$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c826065-a4fb-383b-9238-b8d276f5ef7e.roa File: 9c826065-a4fb-383b-9238-b8d276f5ef7e.roa (raw, json) Hash identifier: 3GAyo4sP+1RAaHQzbukybz2RR6axIf4p0U0UK8PbAf0= Subject key identifier: 3C:18:42:A3:9C:52:1B:19:97:9E:CF:69:EE:51:10:6E:15:30:BE:28 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA6E77B7CF2E28F0204C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c826065-a4fb-383b-9238-b8d276f5ef7e.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397242 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a6:e7:7b:7c:f2:e2:8f:02:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=d6680afd-6d0c-49e7-9800-45cb1e44ee9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:ea:7a:ef:aa:8d:1b:03:e8:2d:ac:c5:19: b3:79:3a:a2:6b:e8:c3:4e:d8:50:20:13:f1:7c:52: c4:94:8a:4e:8e:d3:53:48:d1:79:f4:82:ad:b2:7d: 84:12:34:05:26:c7:b8:ac:3e:62:7f:72:3a:47:1a: f6:80:14:09:ae:ca:37:1b:4d:a1:aa:ef:6d:45:e3: c1:43:60:11:bb:dc:0a:72:8c:3d:c0:3c:ea:1c:95: c2:00:5f:d8:44:4f:64:50:1d:a7:7c:bc:dc:eb:8f: 5f:d9:6d:aa:7a:a2:5d:22:0e:8d:c8:7c:d6:6a:dc: a7:19:e4:0a:6f:4a:4e:bd:f9:dd:a3:31:9a:e0:a6: 55:74:05:2f:84:b6:b7:d0:5c:97:7c:e2:fe:2a:7e: 16:a7:6d:38:86:7a:1b:b0:8b:da:14:22:8f:72:b5: 2a:26:6f:e9:5c:cc:d3:26:c1:3b:c8:35:43:e7:0f: a1:b0:d8:1c:aa:bc:f5:3d:9a:7c:26:8c:31:f2:19: 30:85:00:96:eb:74:7a:e0:ab:a1:8e:9a:c7:5b:28: ec:0c:a7:6d:28:10:13:4a:0c:84:6e:af:69:57:32: a1:82:04:a2:b7:04:ae:88:80:23:6d:c4:9c:9e:f5: 7a:7d:f9:c8:43:fc:26:89:90:8b:c4:67:1a:d7:7d: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:18:42:A3:9C:52:1B:19:97:9E:CF:69:EE:51:10:6E:15:30:BE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9c826065-a4fb-383b-9238-b8d276f5ef7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:24:79:d3:ff:93:ef:ab:5d:c6:a7:5e:d5:75:65:3d:60:87: 43:a2:dd:09:fc:66:3c:0a:8e:13:a0:3c:a4:be:7f:6c:f5:9c: 14:3e:b4:3c:33:8f:00:97:cd:45:2e:40:95:03:e4:ab:50:9c: 20:ed:f0:78:15:f2:77:4c:76:3f:7a:f8:b5:96:32:f6:3b:9b: c1:f4:a1:ca:79:0c:57:b5:37:c9:dc:f3:96:10:e1:3b:64:e6: de:e5:a1:8c:da:c4:ac:d4:c2:3f:f3:cb:db:9a:41:97:91:1e: df:66:94:94:df:ec:ed:e5:2e:aa:71:87:19:53:8f:a1:a1:60: 4b:26:9d:68:d9:ab:e0:a1:52:1b:60:7e:b9:de:21:14:e0:62: d7:de:43:f0:f6:17:fe:d6:d3:0c:db:92:ba:44:42:c9:b5:79: a7:df:e0:5d:3c:d9:b3:68:39:8b:6d:7b:fa:3b:06:62:d7:2f: 4b:d9:e7:80:bd:19:05:9e:ff:2f:62:5e:39:ed:5e:13:7b:c6: f5:85:7d:a6:db:67:35:3b:28:1f:75:e4:af:a1:7d:de:68:7a: 54:9c:1b:08:b7:e6:79:4f:94:59:66:08:bf:a9:ea:bf:8d:4a: 52:cc:00:98:d3:73:14:2a:19:99:24:13:79:c8:9d:43:73:8c: b2:89:48:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKbne3zy4o8CBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDY2ODBhZmQtNmQwYy00OWU3LTk4MDAtNDVjYjFlNDRlZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz/qeu+qjRsD6C2sxRmzeTqia+jDTthQIBPx fFLElIpOjtNTSNF59IKtsn2EEjQFJse4rD5if3I6Rxr2gBQJrso3G02hqu9tRePB Q2ARu9wKcow9wDzqHJXCAF/YRE9kUB2nfLzc649f2W2qeqJdIg6NyHzWatynGeQK b0pOvfndozGa4KZVdAUvhLa30FyXfOL+Kn4Wp204hnobsIvaFCKPcrUqJm/pXMzT JsE7yDVD5w+hsNgcqrz1PZp8Jowx8hkwhQCW63R64KuhjprHWyjsDKdtKBATSgyE bq9pVzKhggSitwSuiIAjbcScnvV6ffnIQ/wmiZCLxGca130xYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwYQqOcUhsZl57Pae5REG4VML4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWM4MjYwNjUtYTRmYi0z ODNiLTkyMzgtYjhkMjc2ZjVlZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0kedP/k++rXcanXtV1ZT1gh0Oi3Qn8ZjwKjhOgPKS+f2z1nBQ+tDwz jwCXzUUuQJUD5KtQnCDt8HgV8ndMdj96+LWWMvY7m8H0ocp5DFe1N8nc85YQ4Ttk 5t7loYzaxKzUwj/zy9uaQZeRHt9mlJTf7O3lLqpxhxlTj6GhYEsmnWjZq+ChUhtg frneIRTgYtfeQ/D2F/7W0wzbkrpEQsm1eaff4F082bNoOYtte/o7BmLXL0vZ54C9 GQWe/y9iXjntXhN7xvWFfabbZzU7KB915K+hfd5oelScGwi35nlPlFlmCL+p6r+N SlLMAJjTcxQqGZkkE3nInUNzjLKJSAU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:38 2025 by rpki-client