$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e769b48-491b-3b0b-926f-92c441fd1064.roa File: 9e769b48-491b-3b0b-926f-92c441fd1064.roa (raw, json) Hash identifier: CZpTH0IQvnd9fNbGjBmzQsSz5cgpZ/dqCLi5OeCocsk= Subject key identifier: 05:A6:24:FF:A6:A2:1C:0B:B6:FC:09:C4:B0:E6:60:A0:D0:E0:52:58 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C9F5A5F6A1CB0984F3000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e769b48-491b-3b0b-926f-92c441fd1064.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397235 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:9f:5a:5f:6a:1c:b0:98:4f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=3225fc7f-89ac-43a9-b7fa-734139c02a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:a2:2e:d9:1b:eb:af:fa:e6:a7:b3:19:20: 9a:0e:cd:d0:6f:ed:79:41:d8:3a:b3:bb:25:6c:c6: 1a:d1:4f:28:6f:5f:4c:01:9c:68:30:3f:5b:8c:20: 2f:b5:58:61:af:50:8b:89:98:c3:c4:00:69:0a:1d: 4f:b5:14:fa:e8:c6:1e:7f:0f:a3:3f:a9:a9:e0:8e: 82:90:66:c1:ff:0e:18:2d:f9:d3:a4:2d:a6:32:43: 34:c7:ec:58:44:ed:16:83:22:4b:5d:97:cc:eb:86: 60:97:62:0e:6d:8e:51:42:8f:26:14:af:2a:db:ec: 81:86:70:ad:d0:ee:c8:fd:96:8d:58:49:18:36:6c: db:76:74:ef:b0:07:cd:7d:76:e0:49:fc:f6:8e:2e: b5:f9:2f:8a:1f:e1:ba:98:dd:f9:c4:4a:af:12:da: 0b:96:b2:1d:ca:02:cb:9e:0a:26:c3:f9:85:f2:ac: 6d:a3:07:f1:96:e7:7c:0f:82:18:78:0e:51:87:2c: ff:79:4e:5e:19:01:46:a5:96:a8:45:be:ec:f9:ba: 31:14:f2:20:f8:9a:dc:9f:bd:41:78:03:5b:b4:50: c1:d6:e4:02:05:6f:f5:9b:95:0f:86:61:5d:cb:4f: 0c:88:3b:3b:56:ca:60:e3:7b:e5:e2:5e:33:33:d4: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A6:24:FF:A6:A2:1C:0B:B6:FC:09:C4:B0:E6:60:A0:D0:E0:52:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e769b48-491b-3b0b-926f-92c441fd1064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:aa:22:ee:d8:51:22:20:e1:ff:ab:32:61:e5:f8:74:6c:92: e7:08:a4:77:88:90:1c:c8:54:3b:ac:5d:67:fe:28:33:7a:08: 76:26:92:35:22:6f:14:84:ab:e3:5a:ae:0a:6e:a0:1e:40:c5: bf:ab:b0:bb:7b:b7:2c:19:52:d4:06:35:46:fb:21:f8:20:b5: c0:46:86:b2:36:e7:fc:69:99:8f:1c:30:3f:87:a2:3f:bb:61: be:38:68:92:17:f0:3e:f5:cf:f6:19:6e:30:2e:d9:a1:a7:ac: ae:42:18:31:ab:42:80:7d:31:b3:dd:30:23:81:f8:e1:5b:43: 49:78:00:6b:0c:f3:e6:ce:8a:13:b1:32:fb:47:b2:9c:ec:ed: 1c:ca:49:11:98:d2:a7:11:ea:d9:ad:65:a7:8d:7f:c3:d9:3c: 62:7c:30:26:4f:0b:9b:a6:44:42:4e:51:86:a0:07:11:44:a9: 31:b7:7f:ef:b4:ab:50:26:9a:90:2f:40:64:29:45:e2:c2:3e: 7d:9d:29:51:64:35:c7:6d:a9:09:5b:0b:b0:9f:68:64:1e:3f: 17:39:23:e9:e6:c4:89:f0:76:df:d1:07:bf:21:0b:de:58:d6: 5a:bc:f3:35:3a:e5:c6:ec:d5:2b:ba:4f:f1:12:aa:70:ad:c3: 79:e5:3e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJ9aX2ocsJhPMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MzIyNWZjN2YtODlhYy00M2E5LWI3ZmEtNzM0MTM5YzAyYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIaiLtkb66/65qezGSCaDs3Qb+15Qdg6s7sl bMYa0U8ob19MAZxoMD9bjCAvtVhhr1CLiZjDxABpCh1PtRT66MYefw+jP6mp4I6C kGbB/w4YLfnTpC2mMkM0x+xYRO0WgyJLXZfM64Zgl2IObY5RQo8mFK8q2+yBhnCt 0O7I/ZaNWEkYNmzbdnTvsAfNfXbgSfz2ji61+S+KH+G6mN35xEqvEtoLlrIdygLL ngomw/mF8qxtowfxlud8D4IYeA5Rhyz/eU5eGQFGpZaoRb7s+boxFPIg+Jrcn71B eANbtFDB1uQCBW/1m5UPhmFdy08MiDs7Vspg43vl4l4zM9S5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWmJP+mohwLtvwJxLDmYKDQ4FJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWU3NjliNDgtNDkxYi0z YjBiLTkyNmYtOTJjNDQxZmQxMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2qIu7YUSIg4f+rMmHl+HRskucIpHeIkBzIVDusXWf+KDN6CHYmkjUi bxSEq+NargpuoB5Axb+rsLt7tywZUtQGNUb7IfggtcBGhrI25/xpmY8cMD+Hoj+7 Yb44aJIX8D71z/YZbjAu2aGnrK5CGDGrQoB9MbPdMCOB+OFbQ0l4AGsM8+bOihOx MvtHspzs7RzKSRGY0qcR6tmtZaeNf8PZPGJ8MCZPC5umREJOUYagBxFEqTG3f++0 q1AmmpAvQGQpReLCPn2dKVFkNcdtqQlbC7CfaGQePxc5I+nmxInwdt/RB78hC95Y 1lq88zU65cbs1Su6T/ESqnCtw3nlPgw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:27 2025 by rpki-client