$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa File: a446430b-de4d-35ec-aebe-6e6358a16f7a.roa (raw, json) Hash identifier: KXqbCd7xBfRWQFlJEusoH3OWGO5KNEMOQJlFGRhU2kk= Subject key identifier: 26:CD:C6:DC:0B:7C:A8:FD:D4:4F:06:3C:98:AA:8D:50:AC:BE:95:D2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F951434578FF808F3B10 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f9:51:43:45:78:ff:80:8f:3b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8e2d6b08-ec28-46c6-8e28-3f01a8057156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:e6:a7:e0:76:3a:04:cb:68:00:c1:f5:1e: af:93:93:a7:30:22:74:65:2d:cc:b2:d3:ba:3e:2c: 9e:66:8b:2f:26:18:ab:ea:68:fa:2e:6c:04:bb:cc: bd:bc:b6:c7:00:c5:20:11:0c:3b:f9:db:f3:10:e9: 8d:08:b3:05:10:a7:34:6d:1b:76:7b:9e:a8:17:6d: 0b:15:12:a0:d8:fe:fa:e8:fe:97:ab:14:b4:3b:27: 18:58:a7:f3:18:5d:07:04:75:81:fa:0f:29:55:04: b1:27:38:a4:88:04:82:e2:51:0c:96:aa:7a:e7:76: 71:8a:29:0b:29:b6:0e:dc:3b:48:e9:35:a6:c2:9e: 0a:bd:9f:57:a3:c3:d9:10:2f:14:67:60:dd:24:d8: a7:c2:12:a5:98:37:68:fb:66:3b:01:c5:6a:2b:87: fa:a0:78:ce:ec:94:55:9a:5d:76:00:33:a4:62:2b: 7a:da:8c:89:10:df:75:8b:0d:cb:8b:f0:fc:38:64: 59:a1:47:3e:5a:89:c5:57:de:2b:84:08:dc:f4:62: a5:c3:23:1e:ae:66:aa:5a:ea:be:62:56:31:a6:79: 39:a3:3e:9a:ab:5e:5d:b3:60:da:77:2c:63:e7:28: f4:7a:e9:04:69:96:05:95:25:0b:54:24:eb:79:67: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CD:C6:DC:0B:7C:A8:FD:D4:4F:06:3C:98:AA:8D:50:AC:BE:95:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:04:c8:26:35:a4:9d:9e:02:46:38:77:06:91:6b:b5:5d:ba: 21:dc:38:56:d1:fe:82:e5:19:96:96:d4:13:0f:8a:84:a1:0d: c6:7e:06:3e:aa:b4:f7:db:b9:7a:6f:80:16:08:45:af:c7:65: 22:03:80:32:48:10:cf:6c:08:63:c0:2c:88:68:7a:97:bc:60: 44:a1:60:cd:5c:dc:5b:d8:47:96:1c:31:91:cb:50:40:0f:e4: 79:fd:ff:d1:aa:01:fc:2e:16:50:38:d9:cb:f7:8a:6d:55:92: 93:86:65:46:e5:4e:d8:86:69:bc:b2:a7:14:8f:b4:e1:54:af: 0f:2b:b6:19:77:f1:b2:54:67:f6:40:95:fb:4a:54:c0:f0:db: 94:a6:03:a4:e7:98:f4:01:3d:64:ec:8d:a6:77:e8:19:c3:16: 86:3a:94:cb:b8:a7:b2:1c:e8:65:87:db:b7:9f:96:f0:0d:6c: 28:f5:5b:c1:e6:41:5f:c5:3f:c4:86:5e:a4:7f:10:96:0f:e3: fc:40:48:66:d0:ee:23:4a:e6:9f:63:59:2a:30:9e:53:da:ea: 1c:a0:91:6a:a0:b8:a9:65:1b:f5:f4:97:d9:97:1a:a4:a2:11: 9a:b8:95:9c:b7:73:8b:c4:92:ae:97:67:c4:d7:f3:d7:a6:62: 5a:ac:04:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4flRQ0V4/4CPOxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGUyZDZiMDgtZWMyOC00NmM2LThlMjgtM2YwMWE4MDU3MTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXPmp+B2OgTLaADB9R6vk5OnMCJ0ZS3MstO6 PiyeZosvJhir6mj6LmwEu8y9vLbHAMUgEQw7+dvzEOmNCLMFEKc0bRt2e56oF20L FRKg2P766P6XqxS0OycYWKfzGF0HBHWB+g8pVQSxJzikiASC4lEMlqp653ZxiikL KbYO3DtI6TWmwp4KvZ9Xo8PZEC8UZ2DdJNinwhKlmDdo+2Y7AcVqK4f6oHjO7JRV ml12ADOkYit62oyJEN91iw3Li/D8OGRZoUc+WonFV94rhAjc9GKlwyMermaqWuq+ YlYxpnk5oz6aq15ds2Dadyxj5yj0eukEaZYFlSULVCTreWcN0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbNxtwLfKj91E8GPJiqjVCsvpXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ0NjQzMGItZGU0ZC0z NWVjLWFlYmUtNmU2MzU4YTE2ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAEyCY1pJ2eAkY4dwaRa7VduiHcOFbR/oLlGZaW1BMPioShDcZ+Bj6q tPfbuXpvgBYIRa/HZSIDgDJIEM9sCGPALIhoepe8YEShYM1c3FvYR5YcMZHLUEAP 5Hn9/9GqAfwuFlA42cv3im1VkpOGZUblTtiGabyypxSPtOFUrw8rthl38bJUZ/ZA lftKVMDw25SmA6TnmPQBPWTsjaZ36BnDFoY6lMu4p7Ic6GWH27eflvANbCj1W8Hm QV/FP8SGXqR/EJYP4/xASGbQ7iNK5p9jWSownlPa6hygkWqguKllG/X0l9mXGqSi EZq4lZy3c4vEkq6XZ8TX89emYlqsBJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:07 2025 by rpki-client