$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa File: aea14efb-c109-32d8-ae22-1f7f2768265d.roa (raw, json) Hash identifier: KJWjxBZb+7Q9gOwcdrTWS1HCfkePcO9oQBf5TkupULg= Subject key identifier: FA:6A:04:19:11:FF:7D:1B:FC:4C:C5:7E:C7:B3:F6:54:6C:D6:6C:DB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C8560F6500A039955FA00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397239 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:85:60:f6:50:0a:03:99:55:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=54dfbb0d-0584-4dd4-9954-bb1145ca39c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:dc:97:0a:db:df:d3:35:d7:c1:9b:f8:61: 89:51:ba:21:ba:90:cc:67:04:af:7d:64:bb:e5:46: 43:a3:ba:8c:11:29:fc:15:83:22:d9:79:35:98:3b: bf:13:22:3f:65:c1:06:3c:d0:ec:4c:a2:44:7f:eb: d0:13:bb:c8:b7:7a:0c:01:6c:05:b4:43:8f:ce:91: 6e:b4:7e:2c:f1:e7:ff:86:ad:f2:ba:93:00:c2:63: 62:dd:ed:62:26:4b:d6:9e:4e:ae:34:e8:66:09:7a: 06:c3:ab:2a:fe:6e:2c:5c:a5:75:cf:89:ef:73:83: e6:95:e3:04:b0:02:17:b5:58:e5:77:1e:89:5c:8d: 34:72:cf:10:02:14:c6:ea:b1:40:cb:b1:7b:9b:a8: 95:73:38:df:22:50:15:50:c8:27:1c:4c:32:65:3c: 46:b6:39:ca:e4:68:89:b9:d4:c5:76:0b:df:c1:7e: c9:51:f2:c4:38:0b:93:09:e2:6b:2c:59:0c:82:17: 53:2a:2c:4f:ad:f1:be:2e:f1:b7:40:53:45:b1:24: 4c:82:eb:bc:18:84:c4:da:6a:8f:05:51:55:d8:d2: 24:f7:91:f1:c5:d9:7b:66:45:28:eb:87:5a:a0:dd: 6f:7b:97:f4:ed:e8:28:25:45:b7:61:0b:a1:96:13: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6A:04:19:11:FF:7D:1B:FC:4C:C5:7E:C7:B3:F6:54:6C:D6:6C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aea14efb-c109-32d8-ae22-1f7f2768265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e5:cd:cc:52:d6:c0:e2:bf:b1:e3:72:bd:61:d0:1a:62:4c: 1c:22:df:e1:35:8c:83:5c:5a:1d:1d:8f:2d:91:17:13:9a:6f: 18:0a:76:dd:05:5b:51:58:92:ef:95:02:07:f1:94:65:91:81: f1:93:53:18:f6:22:28:c3:83:cb:c5:73:fa:b5:13:fd:41:21: ec:de:b6:63:03:fe:02:b1:2d:23:ed:00:49:1f:4b:d7:18:e0: 67:0f:e5:5c:51:7e:1f:2c:44:c8:47:18:ef:05:fd:1b:ba:5b: 26:f0:63:19:4d:71:4e:95:99:59:9f:0d:46:d0:80:af:08:a4: 14:43:fc:69:50:c2:1f:9e:d1:c0:04:b5:0e:b6:57:0a:2b:ce: 5b:73:cd:3f:f2:0c:26:20:77:bd:e3:33:51:f5:68:13:46:08: 37:a5:e4:56:f6:3a:fc:23:ed:aa:80:0d:05:2b:56:b9:e6:de: 9e:b7:c6:47:77:95:55:e8:f4:c5:a6:39:02:9a:c0:18:1b:9f: e6:fb:ab:76:84:88:bd:53:a2:39:50:87:66:f5:1f:e6:db:a8: ff:2e:8b:82:eb:a9:de:4f:91:f0:d7:b5:38:3a:54:e3:87:05: c4:35:9f:16:4b:1a:53:55:77:58:6b:d0:e2:e1:2b:53:df:67: 5d:6a:47:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIVg9lAKA5lV+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NTRkZmJiMGQtMDU4NC00ZGQ0LTk5NTQtYmIxMTQ1Y2EzOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgTclwrb39M118Gb+GGJUbohupDMZwSvfWS7 5UZDo7qMESn8FYMi2Xk1mDu/EyI/ZcEGPNDsTKJEf+vQE7vIt3oMAWwFtEOPzpFu tH4s8ef/hq3yupMAwmNi3e1iJkvWnk6uNOhmCXoGw6sq/m4sXKV1z4nvc4PmleME sAIXtVjldx6JXI00cs8QAhTG6rFAy7F7m6iVczjfIlAVUMgnHEwyZTxGtjnK5GiJ udTFdgvfwX7JUfLEOAuTCeJrLFkMghdTKixPrfG+LvG3QFNFsSRMguu8GITE2mqP BVFV2NIk95Hxxdl7ZkUo64daoN1ve5f07egoJUW3YQuhlhPngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpqBBkR/30b/EzFfsez9lRs1mzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWVhMTRlZmItYzEwOS0z MmQ4LWFlMjItMWY3ZjI3NjgyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjlzcxS1sDiv7Hjcr1h0BpiTBwi3+E1jINcWh0djy2RFxOabxgKdt0F W1FYku+VAgfxlGWRgfGTUxj2IijDg8vFc/q1E/1BIezetmMD/gKxLSPtAEkfS9cY 4GcP5VxRfh8sRMhHGO8F/Ru6WybwYxlNcU6VmVmfDUbQgK8IpBRD/GlQwh+e0cAE tQ62VworzltzzT/yDCYgd73jM1H1aBNGCDel5Fb2Ovwj7aqADQUrVrnm3p63xkd3 lVXo9MWmOQKawBgbn+b7q3aEiL1TojlQh2b1H+bbqP8ui4Lrqd5PkfDXtTg6VOOH BcQ1nxZLGlNVd1hr0OLhK1PfZ11qR8k= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:26 2025 by rpki-client