$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa File: af66d098-ad1c-32f0-863b-61fe654b6280.roa (raw, json) Hash identifier: HQ3UVUJSX3ld4GfShQTHXO2L7jTru/ITtOjcL5YL1cg= Subject key identifier: 87:69:FE:E7:CB:56:B7:7C:95:F5:27:B8:11:59:1C:90:15:CE:14:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D12D3436F316F4FD3040 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d1:2d:34:36:f3:16:f4:fd:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c0787749-17be-4257-85e5-9de14db4967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d5:86:8d:e3:13:78:fd:2c:40:f3:60:ca:f5: 87:f3:e1:52:22:6a:e5:c6:d7:bd:f8:17:8c:f1:36: 09:49:01:46:a7:eb:fb:e9:02:a7:6f:f1:d0:b3:50: 50:5e:ba:e0:fc:6a:17:03:f2:a6:fa:16:ec:f4:44: 31:5d:c1:6e:13:d6:cf:03:21:b6:5a:1f:f2:2f:88: 22:b9:8b:e5:ad:c8:5e:84:f1:c8:29:c2:89:9a:9e: 9c:24:cd:c1:d3:0d:f6:c7:cf:07:cd:22:a3:fa:11: bf:30:54:25:bd:79:82:a4:4a:61:ea:e1:39:7a:43: a2:80:38:92:c1:11:51:15:5a:1a:c1:9c:59:0a:43: fa:c9:d1:15:b6:11:c9:30:04:5f:4a:96:04:4d:94: 61:23:17:9d:e6:59:41:69:e6:84:41:9d:95:b5:86: d8:cb:f7:ae:04:79:98:17:65:dc:74:97:2c:08:98: 92:1a:20:72:41:e9:72:7d:96:33:eb:cf:60:5a:c4: 95:51:9b:05:62:60:33:bf:f2:3e:23:5a:9c:8c:e8: 3b:86:55:95:f3:73:a3:b9:60:d5:b3:a6:8b:39:de: 4e:d0:33:ff:09:c6:79:f7:38:7e:b7:76:71:3d:f2: 1f:7b:4d:98:c6:54:95:fb:e3:a3:b7:03:55:c1:90: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:FE:E7:CB:56:B7:7C:95:F5:27:B8:11:59:1C:90:15:CE:14:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9e:47:0a:b1:04:d9:74:46:a9:57:a0:25:9c:ce:27:71:86: b0:f1:2d:f0:7d:e2:a4:e8:c5:cb:b9:b9:13:cf:6c:9b:7a:38: 1c:24:22:62:30:ed:d8:b1:10:c4:f9:b3:20:37:6f:04:42:0f: a6:c1:33:19:ec:6a:08:91:ce:90:f7:b6:5c:f3:ea:92:34:52: cc:ef:bb:44:ba:25:a1:49:7c:5b:34:8e:b8:0f:50:ae:a3:60: 75:fb:cb:bc:e4:bf:92:4c:36:cf:ec:60:ac:9a:47:fa:08:9e: 10:d0:e5:75:3b:40:d5:e2:fa:2c:b3:65:0b:79:f6:8e:d3:df: 04:ba:8a:18:52:d2:cf:a8:ba:e8:01:e1:95:29:a2:1b:50:e3: 4b:97:4b:2f:0f:d5:bc:d6:fc:45:59:ff:9b:7a:f2:04:e7:ff: 37:8b:90:98:13:7e:c2:db:36:2d:97:3a:fb:3a:f4:1b:e4:b0: 62:2a:20:b2:78:89:2a:58:f6:de:f2:40:84:0a:55:97:f6:39: cb:87:a8:1d:26:ba:27:04:e9:84:51:78:8a:e5:d7:e2:85:76: 14:33:21:07:62:f2:9c:4c:26:cc:e1:38:23:91:75:cd:b0:e4: 38:05:45:03:09:d0:39:48:29:8b:54:44:17:13:68:7c:f4:22: 39:f0:ec:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dEtNDbzFvT9MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzA3ODc3NDktMTdiZS00MjU3LTg1ZTUtOWRlMTRkYjQ5NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dWGjeMTeP0sQPNgyvWH8+FSImrlxte9+BeM 8TYJSQFGp+v76QKnb/HQs1BQXrrg/GoXA/Km+hbs9EQxXcFuE9bPAyG2Wh/yL4gi uYvlrchehPHIKcKJmp6cJM3B0w32x88HzSKj+hG/MFQlvXmCpEph6uE5ekOigDiS wRFRFVoawZxZCkP6ydEVthHJMARfSpYETZRhIxed5llBaeaEQZ2VtYbYy/euBHmY F2XcdJcsCJiSGiByQelyfZYz689gWsSVUZsFYmAzv/I+I1qcjOg7hlWV83OjuWDV s6aLOd5O0DP/CcZ59zh+t3ZxPfIfe02YxlSV++OjtwNVwZBXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdp/ufLVrd8lfUnuBFZHJAVzhSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY2NmQwOTgtYWQxYy0z MmYwLTg2M2ItNjFmZTY1NGI2MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIieRwqxBNl0RqlXoCWczidxhrDxLfB94qToxcu5uRPPbJt6OBwkImIw 7dixEMT5syA3bwRCD6bBMxnsagiRzpD3tlzz6pI0Uszvu0S6JaFJfFs0jrgPUK6j YHX7y7zkv5JMNs/sYKyaR/oInhDQ5XU7QNXi+iyzZQt59o7T3wS6ihhS0s+ouugB 4ZUpohtQ40uXSy8P1bzW/EVZ/5t68gTn/zeLkJgTfsLbNi2XOvs69BvksGIqILJ4 iSpY9t7yQIQKVZf2OcuHqB0muicE6YRReIrl1+KFdhQzIQdi8pxMJszhOCORdc2w 5DgFRQMJ0DlIKYtURBcTaHz0Ijnw7EQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:01 2025 by rpki-client