$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa File: a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa (raw, json) Hash identifier: pr/H3KWi2+EVzMEH7kzmPHsm/JmZFCERFjnKXKtSpyM= Subject key identifier: 40:83:F3:5D:CC:03:18:FF:D2:9C:E2:A7:2F:44:51:ED:D0:D8:E2:A1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA9CDA2342FAF216D4600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397218 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a9:cd:a2:34:2f:af:21:6d:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=0a7c8266-2f8c-49e6-9a20-4f86f0c399d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:b4:31:1f:a5:ed:b4:05:48:19:30:eb:55: 3a:64:e6:28:c6:13:01:d7:5f:05:4d:16:10:e3:d8: 38:96:c1:eb:58:86:ea:50:00:9c:96:d3:de:7d:c0: 81:60:f0:11:64:92:11:7d:41:c3:1c:32:c9:42:e9: 35:d2:3e:fd:56:0d:3c:f7:cb:51:3f:d2:1e:4f:8c: 96:63:a3:ab:20:7d:0c:bc:92:2b:b8:ae:a2:f5:0b: 48:a7:d3:24:93:f5:20:5a:9a:b8:59:49:b1:27:74: 05:8a:cc:f7:00:94:c8:40:27:6d:e9:48:17:7f:56: 33:9a:0d:6e:1a:fa:57:ea:05:f0:4c:64:78:79:fc: d6:d5:8f:7a:f7:83:af:9c:07:f4:1e:4e:76:ba:d1: 61:0e:7d:0b:07:a7:c4:eb:89:d8:a9:c8:09:72:a8: c0:cc:f3:1b:21:2e:92:f4:d6:ac:3b:9d:76:a7:83: 22:88:7e:a0:5b:2b:61:2a:52:85:fa:a6:b7:e9:0e: c0:69:36:6b:bc:90:ff:06:b3:81:2f:bc:23:2d:3c: 77:19:97:2a:84:39:bf:e3:18:6f:7f:a0:e8:61:d6: 37:51:70:c0:18:39:c6:a9:5c:dd:05:35:09:1f:c0: 22:41:05:fc:93:19:b7:d6:d6:9a:38:58:6a:dc:1a: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:83:F3:5D:CC:03:18:FF:D2:9C:E2:A7:2F:44:51:ED:D0:D8:E2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a88b0d31-e65c-3857-b667-7ef8e20bce2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bc:48:09:5c:ca:24:05:b1:7f:75:ad:d1:30:cd:62:27:fe: 64:f6:28:4c:21:69:79:e3:08:08:71:ab:25:97:17:ad:2e:7e: 9b:ed:50:57:53:b7:41:61:39:4e:73:62:09:0e:c1:40:24:70: c7:2c:f3:67:7b:ec:6b:ba:37:65:95:46:7f:88:63:41:d1:5b: 6e:2c:15:59:85:25:38:00:0e:33:df:c8:58:91:2e:e8:73:f9: ca:b4:6c:16:0f:1a:53:42:89:67:07:d6:c0:18:d6:d9:b0:6a: fb:27:77:a0:21:35:7e:6e:01:52:fa:e8:48:e3:30:bb:18:79: 67:76:4f:eb:a4:47:95:46:06:de:5f:49:e0:b8:2f:ee:ac:60: fe:54:89:72:ba:ec:7f:93:77:7c:e0:a5:9d:12:0c:12:dd:6a: 38:23:4a:cb:a1:3d:2b:f4:d7:a9:47:2f:7f:0e:8a:aa:a5:2f: ff:97:d3:0e:10:4d:d2:87:10:e9:61:af:98:4e:59:d8:04:b7: de:e4:68:47:f2:52:94:f3:ae:33:d0:2a:d4:9d:37:74:d0:30: e8:87:8d:16:5a:39:5b:6b:34:a0:25:30:a7:24:0c:36:b3:62: 85:e2:00:30:8d:32:b4:a9:37:21:1c:85:ed:ab:43:a2:42:7a: f7:a0:7d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKnNojQvryFtRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MGE3YzgyNjYtMmY4Yy00OWU2LTlhMjAtNGY4NmYwYzM5OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB20MR+l7bQFSBkw61U6ZOYoxhMB118FTRYQ 49g4lsHrWIbqUACcltPefcCBYPARZJIRfUHDHDLJQuk10j79Vg0898tRP9IeT4yW Y6OrIH0MvJIruK6i9QtIp9Mkk/UgWpq4WUmxJ3QFisz3AJTIQCdt6UgXf1Yzmg1u GvpX6gXwTGR4efzW1Y9694OvnAf0Hk52utFhDn0LB6fE64nYqcgJcqjAzPMbIS6S 9NasO512p4MiiH6gWythKlKF+qa36Q7AaTZrvJD/BrOBL7wjLTx3GZcqhDm/4xhv f6DoYdY3UXDAGDnGqVzdBTUJH8AiQQX8kxm31taaOFhq3Bqa9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECD813MAxj/0pzipy9EUe3Q2OKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTg4YjBkMzEtZTY1Yy0z ODU3LWI2NjctN2VmOGUyMGJjZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa8SAlcyiQFsX91rdEwzWIn/mT2KEwhaXnjCAhxqyWXF60ufpvtUFdT t0FhOU5zYgkOwUAkcMcs82d77Gu6N2WVRn+IY0HRW24sFVmFJTgADjPfyFiRLuhz +cq0bBYPGlNCiWcH1sAY1tmwavsnd6AhNX5uAVL66EjjMLsYeWd2T+ukR5VGBt5f SeC4L+6sYP5UiXK67H+Td3zgpZ0SDBLdajgjSsuhPSv016lHL38OiqqlL/+X0w4Q TdKHEOlhr5hOWdgEt97kaEfyUpTzrjPQKtSdN3TQMOiHjRZaOVtrNKAlMKckDDaz YoXiADCNMrSpNyEche2rQ6JCevegfV0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:12 2025 by rpki-client