$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfc713f4-c16b-396b-ae6e-cc9327f9dbc4.roa File: bfc713f4-c16b-396b-ae6e-cc9327f9dbc4.roa (raw, json) Hash identifier: ZMxWLxLMXzG0FCUsh9v2Z3NigZ6c3YULihD9W0Oi2wc= Subject key identifier: C2:58:4B:5E:F8:AF:1E:E9:66:C4:06:F2:5E:BD:70:35:10:AD:ED:71 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C98154EF3CD2D2C7BD500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfc713f4-c16b-396b-ae6e-cc9327f9dbc4.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397231 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:98:15:4e:f3:cd:2d:2c:7b:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=30ecc99b-27ab-4886-aa85-b543502eaf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:64:cf:40:33:31:78:37:d7:3b:70:c5:e2: e8:2d:ce:30:be:27:e2:03:02:d7:9b:c7:04:1f:3b: 40:e7:fd:1c:ce:7f:80:db:f8:55:f2:ce:74:75:89: f9:9b:4d:d5:b4:fa:e9:d5:c7:1e:cc:61:e0:f9:55: 15:92:59:0c:d8:63:9e:bd:b3:85:1a:a7:f3:df:5f: 74:71:ea:30:03:07:57:46:5d:66:e1:f9:62:0f:72: 7d:d0:d7:9c:de:22:d6:33:0b:55:1b:f4:f4:85:7a: 86:a7:77:50:6d:9c:f6:1e:34:93:a3:24:20:3c:49: 11:1f:10:43:33:5d:4a:f1:ea:67:44:24:c7:db:80: f0:f7:bc:77:06:cc:67:93:b0:dc:5a:90:20:a7:a9: a9:cb:4e:56:2a:ea:d2:df:58:39:38:b9:91:11:d5: 58:3d:11:7c:2d:18:2d:76:c2:20:ef:70:8d:cc:e1: 60:e1:3c:ab:97:65:ee:35:2e:40:94:e4:c7:5d:fb: d3:c3:d8:0f:85:60:ba:b9:bb:30:c5:6a:4d:2d:ee: a3:6b:7d:0a:7c:93:03:14:d1:d3:32:3a:95:8a:8e: ef:4f:17:ee:5d:c9:61:af:78:1f:8a:88:37:14:55: 97:16:07:7d:4a:df:be:b9:40:9f:2a:1a:87:41:5d: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:58:4B:5E:F8:AF:1E:E9:66:C4:06:F2:5E:BD:70:35:10:AD:ED:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfc713f4-c16b-396b-ae6e-cc9327f9dbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3f:87:60:26:37:94:ed:6e:c4:6d:0a:af:d2:08:10:f5:c0: 0c:26:8c:2a:63:76:3b:b2:c0:dc:ba:23:fc:16:81:af:18:ea: 05:7d:21:c6:cd:82:58:56:bb:cf:79:fb:9a:fa:63:ab:fb:61: 54:75:c2:a0:a1:88:21:77:96:b8:aa:98:d0:53:84:1d:dd:09: 83:a5:f2:b8:21:2a:8e:08:0b:90:0b:48:80:b9:29:2c:84:0a: c4:09:9c:8a:64:fd:d6:e9:d5:76:39:91:d2:0c:fd:6c:d2:51: b8:a5:8f:e7:25:7b:47:99:ea:38:04:46:e4:8e:82:8c:32:57: 6b:a7:ca:5f:ce:db:9e:36:52:b3:8d:c6:c8:2d:75:f6:a8:28: b4:75:fd:d5:46:d0:8e:8d:21:75:f5:31:ac:40:d9:80:8b:c7: 74:91:b2:57:80:e7:ba:1e:58:f0:b8:16:bf:4f:56:b1:0e:40: 85:b7:7c:ff:43:de:32:07:23:36:35:0e:c9:80:a0:d0:11:0e: 4e:6e:65:11:d7:9f:0e:fb:97:fa:85:6f:f2:20:05:03:29:34: f4:37:33:86:45:88:5f:4c:c9:de:46:a3:d4:5d:c1:e0:19:ee: 74:0c:7f:14:25:c6:7a:a7:1b:89:80:09:bc:c4:9a:3f:97:86: 85:d7:5b:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJgVTvPNLSx71QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MzBlY2M5OWItMjdhYi00ODg2LWFhODUtYjU0MzUwMmVhZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKVkz0AzMXg31ztwxeLoLc4wvifiAwLXm8cE HztA5/0czn+A2/hV8s50dYn5m03VtPrp1ccezGHg+VUVklkM2GOevbOFGqfz3190 ceowAwdXRl1m4fliD3J90Nec3iLWMwtVG/T0hXqGp3dQbZz2HjSToyQgPEkRHxBD M11K8epnRCTH24Dw97x3Bsxnk7DcWpAgp6mpy05WKurS31g5OLmREdVYPRF8LRgt dsIg73CNzOFg4Tyrl2XuNS5AlOTHXfvTw9gPhWC6ubswxWpNLe6ja30KfJMDFNHT MjqVio7vTxfuXclhr3gfiog3FFWXFgd9St++uUCfKhqHQV0m9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJYS174rx7pZsQG8l69cDUQre1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmZjNzEzZjQtYzE2Yi0z OTZiLWFlNmUtY2M5MzI3ZjlkYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0/h2AmN5TtbsRtCq/SCBD1wAwmjCpjdjuywNy6I/wWga8Y6gV9IcbN glhWu895+5r6Y6v7YVR1wqChiCF3lriqmNBThB3dCYOl8rghKo4IC5ALSIC5KSyE CsQJnIpk/dbp1XY5kdIM/WzSUbilj+cle0eZ6jgERuSOgowyV2unyl/O2542UrON xsgtdfaoKLR1/dVG0I6NIXX1MaxA2YCLx3SRsleA57oeWPC4Fr9PVrEOQIW3fP9D 3jIHIzY1DsmAoNARDk5uZRHXnw77l/qFb/IgBQMpNPQ3M4ZFiF9Myd5Go9RdweAZ 7nQMfxQlxnqnG4mACbzEmj+XhoXXW5s= -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:23 2025 by rpki-client