$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0531a39-7de8-3b7a-865e-e2f5243520e9.roa File: a0531a39-7de8-3b7a-865e-e2f5243520e9.roa (raw, json) Hash identifier: 7ejXVwMWQJpN4OPFWuSEBRfZkcd5IhRcleXNrFFPAM4= Subject key identifier: 00:FA:DF:17:F3:64:3C:33:3C:86:E4:5C:3E:4A:1F:42:0E:EB:6B:01 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F2475A48DC6E4ADCB980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0531a39-7de8-3b7a-865e-e2f5243520e9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397219 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f2:47:5a:48:dc:6e:4a:dc:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f2fedb24-1e9e-48b1-80f6-f8134d7a4a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:3c:3c:7e:71:62:cc:ad:e7:7d:2d:5a:5d: d0:63:35:16:27:bb:25:e0:49:2a:fa:d8:3a:22:2f: f4:03:57:b6:6a:69:83:d6:7e:f9:61:cb:ef:f3:15: d8:ea:87:c7:a6:cd:4c:55:84:f0:ef:86:b6:3a:53: 71:25:1a:f3:ff:f9:ec:6f:bf:9d:b8:93:19:fb:54: f7:10:65:e6:42:d7:23:67:74:87:1b:15:83:ec:3a: 6f:27:6e:1e:52:50:5e:cc:fd:fc:03:ef:fb:72:a4: 05:b7:f6:06:cb:57:9d:93:0a:5a:7a:1a:6c:88:f4: 35:37:f1:26:26:8d:5f:e8:44:11:6d:9e:25:fd:f9: 1e:e3:bc:31:d2:c4:54:d8:0f:78:28:1e:03:84:c0: 74:ae:f2:c8:1f:62:da:b0:0e:66:44:17:85:db:67: 81:fd:a3:27:52:68:36:c4:42:f3:38:7b:e8:47:0d: 3d:c2:5c:d6:48:83:56:cf:37:50:72:1a:7f:cb:b5: 63:0b:46:8f:67:a6:38:a6:f2:92:9a:63:f2:1d:69: aa:e4:80:be:0f:e9:3d:39:cc:fd:de:0f:ce:24:78: 6c:84:16:cd:4a:9d:17:8d:69:a6:10:6d:62:9c:65: 85:c2:11:ab:4c:00:2f:31:8d:15:21:8d:39:50:a7: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:DF:17:F3:64:3C:33:3C:86:E4:5C:3E:4A:1F:42:0E:EB:6B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a0531a39-7de8-3b7a-865e-e2f5243520e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:59:6a:8b:9f:16:a3:10:37:d2:3c:0f:19:6d:e0:de:bb:d3: 71:29:1e:dc:fb:78:af:23:dd:eb:bb:6a:dd:42:6d:a1:f5:59: 01:8c:4a:52:4f:73:b6:f6:3e:31:8e:e3:b6:e6:5f:53:d8:e1: bd:09:4f:c3:54:fc:eb:79:61:08:28:cb:0d:50:49:56:4f:b6: a6:7c:8c:46:26:de:a3:69:59:cd:39:fa:96:6b:92:8b:b4:d8: 1f:74:33:77:92:6a:32:c9:11:fe:2d:72:c8:f2:6d:9f:56:2e: cb:da:62:de:0c:c7:7b:03:a0:de:06:b0:34:65:4e:49:99:9d: c2:93:9d:53:79:a9:bc:e0:ab:ad:4f:79:73:36:a5:7f:81:2b: a5:58:f7:ad:99:0e:97:14:73:85:bf:b5:ae:d4:19:c0:a7:b8: 7a:ac:c8:65:3e:dd:68:37:fd:9d:20:c4:6a:fa:27:bd:56:f7: 2f:ba:8a:ff:8f:17:e7:26:2e:b1:fd:a6:14:96:83:7a:16:00: a6:86:06:2f:3d:f2:0f:ee:09:62:d5:0e:f0:94:34:fe:07:bb: e5:06:73:5e:54:be:ea:4a:dd:47:11:45:72:ce:6f:77:76:7a: 34:10:5c:f1:4f:07:a2:af:2f:d8:dd:da:77:d6:cd:b8:3f:f9: da:38:2c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fJHWkjcbkrcuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjJmZWRiMjQtMWU5ZS00OGIxLTgwZjYtZjgxMzRkN2E0YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpo8PH5xYsyt530tWl3QYzUWJ7sl4Ekq+tg6 Ii/0A1e2ammD1n75Ycvv8xXY6ofHps1MVYTw74a2OlNxJRrz//nsb7+duJMZ+1T3 EGXmQtcjZ3SHGxWD7DpvJ24eUlBezP38A+/7cqQFt/YGy1edkwpaehpsiPQ1N/Em Jo1f6EQRbZ4l/fke47wx0sRU2A94KB4DhMB0rvLIH2LasA5mRBeF22eB/aMnUmg2 xELzOHvoRw09wlzWSINWzzdQchp/y7VjC0aPZ6Y4pvKSmmPyHWmq5IC+D+k9Ocz9 3g/OJHhshBbNSp0XjWmmEG1inGWFwhGrTAAvMY0VIY05UKcY/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD63xfzZDwzPIbkXD5KH0IO62sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTA1MzFhMzktN2RlOC0z YjdhLTg2NWUtZTJmNTI0MzUyMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpZaoufFqMQN9I8Dxlt4N6703EpHtz7eK8j3eu7at1CbaH1WQGMSlJP c7b2PjGO47bmX1PY4b0JT8NU/Ot5YQgoyw1QSVZPtqZ8jEYm3qNpWc05+pZrkou0 2B90M3eSajLJEf4tcsjybZ9WLsvaYt4Mx3sDoN4GsDRlTkmZncKTnVN5qbzgq61P eXM2pX+BK6VY962ZDpcUc4W/ta7UGcCnuHqsyGU+3Wg3/Z0gxGr6J71W9y+6iv+P F+cmLrH9phSWg3oWAKaGBi898g/uCWLVDvCUNP4Hu+UGc15UvupK3UcRRXLOb3d2 ejQQXPFPB6KvL9jd2nfWzbg/+do4LNs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:11 2025 by rpki-client