a1:33:df:00:56:29:5c: 7f:92:ff:7d:c4:b6:50:27:ed:77:f8:84:28:09:37: 03:75:de:b9:aa:93:21:71:3c:9e:4d:32:43:4d:5b: 12:09:04:d2:e2:b1:72:74:1b:ba:78:80:3f:4d:9e: b9:e9:8f:47:43:24:02:8f:df:33:b9:ab:bc:7f:cb: fc:10:9d:60:47:d3:c4:e5:4e:4b:c2:75:5a:11:62: 6e:f3:80:3d:3f:ca:fa:32:d0:f1:9a:1e:bf:f3:15: 8a:ee:0a:2c:35:2f:43:4a:71:a8:d9:2c:30:79:df: 06:f4:ed:71:53:d0:01:e3:e9:da:ac:a8:d0:b8:c7: 14:7b:ac:fc:44:65:2f:71:84:a0:e5:71:c9:60:b0: 57:a3:5a:f5:18:79:32:87:d7:0e:ce:7c:4a:22:6a: 95:33:c7:ff:da:ca:39:64:05:c1:39:b9:3d:3b:d5: c9:48:0a:26:8b:a6:74:6d:97:9f:58:92:b0:e8:b0: f4:68:6f:7b:10:01:f1:1e:7e:53:d2:f0:ed:83:03: f0:75:0f:f4:c8:d6:9c:c4:3e:d5:68:2d:df:09:d1: f1:33:1a:ea:99:53:c8:1f:b3:86:ad:8e:61:8c:5b: df:27:ec:97:f7:b5:c8:3b:46:c9:52:b8:a2:08:7c: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:94:55:55:90:2F:6F:91:78:B5:AD:9F:FD:5E:D2:A1:17:7C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a2bf8f4-f9d4-3949-8aa5-38e8e85bf41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5c:c4:74:8d:a8:18:c1:45:22:29:3b:0a:16:a4:2e:ef:d5: a0:9e:4d:ee:6f:fe:73:57:59:5b:dc:42:5b:dc:1f:96:96:73: e3:7a:2b:6b:5e:2b:63:d1:55:a0:38:b6:13:98:6e:65:71:c6: b0:25:79:00:ef:ab:29:b6:f1:95:26:38:e1:a5:71:cb:b5:c6: 5a:f4:82:5d:44:1b:78:ea:e6:8b:98:63:33:77:ff:bc:24:51: d6:6f:bb:09:2d:fe:6a:81:f1:c0:09:54:2f:bb:70:20:89:4e: b6:80:d3:45:c9:2c:e8:5f:93:f2:48:3e:c0:15:96:16:51:11: a0:c9:de:14:94:99:17:9b:98:97:08:54:b5:f1:6e:53:72:ab: 36:aa:a7:0a:8e:f1:da:3e:96:af:9e:f6:df:e8:84:54:a4:60: 83:4b:8d:b4:f2:04:5d:dc:43:77:a9:d9:a3:c6:b5:fb:42:09: 7a:52:f1:fb:2a:b4:0d:bf:81:ac:dd:49:d4:96:ca:b7:4e:4d: e6:09:10:8a:47:70:7e:57:43:6d:a2:8d:ea:1a:3a:78:55:0f: 3f:63:10:5a:11:0c:3d:68:35:df:56:8f:90:ca:c1:b6:78:76: 9f:9f:49:50:23:2a:94:e3:3c:3d:33:74:61:db:82:84:1d:10: c4:8c:f2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fWaaup7IjgCWGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTg5ODIwOTAtZjRmMy00NjMyLWIwYzQtNDMzZGU3NDhmODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZAIo0rAOqEz3wBWKVx/kv99xLZQJ+13+IQo CTcDdd65qpMhcTyeTTJDTVsSCQTS4rFydBu6eIA/TZ656Y9HQyQCj98zuau8f8v8 EJ1gR9PE5U5LwnVaEWJu84A9P8r6MtDxmh6/8xWK7gosNS9DSnGo2Swwed8G9O1x U9AB4+narKjQuMcUe6z8RGUvcYSg5XHJYLBXo1r1GHkyh9cOznxKImqVM8f/2so5 ZAXBObk9O9XJSAomi6Z0bZefWJKw6LD0aG97EAHxHn5T0vDtgwPwdQ/0yNacxD7V aC3fCdHxMxrqmVPIH7OGrY5hjFvfJ+yX97XIO0bJUriiCHyepwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAXlFVVkC9vkXi1rZ/9XtKhF3yOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEyYmY4ZjQtZjlkNC0z OTQ5LThhYTUtMzhlOGU4NWJmNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtcxHSNqBjBRSIpOwoWpC7v1aCeTe5v/nNXWVvcQlvcH5aWc+N6K2te K2PRVaA4thOYbmVxxrAleQDvqym28ZUmOOGlccu1xlr0gl1EG3jq5ouYYzN3/7wk UdZvuwkt/mqB8cAJVC+7cCCJTraA00XJLOhfk/JIPsAVlhZREaDJ3hSUmRebmJcI VLXxblNyqzaqpwqO8do+lq+e9t/ohFSkYINLjbTyBF3cQ3ep2aPGtftCCXpS8fsq tA2/gazdSdSWyrdOTeYJEIpHcH5XQ22ijeoaOnhVDz9jEFoRDD1oNd9Wj5DKwbZ4 dp+fSVAjKpTjPD0zdGHbgoQdEMSM8j0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:36 2025 by rpki-client