$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d688085-2357-3648-9999-a1d55d302765.roa File: 9d688085-2357-3648-9999-a1d55d302765.roa (raw, json) Hash identifier: b+KXOnkKEp5BRtNRx9liazn8Kbt2UKoZgBKcGL6oE0Y= Subject key identifier: 60:73:4C:D9:41:F6:F7:F2:5F:50:1A:70:7C:05:55:88:71:96:BE:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C83BBB70CEBFC632DB748 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d688085-2357-3648-9999-a1d55d302765.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397218 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:83:bb:b7:0c:eb:fc:63:2d:b7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=21947bf4-9bfb-4542-999a-402e66544a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:45:d9:d4:9a:9b:db:ff:09:3b:94:ab:d6: e4:15:91:b5:38:f8:87:2e:b4:e1:7a:d7:58:b4:d1: c0:b7:a2:53:ff:0c:5c:97:05:e8:87:cc:bb:2e:d9: f4:66:8a:f2:60:3f:8c:e5:3f:ed:ac:0e:cd:fc:5e: a0:04:6c:aa:76:2e:22:17:35:aa:29:ad:89:4b:75: 46:7b:48:e0:94:66:0c:f7:4f:1e:2d:03:bb:b1:01: 2c:5d:4e:3c:87:20:6e:cb:b8:76:a0:fd:cd:76:75: a8:e1:22:4d:9b:53:d2:4b:53:97:f3:76:e9:4a:1e: ef:44:9b:74:9f:88:74:d4:5d:b3:a4:13:73:f6:8d: 6b:8b:12:fd:8a:65:92:4e:f4:6e:6f:6c:c3:24:1d: 9d:20:aa:2f:7f:9a:ae:d4:43:20:00:75:cb:51:3a: 3e:31:9c:fe:c1:92:e5:18:ec:3a:23:4e:7c:91:54: 58:1b:ba:f8:cb:bb:65:9c:08:f2:1b:e2:3e:9d:76: f8:f0:fe:4a:67:57:2f:62:a6:ea:67:d2:ad:69:f2: 70:bd:57:4c:36:08:82:66:c9:28:9e:92:49:e9:c3: 37:af:47:f6:ea:af:24:78:d5:93:bb:1f:ae:ec:93: d3:cc:a5:92:a6:b8:c9:fd:ff:39:8d:3f:70:2e:b2: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:4C:D9:41:F6:F7:F2:5F:50:1A:70:7C:05:55:88:71:96:BE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d688085-2357-3648-9999-a1d55d302765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:39:b0:91:d0:96:32:5b:a5:4f:4e:41:6f:8e:c8:de:9a:eb: 17:22:91:04:a4:fd:5f:c1:ac:2d:98:67:e0:ed:54:a4:79:d8: 1f:b5:7d:52:b3:dd:22:0a:c0:33:3a:e3:e3:2e:c6:ee:bd:0b: af:08:c4:37:a5:d7:af:60:a5:a4:20:22:e7:bf:d9:e5:f7:6a: 98:89:45:75:ff:72:80:00:dd:6f:45:1c:2c:e7:32:9d:09:b0: 35:47:f6:38:b8:ff:76:50:18:85:b7:05:d5:7f:87:d3:89:f1: 3f:ca:45:26:e9:e2:ee:25:28:1a:4c:4e:35:86:f7:34:a7:e1: ac:66:7d:5c:e3:cf:4a:16:79:b3:51:26:9e:30:7c:ad:8c:fb: ee:17:7a:97:13:e2:40:e7:8e:22:04:09:19:54:2f:0d:a7:a6: 20:ad:81:97:91:85:92:c0:02:54:0d:4e:d3:68:3e:59:62:f6: 01:2d:13:ba:9e:e1:d9:16:5f:62:ec:49:fd:fc:15:d4:47:10: 7b:f1:7d:b7:15:93:da:7d:bd:d1:c5:af:10:9f:e4:8f:6c:bc: 66:1a:e0:d3:f4:19:0c:82:c4:ac:c9:5c:a5:cc:e5:ca:74:74: 22:0c:ba:25:97:55:69:74:65:b6:de:25:31:79:91:3d:5e:b5: ca:70:3c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIO7twzr/GMtt0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MjE5NDdiZjQtOWJmYi00NTQyLTk5OWEtNDAyZTY2NTQ0YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiVF2dSam9v/CTuUq9bkFZG1OPiHLrThetdY tNHAt6JT/wxclwXoh8y7Ltn0ZoryYD+M5T/trA7N/F6gBGyqdi4iFzWqKa2JS3VG e0jglGYM908eLQO7sQEsXU48hyBuy7h2oP3NdnWo4SJNm1PSS1OX83bpSh7vRJt0 n4h01F2zpBNz9o1rixL9imWSTvRub2zDJB2dIKovf5qu1EMgAHXLUTo+MZz+wZLl GOw6I058kVRYG7r4y7tlnAjyG+I+nXb48P5KZ1cvYqbqZ9KtafJwvVdMNgiCZsko npJJ6cM3r0f26q8keNWTux+u7JPTzKWSprjJ/f85jT9wLrJ0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBzTNlB9vfyX1AacHwFVYhxlr6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWQ2ODgwODUtMjM1Ny0z NjQ4LTk5OTktYTFkNTVkMzAyNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI5sJHQljJbpU9OQW+OyN6a6xcikQSk/V/BrC2YZ+DtVKR52B+1fVKz 3SIKwDM64+Muxu69C68IxDel169gpaQgIue/2eX3apiJRXX/coAA3W9FHCznMp0J sDVH9ji4/3ZQGIW3BdV/h9OJ8T/KRSbp4u4lKBpMTjWG9zSn4axmfVzjz0oWebNR Jp4wfK2M++4XepcT4kDnjiIECRlULw2npiCtgZeRhZLAAlQNTtNoPlli9gEtE7qe 4dkWX2LsSf38FdRHEHvxfbcVk9p9vdHFrxCf5I9svGYa4NP0GQyCxKzJXKXM5cp0 dCIMuiWXVWl0ZbbeJTF5kT1etcpwPBg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:43 2025 by rpki-client