$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa File: aeef4753-8f66-39e0-bfb7-8558d699d846.roa (raw, json) Hash identifier: M9IWFC/sRH15FgWSDdHpzQAWCN/uHMHwC5P3u7+gpEw= Subject key identifier: FB:4C:73:73:65:B5:E8:88:EA:0E:C3:5F:20:40:02:CE:F1:2C:8B:54 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C9F92322E8CD9FFCDABC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397238 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:9f:92:32:2e:8c:d9:ff:cd:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=13cc239a-579e-44e6-bce9-62262a6207f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:24:30:c0:d5:17:14:77:f9:a7:e0:13:da: f8:d7:c6:14:94:c4:99:58:11:4e:07:2c:38:ea:89: b6:d8:79:70:e0:e6:dc:18:5f:c8:13:18:bf:1b:15: 33:56:60:ae:a2:1a:85:dd:4a:db:86:76:65:25:32: e8:c5:1e:d4:70:b0:3c:f0:32:7b:ce:34:f1:39:61: 40:23:d7:58:81:65:b9:d3:2f:82:e3:09:af:45:3e: c2:2b:90:41:53:8a:58:70:f5:54:0e:54:7c:5d:9f: e2:45:9e:f1:69:4d:7e:75:ed:2c:df:9c:6c:3b:f2: f1:c5:ad:34:0f:47:08:f1:70:46:f4:a7:24:e4:bd: fb:ad:e0:53:da:5a:db:bb:8b:bd:7e:4f:79:77:7e: b5:59:99:89:7b:4c:0a:c5:1f:6b:6a:89:80:99:b4: b0:32:5c:f8:09:24:e3:07:02:e3:77:46:3a:cb:85: a5:9e:7a:3c:f1:c4:b2:bf:09:70:4a:38:9e:62:16: cc:2b:9a:4d:4e:cb:0c:06:01:22:5e:12:01:56:0b: 3e:03:3e:45:b8:1c:dd:d0:d7:1e:73:41:0f:8d:25: 21:6e:0d:5a:1e:a5:77:9c:96:42:54:df:b0:35:73: 88:bf:58:9b:9e:05:e4:98:14:d0:73:be:70:ef:7a: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4C:73:73:65:B5:E8:88:EA:0E:C3:5F:20:40:02:CE:F1:2C:8B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aeef4753-8f66-39e0-bfb7-8558d699d846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:aa:5d:a3:6e:c9:ac:c3:63:a0:b0:64:a5:56:96:2d:bf:0f: e8:bc:41:60:74:6e:6e:2e:e7:f1:10:08:b3:b4:b5:6d:62:9e: c7:e7:e3:62:12:fa:38:e6:d3:80:26:b8:ef:ca:5e:38:07:d0: 31:b0:92:db:c0:53:78:9d:c1:06:29:2f:36:c9:52:b7:7b:a8: c6:79:bf:d1:cf:fe:07:6f:68:62:cd:31:25:cd:c1:bf:b2:a6: 62:c8:5b:35:77:c2:53:0c:77:b7:37:bc:11:c7:b2:be:e8:93: bd:b0:a4:e0:62:5d:8a:98:0e:a1:03:71:31:8f:2f:50:a3:e9: 73:5a:ac:df:53:84:b6:1c:4c:b5:30:5e:e1:08:13:88:1d:9a: 92:ad:d8:1e:49:4f:12:6f:a9:09:2b:c0:0e:d4:b9:2f:ad:2f: 7f:8f:df:c1:b8:f6:b5:bd:9e:02:64:6c:62:d6:37:19:9d:13: 59:0e:c2:0b:ee:a8:cd:fa:07:83:72:48:00:59:05:11:41:7f: 8b:f3:a2:28:c5:c6:b6:22:08:e5:7b:5e:7d:b4:a4:1e:47:5f: 9f:1d:de:ce:47:b5:31:a8:8c:65:ac:be:47:c2:9c:16:bf:79: 73:26:6d:9d:1a:26:58:9d:73:7b:83:a9:70:8e:66:53:b5:d7: fd:70:94:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJ+SMi6M2f/Nq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTNjYzIzOWEtNTc5ZS00NGU2LWJjZTktNjIyNjJhNjIwN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsAkMMDVFxR3+afgE9r418YUlMSZWBFOByw4 6om22Hlw4ObcGF/IExi/GxUzVmCuohqF3UrbhnZlJTLoxR7UcLA88DJ7zjTxOWFA I9dYgWW50y+C4wmvRT7CK5BBU4pYcPVUDlR8XZ/iRZ7xaU1+de0s35xsO/Lxxa00 D0cI8XBG9Kck5L37reBT2lrbu4u9fk95d361WZmJe0wKxR9raomAmbSwMlz4CSTj BwLjd0Y6y4Wlnno88cSyvwlwSjieYhbMK5pNTssMBgEiXhIBVgs+Az5FuBzd0Nce c0EPjSUhbg1aHqV3nJZCVN+wNXOIv1ibngXkmBTQc75w73qvBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtMc3NlteiI6g7DXyBAAs7xLItUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWVlZjQ3NTMtOGY2Ni0z OWUwLWJmYjctODU1OGQ2OTlkODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6qXaNuyazDY6CwZKVWli2/D+i8QWB0bm4u5/EQCLO0tW1insfn42IS +jjm04AmuO/KXjgH0DGwktvAU3idwQYpLzbJUrd7qMZ5v9HP/gdvaGLNMSXNwb+y pmLIWzV3wlMMd7c3vBHHsr7ok72wpOBiXYqYDqEDcTGPL1Cj6XNarN9ThLYcTLUw XuEIE4gdmpKt2B5JTxJvqQkrwA7UuS+tL3+P38G49rW9ngJkbGLWNxmdE1kOwgvu qM36B4NySABZBRFBf4vzoijFxrYiCOV7Xn20pB5HX58d3s5HtTGojGWsvkfCnBa/ eXMmbZ0aJlidc3uDqXCOZlO11/1wlKA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:18 2025 by rpki-client