$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa File: bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa (raw, json) Hash identifier: cu69XjJfzBr1mHOdwSijD4+KkhDb5A2t864p+0PwcH4= Subject key identifier: 82:56:B7:8B:46:F3:D6:01:FB:D8:A8:0A:66:D4:7F:DC:32:F1:09:65 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F735E50BB97BCBFB1580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f7:35:e5:0b:b9:7b:cb:fb:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=09d079d0-64d7-4078-817a-aedfc84e04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:d9:a5:e3:e4:27:65:04:19:50:28:63:55: b4:22:3d:c0:d2:03:3a:ac:ff:e3:ce:bb:16:51:e0: 8b:58:db:1e:0b:02:55:dd:28:04:dd:99:de:b7:19: 61:05:d0:2e:b0:3e:34:33:ca:2e:af:cb:f8:9c:91: c3:59:6c:3c:b0:a1:9c:18:86:64:62:0f:16:26:35: bc:88:36:f9:4f:c0:06:d1:7f:28:21:d4:3a:94:ca: f4:67:08:35:a9:5d:fa:20:c9:91:f4:7a:b4:37:ca: cb:3a:28:5b:34:ee:14:58:9b:25:ac:eb:98:25:69: be:15:c9:10:28:9f:8a:f0:00:e0:92:98:32:87:fc: 63:49:11:16:08:71:6e:28:67:b3:40:50:b0:27:28: 20:81:40:7f:56:f7:ee:49:de:73:ae:dd:a3:a3:42: 13:5e:05:04:b6:12:41:27:d3:2b:c2:ba:90:ea:45: 33:db:e6:8f:7f:f3:f8:a8:3c:c7:a4:b1:63:4c:bf: ad:88:46:79:32:c7:7c:31:23:9c:51:87:33:7e:ae: e6:13:3a:fb:d2:77:5f:39:eb:8b:bd:37:e1:c3:5e: 85:1b:b0:4b:02:ea:c8:4a:c7:78:91:fe:2d:bd:70: cc:4c:e8:91:60:8d:8c:df:47:41:02:de:76:13:48: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:B7:8B:46:F3:D6:01:FB:D8:A8:0A:66:D4:7F:DC:32:F1:09:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bbc0e1ef-7dc7-315f-a2db-0f481774d191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5e:b9:bd:23:26:ad:88:04:23:b5:01:ae:3c:59:2a:f0:90: 46:3e:c2:e9:48:9a:0f:8d:89:e1:24:71:35:9d:8a:a0:30:c9: 75:35:f4:2e:0b:f7:ae:1f:65:88:f7:cb:90:ad:be:47:85:55: ba:2b:f7:f7:79:66:54:be:dd:e2:10:45:c2:82:90:10:5e:33: 5a:c2:70:cd:3d:80:bf:d2:dd:24:1a:c8:30:83:15:f1:db:dd: f6:e5:94:d9:c3:f8:24:1b:d0:a0:5b:9d:78:99:92:e3:0e:0b: 50:64:cf:49:5d:7c:54:91:7b:e3:a2:d8:98:25:93:60:ef:f8: 6d:95:99:c9:6f:0a:d7:42:2e:73:2a:3c:8f:6d:2f:78:96:c4: 8f:ff:eb:4b:02:f8:5e:dc:8b:a9:1d:c3:5e:2c:e9:2c:51:75: 33:6d:31:be:c4:2c:02:20:21:fc:12:c5:8b:8f:16:2f:94:1d: 79:f0:c4:ae:42:cb:2a:68:2e:85:ba:dc:ec:02:e1:2f:b9:5c: 45:82:8e:bd:77:db:8b:a7:3c:ee:5d:b8:2f:63:2d:49:dd:7a: d9:60:4e:8a:56:71:f6:1e:fe:ca:36:33:8d:b5:37:8b:89:ba: 31:bb:54:05:2d:d6:bb:f1:81:d2:90:e8:63:11:95:ef:f7:d9: 30:87:f0:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fc15Qu5e8v7FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDlkMDc5ZDAtNjRkNy00MDc4LTgxN2EtYWVkZmM4NGUwNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub7ZpePkJ2UEGVAoY1W0Ij3A0gM6rP/jzrsW UeCLWNseCwJV3SgE3ZnetxlhBdAusD40M8our8v4nJHDWWw8sKGcGIZkYg8WJjW8 iDb5T8AG0X8oIdQ6lMr0Zwg1qV36IMmR9Hq0N8rLOihbNO4UWJslrOuYJWm+FckQ KJ+K8ADgkpgyh/xjSREWCHFuKGezQFCwJygggUB/VvfuSd5zrt2jo0ITXgUEthJB J9MrwrqQ6kUz2+aPf/P4qDzHpLFjTL+tiEZ5Msd8MSOcUYczfq7mEzr70ndfOeuL vTfhw16FG7BLAurISsd4kf4tvXDMTOiRYI2M30dBAt52E0haBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJWt4tG89YB+9ioCmbUf9wy8QllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmJjMGUxZWYtN2RjNy0z MTVmLWEyZGItMGY0ODE3NzRkMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGReub0jJq2IBCO1Aa48WSrwkEY+wulImg+NieEkcTWdiqAwyXU19C4L 964fZYj3y5CtvkeFVbor9/d5ZlS+3eIQRcKCkBBeM1rCcM09gL/S3SQayDCDFfHb 3fbllNnD+CQb0KBbnXiZkuMOC1Bkz0ldfFSRe+Oi2Jglk2Dv+G2VmclvCtdCLnMq PI9tL3iWxI//60sC+F7ci6kdw14s6SxRdTNtMb7ELAIgIfwSxYuPFi+UHXnwxK5C yypoLoW63OwC4S+5XEWCjr1324unPO5duC9jLUndetlgTopWcfYe/so2M421N4uJ ujG7VAUt1rvxgdKQ6GMRle/32TCH8K8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:09 2025 by rpki-client