$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa File: b436817c-4532-3893-8e9f-0d0d939fc77d.roa (raw, json) Hash identifier: ySK+Q70an6XmDw42QZBBxJcZJiwgvPAv6/6FJK46pa0= Subject key identifier: 94:BF:F5:27:B9:4E:41:C4:29:83:79:CD:12:2F:69:EE:7A:22:27:E9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D029091B3BA646B05E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397216 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d0:29:09:1b:3b:a6:46:b0:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=28e62775-6c7c-4009-af65-7c0b7f72c676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:a8:e4:44:32:1b:83:54:7d:7f:16:32:15: 0d:5e:ea:71:31:18:6f:80:df:1e:19:57:0d:67:c3: d0:32:33:d0:94:e6:85:be:37:2b:06:54:40:c2:fb: 51:f2:96:db:32:7e:76:b9:06:55:c5:27:63:4a:9f: 7e:ba:7a:60:bc:6f:66:e8:4f:70:18:0d:85:bf:eb: 5f:5f:ff:d6:bd:1f:5d:ce:c8:55:24:1a:f6:2a:8c: 97:25:7c:41:d8:ee:a2:fd:f0:76:03:5e:a5:5e:53: 79:38:36:2b:18:d3:9e:8f:69:ae:1a:6d:31:3e:75: 6b:91:5a:a7:34:a3:fe:50:21:4d:50:22:4f:88:23: df:bb:2f:7b:47:28:d9:dd:76:b3:3f:6b:e0:90:8a: ad:84:d0:a5:e2:e5:b0:9e:b7:f9:b9:3f:17:b2:e9: 18:6c:04:6b:4a:df:59:42:89:07:dd:1f:70:fe:af: 93:2c:0d:54:7a:52:40:3f:e6:70:36:3a:53:ea:6c: 59:d6:d9:20:a4:49:10:1c:86:00:43:df:2c:da:9e: a2:6e:1c:8e:f6:64:46:cf:c0:1f:de:43:8b:16:2b: 4b:23:64:0e:b8:93:09:5b:30:9c:03:9b:e1:57:08: 2c:c8:15:3a:f7:48:a8:a1:f1:ff:ad:c5:92:26:c6: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:F5:27:B9:4E:41:C4:29:83:79:CD:12:2F:69:EE:7A:22:27:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b436817c-4532-3893-8e9f-0d0d939fc77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d5:52:0f:89:da:00:f0:ae:e1:1e:08:05:34:25:5e:fa:c4: 41:22:7e:89:48:60:ef:00:1d:c8:9f:28:58:1c:9e:5b:e8:19: 7e:b7:8a:d1:bf:1e:2c:f3:32:95:d1:2d:31:5d:5c:6b:c8:6c: 20:47:db:38:18:a4:b4:b4:95:c4:6c:15:c9:33:81:93:b4:91: 42:c3:d3:4c:a0:b0:2a:82:b4:8d:3f:dc:94:e0:53:e6:47:7f: dd:a7:7f:01:32:c0:66:f2:c2:70:5b:83:f9:6a:8a:15:42:51: 75:3c:6a:99:ec:c5:d1:85:d6:bb:0c:ba:f7:e9:3b:91:44:4a: 8c:0b:11:b7:fe:03:2e:9c:31:4a:d0:a7:fd:5b:08:d1:f8:63: 51:31:20:08:9b:af:9d:b1:d3:33:4b:c5:b0:0d:ed:cd:59:28: bc:d4:13:04:e6:5a:b3:57:e6:a7:e7:21:2a:e5:8b:e9:b8:df: 8a:06:dc:40:05:4e:73:63:f9:b3:75:66:c0:df:f4:2d:f3:72: 21:09:33:2d:ae:ef:e2:ef:e5:da:68:02:ed:b3:ad:e9:07:5a: 15:19:56:ab:07:08:31:f1:69:3c:d7:c7:00:41:2a:36:d0:42: 26:ec:d1:c3:d2:68:b5:57:77:01:d0:86:de:d2:56:b1:37:aa: c6:29:cf:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dApCRs7pkawXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjhlNjI3NzUtNmM3Yy00MDA5LWFmNjUtN2MwYjdmNzJjNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVeo5EQyG4NUfX8WMhUNXupxMRhvgN8eGVcN Z8PQMjPQlOaFvjcrBlRAwvtR8pbbMn52uQZVxSdjSp9+unpgvG9m6E9wGA2Fv+tf X//WvR9dzshVJBr2KoyXJXxB2O6i/fB2A16lXlN5ODYrGNOej2muGm0xPnVrkVqn NKP+UCFNUCJPiCPfuy97RyjZ3XazP2vgkIqthNCl4uWwnrf5uT8XsukYbARrSt9Z QokH3R9w/q+TLA1UelJAP+ZwNjpT6mxZ1tkgpEkQHIYAQ98s2p6ibhyO9mRGz8Af 3kOLFitLI2QOuJMJWzCcA5vhVwgsyBU690ioofH/rcWSJsZhmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS/9Se5TkHEKYN5zRIvae56IifpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjQzNjgxN2MtNDUzMi0z ODkzLThlOWYtMGQwZDkzOWZjNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbVUg+J2gDwruEeCAU0JV76xEEifolIYO8AHcifKFgcnlvoGX63itG/ HizzMpXRLTFdXGvIbCBH2zgYpLS0lcRsFckzgZO0kULD00ygsCqCtI0/3JTgU+ZH f92nfwEywGbywnBbg/lqihVCUXU8apnsxdGF1rsMuvfpO5FESowLEbf+Ay6cMUrQ p/1bCNH4Y1ExIAibr52x0zNLxbAN7c1ZKLzUEwTmWrNX5qfnISrli+m434oG3EAF TnNj+bN1ZsDf9C3zciEJMy2u7+Lv5dpoAu2zrekHWhUZVqsHCDHxaTzXxwBBKjbQ Qibs0cPSaLVXdwHQht7SVrE3qsYpzys= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:59 2025 by rpki-client