$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14874fe-05fe-394d-aac5-957e1b492ec3.roa File: a14874fe-05fe-394d-aac5-957e1b492ec3.roa (raw, json) Hash identifier: ycK7vPqCq4bbKWh1gtGoQy+KZXwmHpPhsWYDAs03xFU= Subject key identifier: 20:23:D5:3F:2C:C0:02:DF:64:18:37:CA:F1:88:4A:EA:4E:E0:0B:AB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C370AE26F3D5AB271EAE580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14874fe-05fe-394d-aac5-957e1b492ec3.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397216 IP address blocks: 156.154.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0a:e2:6f:3d:5a:b2:71:ea:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a6b0e31c-12ec-41e9-b591-854288c506d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:64:32:a5:8b:92:a5:19:28:53:9d:11:5e: 4b:60:8d:82:26:40:47:59:bd:a3:ef:8a:ce:67:69: 1f:fc:13:7c:54:49:8b:2f:d2:37:a3:d1:3e:f3:92: 50:a7:c5:75:df:70:b7:a1:09:e2:0e:be:c5:0b:b0: 6f:36:8d:e8:25:b1:32:d0:63:c6:4e:25:45:4d:e1: e3:b0:e5:f1:28:89:31:74:be:ca:9c:e4:ab:69:99: b0:df:81:10:3f:cf:92:67:c2:31:02:b0:4b:23:db: c7:bd:96:8d:05:da:dd:cf:d4:06:71:07:c5:54:69: 5f:b6:5b:70:7b:8a:00:3e:97:f1:76:c2:52:45:fb: 88:0d:8c:40:e4:43:46:a4:ee:46:e0:1f:0b:a7:66: e9:45:aa:66:17:bf:f8:47:c4:6c:35:fa:9c:bd:5f: 8b:88:9d:c6:b6:d7:28:b0:2b:12:7f:e5:a6:5b:d7: c7:a1:1d:84:63:c6:c0:8d:3f:bc:42:85:81:42:d2: e2:c2:db:10:9d:8d:ee:03:c7:db:17:8a:8b:46:e1: e4:ca:18:e4:3f:8b:f2:60:63:9e:27:c3:d8:da:01: ea:98:19:56:b7:96:3d:a9:97:91:a3:d7:d6:01:b8: 85:80:f5:1f:7e:f7:df:17:f6:5f:39:fd:cb:0b:0e: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:23:D5:3F:2C:C0:02:DF:64:18:37:CA:F1:88:4A:EA:4E:E0:0B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a14874fe-05fe-394d-aac5-957e1b492ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fd:14:21:2b:e6:90:dd:ef:ea:78:b5:eb:a8:c1:27:1c:22: 9b:30:72:28:08:a5:35:2c:2e:88:bb:aa:d4:84:16:85:63:70: 14:ed:1a:f2:99:37:a3:1b:6d:46:a6:6f:f4:3b:bc:89:04:93: 2d:fe:50:95:01:2e:56:45:a4:be:0d:25:84:95:e3:82:06:a9: c3:25:41:53:1b:b0:fd:ca:48:7c:54:d9:5a:18:aa:9b:9e:bb: f5:7e:ae:9e:69:47:44:30:c2:e9:1f:e9:cd:04:ad:85:e3:f7: 44:59:57:3f:bf:14:42:81:47:e1:60:96:1f:4f:13:05:f3:a5: 9d:7d:bb:57:86:15:d7:b3:6a:e4:59:64:fd:b8:aa:09:d1:1e: 70:03:12:40:e6:f4:8f:d1:43:3c:be:c2:bb:8f:8c:07:31:1c: 15:b1:8c:61:df:58:2e:d1:c8:ab:35:82:b2:31:7b:9d:2e:7f: 12:c2:ee:08:4e:7e:7a:06:e6:3c:61:e9:ad:d1:60:fb:92:ed: 26:80:5f:8d:bd:3c:49:64:75:4f:00:16:c1:be:0e:53:fa:3e: 64:94:d4:c3:3f:83:e5:49:9d:68:e3:e3:7e:78:0d:6c:97:da: a0:cd:eb:9d:9c:81:df:f4:68:2a:ba:33:52:a9:56:bf:16:07: bd:12:25:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwribz1asnHq5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTZiMGUzMWMtMTJlYy00MWU5LWI1OTEtODU0Mjg4YzUwNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+tkMqWLkqUZKFOdEV5LYI2CJkBHWb2j74rO Z2kf/BN8VEmLL9I3o9E+85JQp8V133C3oQniDr7FC7BvNo3oJbEy0GPGTiVFTeHj sOXxKIkxdL7KnOSraZmw34EQP8+SZ8IxArBLI9vHvZaNBdrdz9QGcQfFVGlftltw e4oAPpfxdsJSRfuIDYxA5ENGpO5G4B8Lp2bpRapmF7/4R8RsNfqcvV+LiJ3Gttco sCsSf+WmW9fHoR2EY8bAjT+8QoWBQtLiwtsQnY3uA8fbF4qLRuHkyhjkP4vyYGOe J8PY2gHqmBlWt5Y9qZeRo9fWAbiFgPUffvffF/ZfOf3LCw6DkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAj1T8swALfZBg3yvGISupO4AurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTE0ODc0ZmUtMDVmZS0z OTRkLWFhYzUtOTU3ZTFiNDkyZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJppMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr9FCEr5pDd7+p4teuowSccIpswcigIpTUsLoi7qtSEFoVjcBTtGvKZ N6MbbUamb/Q7vIkEky3+UJUBLlZFpL4NJYSV44IGqcMlQVMbsP3KSHxU2VoYqpue u/V+rp5pR0Qwwukf6c0ErYXj90RZVz+/FEKBR+Fglh9PEwXzpZ19u1eGFdezauRZ ZP24qgnRHnADEkDm9I/RQzy+wruPjAcxHBWxjGHfWC7RyKs1grIxe50ufxLC7ghO fnoG5jxh6a3RYPuS7SaAX429PElkdU8AFsG+DlP6PmSU1MM/g+VJnWjj4354DWyX 2qDN652cgd/0aCq6M1KpVr8WB70SJWc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:16 2025 by rpki-client