$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa File: bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa (raw, json) Hash identifier: ouLIQe+LWB+SVi+qK3NBzVMCG4WOEYfKTF9JLVRAgyc= Subject key identifier: 93:30:01:96:E5:5C:AC:31:D5:AE:9F:21:B6:94:5F:C2:F6:CB:43:EC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F2C519868493C2ACDD40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397227 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f2:c5:19:86:84:93:c2:ac:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4a37841b-c25f-41bc-ba52-ff6deb75d9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:45:99:5a:f8:9c:d9:63:60:f3:20:34:96: 30:1a:61:0f:f2:94:31:41:ee:47:f2:1c:0b:3a:24: 9f:9c:84:e2:14:d1:b1:99:f3:26:67:8b:82:9b:8a: 06:f7:16:5a:04:51:8a:77:a8:4b:42:b0:f2:b6:db: b1:d2:69:60:9f:9f:64:44:4f:b8:c9:8a:2e:b1:e2: cd:7f:31:83:08:af:2e:8b:75:7d:e7:11:58:ab:7a: d5:b4:bd:73:88:c9:e7:dd:1b:09:9f:ea:90:12:5f: 30:58:4a:fb:c9:29:b0:6f:58:99:df:06:25:1f:f2: 55:5b:d4:2a:4f:ff:94:17:b1:2b:f4:33:b4:49:bf: c8:d8:96:e9:17:df:e4:91:5e:bb:00:0c:f0:d2:29: c4:81:3d:51:ee:50:cd:99:8f:b7:4d:8b:c5:e4:46: 21:58:9f:18:5d:b9:e9:3a:49:c7:e2:1e:ad:e5:61: cb:9f:e9:98:92:9a:ab:e6:ad:28:a5:5a:41:80:9f: 68:2b:dd:5b:ec:03:7c:ca:ae:a1:73:47:33:2c:8b: cf:0b:a7:cf:93:85:ea:bb:df:ca:d0:cc:6d:89:1b: 15:93:7d:4e:fc:6c:74:73:ab:2d:08:68:bc:70:e4: 55:0f:98:0b:57:ab:81:23:5f:5c:42:e1:a7:27:2f: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:01:96:E5:5C:AC:31:D5:AE:9F:21:B6:94:5F:C2:F6:CB:43:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb046795-190f-3e8b-891e-c2f48fa2f4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7d:30:99:e9:9c:be:ac:fa:c0:37:7d:29:31:be:3f:f6:8e: ef:2f:0f:ba:ff:e5:2e:4a:bf:4e:88:36:bb:51:e5:92:3d:69: 53:81:2c:57:d6:8b:3e:34:05:bc:2f:f8:50:d4:7a:29:50:0d: 64:47:24:66:e5:12:c6:74:0d:d4:c6:1e:73:69:7f:43:58:f4: 78:81:49:3c:ad:cc:37:b0:fc:e9:24:90:8b:a2:63:02:62:1a: 81:70:bc:d5:bc:20:71:78:25:62:69:09:c0:51:a3:52:cc:eb: a5:7c:f0:45:04:70:d2:55:29:db:a0:ef:c8:74:23:03:46:8d: c7:1b:0a:45:9f:48:4e:e9:20:12:b7:9d:c8:f1:6e:04:de:97: d5:cc:b6:38:be:f9:f8:4f:5a:c9:0f:1b:07:77:3e:ce:01:1a: 68:57:43:0c:ce:81:87:41:ca:4d:69:e1:0a:88:8b:e9:6d:b1: 9d:67:a6:e0:4c:c6:99:f1:54:a5:d9:fb:73:b6:95:41:64:69: 3f:af:1e:1d:dc:b9:dc:f9:9d:c5:cc:1f:01:44:f8:18:b5:9e: a0:50:e7:ad:02:08:98:80:53:f7:4f:14:33:05:b9:41:2b:66: 04:4c:ee:d1:e1:0d:c4:80:8c:5c:40:b6:cf:1f:f0:e5:7a:6c: dd:fa:ee:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fLFGYaEk8Ks3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGEzNzg0MWItYzI1Zi00MWJjLWJhNTItZmY2ZGViNzVkOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVxFmVr4nNljYPMgNJYwGmEP8pQxQe5H8hwL OiSfnITiFNGxmfMmZ4uCm4oG9xZaBFGKd6hLQrDyttux0mlgn59kRE+4yYouseLN fzGDCK8ui3V95xFYq3rVtL1ziMnn3RsJn+qQEl8wWEr7ySmwb1iZ3wYlH/JVW9Qq T/+UF7Er9DO0Sb/I2JbpF9/kkV67AAzw0inEgT1R7lDNmY+3TYvF5EYhWJ8YXbnp OknH4h6t5WHLn+mYkpqr5q0opVpBgJ9oK91b7AN8yq6hc0czLIvPC6fPk4Xqu9/K 0MxtiRsVk31O/Gx0c6stCGi8cORVD5gLV6uBI19cQuGnJy9KqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMwAZblXKwx1a6fIbaUX8L2y0PsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmIwNDY3OTUtMTkwZi0z ZThiLTg5MWUtYzJmNDhmYTJmNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh9MJnpnL6s+sA3fSkxvj/2ju8vD7r/5S5Kv06INrtR5ZI9aVOBLFfW iz40Bbwv+FDUeilQDWRHJGblEsZ0DdTGHnNpf0NY9HiBSTytzDew/OkkkIuiYwJi GoFwvNW8IHF4JWJpCcBRo1LM66V88EUEcNJVKdug78h0IwNGjccbCkWfSE7pIBK3 ncjxbgTel9XMtji++fhPWskPGwd3Ps4BGmhXQwzOgYdByk1p4QqIi+ltsZ1npuBM xpnxVKXZ+3O2lUFkaT+vHh3cudz5ncXMHwFE+Bi1nqBQ560CCJiAU/dPFDMFuUEr ZgRM7tHhDcSAjFxAts8f8OV6bN367rQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:20 2025 by rpki-client