$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa File: bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa (raw, json) Hash identifier: HHwEnsBp5WkQnZctrjIvnGSyi5zNBxZkQer26m/u96A= Subject key identifier: D7:85:39:64:B3:66:02:EB:9F:44:FA:E4:83:C5:34:3A:83:4A:E5:A8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA91F176354EAB177FF80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397241 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a9:1f:17:63:54:ea:b1:77:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=628a147d-fedf-4f24-b4e2-d69224ffef2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:58:ae:41:2d:0e:44:f8:29:83:4e:63:f6: ca:d1:ae:78:f6:2c:2e:8b:ce:e3:4e:19:0f:cd:93: 68:90:2a:42:a1:c5:29:98:60:60:86:b1:27:cf:8c: d7:8e:74:cf:ed:bc:70:e4:0b:f1:8c:22:ec:1b:18: 45:7c:4e:43:db:81:80:e2:13:b7:32:6b:09:7b:70: 9f:5e:eb:aa:45:f6:60:15:db:58:31:a9:88:4d:0d: fd:f9:cd:90:b0:5d:b8:fb:af:eb:7b:75:3f:09:2a: b1:d9:da:73:d3:3c:61:e8:34:08:22:1c:f5:8e:d1: f9:f7:36:fd:13:61:d2:f2:28:51:98:20:d6:dc:0a: ec:6e:d5:cf:9d:4b:3c:23:1b:d5:17:93:d4:82:d5: 63:03:97:1f:ba:81:13:37:4f:27:df:c1:c7:f5:41: 78:e7:38:b9:77:20:83:b5:41:d4:1b:ef:ee:5f:3d: 27:c2:ed:b0:d0:f7:4e:63:4d:34:ff:3e:af:2b:4a: d1:9c:80:bf:3e:71:9d:45:8a:b1:38:61:a5:f5:3a: 7a:04:0d:33:86:a6:b0:2b:93:4b:09:ea:38:00:31: 9f:19:1b:47:16:d5:08:d7:b3:9e:39:65:85:5f:83: fb:89:da:a6:67:9c:c1:db:89:f0:6b:53:c4:22:87: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:39:64:B3:66:02:EB:9F:44:FA:E4:83:C5:34:3A:83:4A:E5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf70ac0a-b3c2-3a6a-8b19-946d778e2cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:84:ca:d4:cb:ef:0a:8b:b0:e7:cb:d7:d4:55:4a:bd:7a:c8: b5:21:86:fc:a3:0b:9b:a1:9d:5f:d9:e7:f4:08:4b:4e:d8:ea: e7:41:03:ce:9c:bc:b0:a3:f8:88:a5:33:90:b6:c4:47:16:61: 4b:1e:90:e3:d4:54:2c:6f:15:54:3b:ed:c8:25:5a:e6:5e:bc: c9:28:1a:a0:17:a7:29:f8:bc:79:c3:a9:c6:6f:f8:73:3d:da: 5e:24:25:cd:f9:80:3c:a5:8b:4b:a6:eb:10:6d:a6:87:80:1a: f0:4e:f2:8d:35:f1:d7:b9:1a:a0:5f:80:90:74:5e:1c:4a:34: 2d:6f:b0:b2:71:d6:3b:29:80:86:f0:d8:f6:ad:d1:ff:5a:7c: de:4f:f7:21:85:cf:2e:da:46:ef:b1:c9:ff:d3:56:96:44:76: bd:da:3a:81:c7:9b:cd:ed:a8:81:4c:8f:a9:e2:cd:3c:a5:6f: e1:3f:b0:1e:f5:11:b6:aa:4d:39:b2:1a:31:3a:c1:14:29:ef: 9e:51:c7:d2:e3:78:05:53:d8:96:bc:68:79:14:1b:f0:e1:d0: 48:b4:cf:62:7e:68:7f:63:fd:6b:a6:82:c2:30:72:1d:c7:76: 93:21:df:71:74:69:0c:73:a1:73:4a:b7:ab:88:6d:27:6d:91: 4c:5c:a9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKkfF2NU6rF3/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjI4YTE0N2QtZmVkZi00ZjI0LWI0ZTItZDY5MjI0ZmZlZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IdYrkEtDkT4KYNOY/bK0a549iwui87jThkP zZNokCpCocUpmGBghrEnz4zXjnTP7bxw5AvxjCLsGxhFfE5D24GA4hO3MmsJe3Cf XuuqRfZgFdtYMamITQ39+c2QsF24+6/re3U/CSqx2dpz0zxh6DQIIhz1jtH59zb9 E2HS8ihRmCDW3ArsbtXPnUs8IxvVF5PUgtVjA5cfuoETN08n38HH9UF45zi5dyCD tUHUG+/uXz0nwu2w0PdOY000/z6vK0rRnIC/PnGdRYqxOGGl9Tp6BA0zhqawK5NL Ceo4ADGfGRtHFtUI17OeOWWFX4P7idqmZ5zB24nwa1PEIofLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeFOWSzZgLrn0T65IPFNDqDSuWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmY3MGFjMGEtYjNjMi0z YTZhLThiMTktOTQ2ZDc3OGUyY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKEytTL7wqLsOfL19RVSr16yLUhhvyjC5uhnV/Z5/QIS07Y6udBA86c vLCj+IilM5C2xEcWYUsekOPUVCxvFVQ77cglWuZevMkoGqAXpyn4vHnDqcZv+HM9 2l4kJc35gDyli0um6xBtpoeAGvBO8o018de5GqBfgJB0XhxKNC1vsLJx1jspgIbw 2Pat0f9afN5P9yGFzy7aRu+xyf/TVpZEdr3aOoHHm83tqIFMj6nizTylb+E/sB71 EbaqTTmyGjE6wRQp755Rx9LjeAVT2Ja8aHkUG/Dh0Ei0z2J+aH9j/WumgsIwch3H dpMh33F0aQxzoXNKt6uIbSdtkUxcqXU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:00 2025 by rpki-client