$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa File: a9c196fc-54e7-30bc-ab95-303e9f201b08.roa (raw, json) Hash identifier: lRMZkQy6a2eJBD174mQxQ7r0SSgBkdJU3q4E/ZsiMoI= Subject key identifier: 1C:44:9F:53:CF:B0:F9:17:D9:81:A3:8D:4D:C7:23:3D:82:3D:E8:A6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FA3954261978493BFA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397236 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fa:39:54:26:19:78:49:3b:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=abf8346d-8b56-4ab6-a8f2-7d640d970a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9b:9f:b6:90:05:5b:b8:24:7f:eb:be:02:cc: 1f:e8:ed:4b:c6:f0:c8:c3:ee:3b:c7:e8:b5:e1:9d: b2:3a:3f:3a:b5:e6:31:5a:ff:0f:c4:5b:98:98:11: 97:55:4c:86:bc:bb:03:54:7e:78:e8:52:89:b6:bd: 5b:97:f5:fe:8b:07:f9:07:b2:c9:5b:11:bb:11:c5: 77:7e:79:1b:60:35:79:b6:93:1e:73:30:63:e4:17: c3:bb:b9:30:4a:f2:4d:48:e9:c9:03:dd:5c:1f:90: ca:80:29:e6:5d:71:8b:eb:bb:3d:db:01:85:1b:29: 29:6e:53:cb:de:a4:11:d2:2e:b3:cd:77:0f:37:1a: 5a:dc:71:5e:f1:d7:56:2d:77:23:e8:28:cf:11:70: ae:34:f9:fa:5c:38:bd:f0:c4:62:21:74:80:37:0c: 26:8e:4d:88:b3:64:8e:4d:64:7d:06:77:41:d8:6c: 9b:c2:6e:82:26:d0:66:97:9f:5d:cb:4e:03:75:2a: e4:3f:d2:5d:11:10:19:23:27:83:43:8d:6c:6c:da: 47:92:d7:51:70:18:a6:c4:f5:0d:b0:27:00:3d:4b: d4:fc:c8:dc:72:1d:8b:91:21:ee:b9:80:e8:76:a4: 46:b3:e2:23:df:2a:a4:31:91:cc:76:3a:b2:6c:6d: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:9F:53:CF:B0:F9:17:D9:81:A3:8D:4D:C7:23:3D:82:3D:E8:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9c196fc-54e7-30bc-ab95-303e9f201b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f8:63:8d:6a:cf:f6:c6:05:ed:14:07:3b:97:47:83:41:ed: 3b:0e:03:ba:61:37:5a:d4:dd:25:98:08:33:c1:a5:2c:95:bf: 4e:ea:47:11:2b:c5:54:aa:f9:2f:9d:57:b1:09:70:80:93:aa: 36:6c:75:83:cb:0f:cd:64:55:15:7a:80:bd:a1:8c:7f:e2:c4: 7f:6f:98:4c:5e:dc:56:2f:ba:f6:7e:aa:f4:30:b4:59:b5:24: d8:b6:6c:b1:0d:62:ad:c7:c6:23:2e:1a:62:57:48:ee:46:89: c3:6f:19:63:2f:50:b7:e2:99:49:0d:0d:42:34:03:80:60:29: f4:bc:63:5c:71:78:d6:7b:b0:93:7b:6e:ba:29:43:18:35:e6: ac:bb:97:d7:19:cb:48:a5:9e:89:73:6d:a1:fe:28:e3:d4:a8: 79:91:69:ed:24:6a:34:5e:b1:04:2c:05:ea:29:20:e9:54:26: e6:55:4c:d7:09:23:13:29:65:a6:e8:2f:2d:5b:45:27:8c:20: 31:43:57:fd:09:ed:2c:8a:9c:c8:1c:08:a7:da:4e:e8:fd:52: a4:b0:69:79:25:e1:5b:08:8f:64:79:91:73:3f:ab:36:a2:4b: a6:29:3a:cb:96:15:68:da:e7:10:4c:7e:b1:fa:48:20:ee:94: 64:21:a9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fo5VCYZeEk7+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YWJmODM0NmQtOGI1Ni00YWI2LWE4ZjItN2Q2NDBkOTcwYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJuftpAFW7gkf+u+Aswf6O1LxvDIw+47x+i1 4Z2yOj86teYxWv8PxFuYmBGXVUyGvLsDVH546FKJtr1bl/X+iwf5B7LJWxG7EcV3 fnkbYDV5tpMeczBj5BfDu7kwSvJNSOnJA91cH5DKgCnmXXGL67s92wGFGykpblPL 3qQR0i6zzXcPNxpa3HFe8ddWLXcj6CjPEXCuNPn6XDi98MRiIXSANwwmjk2Is2SO TWR9BndB2Gybwm6CJtBml59dy04DdSrkP9JdERAZIyeDQ41sbNpHktdRcBimxPUN sCcAPUvU/Mjcch2LkSHuuYDodqRGs+Ij3yqkMZHMdjqybG1JTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxEn1PPsPkX2YGjjU3HIz2CPeimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTljMTk2ZmMtNTRlNy0z MGJjLWFiOTUtMzAzZTlmMjAxYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr4Y41qz/bGBe0UBzuXR4NB7TsOA7phN1rU3SWYCDPBpSyVv07qRxEr xVSq+S+dV7EJcICTqjZsdYPLD81kVRV6gL2hjH/ixH9vmExe3FYvuvZ+qvQwtFm1 JNi2bLENYq3HxiMuGmJXSO5GicNvGWMvULfimUkNDUI0A4BgKfS8Y1xxeNZ7sJN7 bropQxg15qy7l9cZy0ilnolzbaH+KOPUqHmRae0kajResQQsBeopIOlUJuZVTNcJ IxMpZaboLy1bRSeMIDFDV/0J7SyKnMgcCKfaTuj9UqSwaXkl4VsIj2R5kXM/qzai S6YpOsuWFWja5xBMfrH6SCDulGQhqXQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:08 2025 by rpki-client