$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa File: a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa (raw, json) Hash identifier: 77R2kMn7rO4/GeISXMVIM/RQnUIL3go4AluDMQa55yk= Subject key identifier: B5:77:42:80:87:FE:11:5F:E2:E5:7B:6C:9C:29:D5:8E:02:20:FA:03 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1CDE695A92446B50F73C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397218 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:cd:e6:95:a9:24:46:b5:0f:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=349bc591-d6ad-4c4b-996f-707fd13292be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:b9:c1:ae:9c:3a:2f:c5:f9:b4:02:54:19: ca:c7:62:b6:69:cc:ad:ca:4f:9c:c6:aa:ff:b5:80: 84:cf:7a:83:af:d1:27:3b:0c:08:69:dc:53:ae:32: 71:9d:23:98:72:f0:7c:22:08:a8:38:ba:dc:02:3d: 1e:9c:7e:f3:5c:83:ad:25:51:4e:d8:80:7a:c6:c2: bd:ae:a2:b9:4a:b3:f4:da:ca:e4:07:cc:2f:43:51: 28:c0:a9:e9:4a:9b:34:bd:f5:7b:02:9f:ba:d5:cd: dc:f8:25:d9:19:a0:5d:20:5a:8f:2b:52:75:bb:c8: 12:70:17:f1:66:96:6d:a6:f5:18:40:d5:82:90:b6: f8:a7:2c:33:38:f3:71:2a:32:09:d9:ae:db:15:2a: a1:69:da:1f:33:4d:38:00:ce:a9:8f:1d:5d:55:e2: c7:79:e6:a9:b9:95:51:7c:e2:bd:ec:c2:86:c2:b7: 09:03:9a:2e:52:39:65:90:71:e5:a9:f9:50:f0:10: f5:3b:b7:3c:ed:53:64:b3:06:62:1b:7a:18:9b:f8: 1f:ca:fd:b9:c9:e9:87:37:30:e0:e4:3b:b3:56:76: 5b:a9:2f:04:1e:d2:cc:e4:75:5d:25:c4:b3:37:14: fe:ea:7b:82:c1:57:9a:52:67:2f:2b:45:5d:d6:50: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:77:42:80:87:FE:11:5F:E2:E5:7B:6C:9C:29:D5:8E:02:20:FA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a9ec74bd-218b-3097-b00c-cec1b2e7d662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:e2:89:03:25:97:d0:bf:fb:a2:df:78:a3:c1:4f:ed:2b: b4:b4:44:c8:0d:15:6a:43:3a:1c:81:cf:72:65:07:69:77:4e: a0:b0:83:98:0d:14:9f:cf:62:8e:a7:3c:58:f9:f8:bc:5a:63: 8e:9c:07:47:2e:ce:ef:e7:63:e3:dd:8a:9c:17:30:6c:a5:65: be:3e:54:b5:de:c4:dd:76:fe:c0:a4:bc:7d:2a:44:af:85:0c: 2f:8c:ef:38:07:fc:9d:29:1f:ea:b2:97:7d:a5:cb:83:b1:0a: 4a:c3:e5:c7:f1:01:c1:77:76:1c:99:66:52:ad:2f:bc:5d:fd: 2a:ea:7b:24:e2:83:88:1b:11:0f:f2:d3:d3:2f:1c:3d:c4:4e: e4:5f:7a:5e:ab:f0:91:69:65:7d:a4:fa:28:5f:d4:a9:40:8c: 2e:e6:4c:d6:17:e9:26:dd:23:e2:d6:c4:94:4c:3d:0c:db:20: fc:17:75:b8:dd:c8:ef:06:df:d8:0d:c3:85:33:a0:f2:d6:19: f4:37:09:64:bd:b3:36:fe:62:5f:13:78:69:3a:0b:32:b7:23: df:6b:7e:19:a0:0d:45:e0:e1:53:94:da:6d:3c:d1:38:af:5e: ce:b3:23:48:2b:06:fd:89:63:0a:fc:a2:b7:dd:b9:46:71:95: 92:7b:bf:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4c3mlakkRrUPc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzQ5YmM1OTEtZDZhZC00YzRiLTk5NmYtNzA3ZmQxMzI5MmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola5wa6cOi/F+bQCVBnKx2K2acytyk+cxqr/ tYCEz3qDr9EnOwwIadxTrjJxnSOYcvB8IgioOLrcAj0enH7zXIOtJVFO2IB6xsK9 rqK5SrP02srkB8wvQ1EowKnpSps0vfV7Ap+61c3c+CXZGaBdIFqPK1J1u8gScBfx ZpZtpvUYQNWCkLb4pywzOPNxKjIJ2a7bFSqhadofM004AM6pjx1dVeLHeeapuZVR fOK97MKGwrcJA5ouUjllkHHlqflQ8BD1O7c87VNkswZiG3oYm/gfyv25yemHNzDg 5DuzVnZbqS8EHtLM5HVdJcSzNxT+6nuCwVeaUmcvK0Vd1lAciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV3QoCH/hFf4uV7bJwp1Y4CIPoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTllYzc0YmQtMjE4Yi0z MDk3LWIwMGMtY2VjMWIyZTdkNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZ4okDJZfQv/ui33ijwU/tK7S0RMgNFWpDOhyBz3JlB2l3TqCwg5gN FJ/PYo6nPFj5+LxaY46cB0cuzu/nY+PdipwXMGylZb4+VLXexN12/sCkvH0qRK+F DC+M7zgH/J0pH+qyl32ly4OxCkrD5cfxAcF3dhyZZlKtL7xd/SrqeyTig4gbEQ/y 09MvHD3ETuRfel6r8JFpZX2k+ihf1KlAjC7mTNYX6SbdI+LWxJRMPQzbIPwXdbjd yO8G39gNw4UzoPLWGfQ3CWS9szb+Yl8TeGk6CzK3I99rfhmgDUXg4VOU2m080Tiv Xs6zI0grBv2JYwr8orfduUZxlZJ7v58= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:01 2025 by rpki-client