$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa File: c1303d9a-12f1-341c-a245-174e0899d520.roa (raw, json) Hash identifier: 836+LP8P80/yUg/y6Vc7U3WPsHuBZxNgxug4hSy7Usw= Subject key identifier: FC:5A:C7:C7:53:AB:82:D5:57:D2:34:37:30:AB:C8:3F:67:5B:74:6A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F7037CBCFF7F67C6A400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f7:03:7c:bc:ff:7f:67:c6:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=263c746b-5c39-432a-9f96-07e19988c85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:42:9b:12:30:fa:d8:19:d1:28:e1:89:2f:62: 2c:1b:60:26:23:64:31:32:d5:a7:84:a8:80:14:e1: 8d:6d:59:a8:41:5a:76:8f:75:b0:86:b6:21:5c:32: 02:f3:e2:e4:ed:26:3f:63:9b:c3:3c:ee:cd:ee:97: 66:96:cf:0f:19:6c:9a:19:e1:ed:0b:1b:b6:f7:ed: f7:d5:62:50:71:64:8f:d3:b4:73:7e:7d:f5:b8:ab: 82:84:78:65:b6:84:e1:6e:77:5f:fe:7b:20:e6:37: 20:cb:d6:63:2b:3f:01:a5:3f:cd:f4:66:69:48:55: 6e:a1:41:8d:58:39:b7:99:81:23:1a:37:ca:0f:5b: 3a:5f:ce:8e:d4:e4:c9:b2:d4:09:3b:23:ca:7a:49: 48:68:0c:a7:33:a6:20:55:f7:a3:a0:b2:1e:e1:7d: 5e:ef:b3:c1:11:cd:09:82:1a:67:41:14:33:12:b2: d4:d7:b0:fb:35:6d:a7:11:75:b3:0f:f0:f3:7c:b9: cd:1b:c1:30:27:01:62:ae:8a:b5:00:a5:17:54:b6: 04:b2:23:05:14:72:90:30:51:52:f7:0e:78:09:01: 5a:dd:34:91:82:b6:5a:47:ce:a8:bd:52:bf:47:e4: 73:9f:7c:65:84:94:d7:07:26:40:0f:69:b1:47:97: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:C7:C7:53:AB:82:D5:57:D2:34:37:30:AB:C8:3F:67:5B:74:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:c0:01:e2:68:c6:00:da:a4:38:d5:74:73:b8:fc:6d:13: b9:01:5d:64:b6:65:a6:b3:6e:cc:01:d0:61:66:63:79:ad:dc: e5:a0:f0:37:a9:b5:0e:12:6c:20:9e:ed:72:09:4e:64:95:b8: 3b:cb:5f:ed:68:62:0a:c0:69:79:5f:a6:f2:49:05:03:1a:b5: 4f:3e:45:80:ba:8e:67:9d:bb:a5:1a:4f:64:5a:fb:69:7c:62: d4:6c:d6:73:a3:80:c0:e5:c6:56:53:77:2f:9f:a7:98:d1:5c: 25:8e:24:76:c0:e3:b1:5b:dd:cf:40:b0:74:a0:d9:04:07:f3: 63:c6:f9:d5:27:27:c8:4a:ba:33:20:f8:ae:39:9f:23:11:72: 10:b6:c8:7c:be:0d:e4:52:75:2c:7e:13:fe:55:88:89:57:ed: 94:f2:b4:45:11:fa:8c:5c:28:57:2b:ae:28:9f:20:ea:14:fb: cd:d3:2d:99:92:d3:ed:f3:58:3a:cf:aa:3b:45:0a:3c:29:9f: ba:76:a2:d1:3d:3e:37:4b:2f:55:19:ed:56:29:26:63:15:44: 29:d7:63:8d:60:d1:35:33:62:98:ca:20:07:d7:8b:41:f5:d2: 25:29:23:09:1c:21:9a:7e:a5:e8:e8:0d:08:03:e3:69:f0:2d: cb:00:ec:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fcDfLz/f2fGpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjYzYzc0NmItNWMzOS00MzJhLTlmOTYtMDdlMTk5ODhjODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEKbEjD62BnRKOGJL2IsG2AmI2QxMtWnhKiA FOGNbVmoQVp2j3WwhrYhXDIC8+Lk7SY/Y5vDPO7N7pdmls8PGWyaGeHtCxu29+33 1WJQcWSP07Rzfn31uKuChHhltoThbndf/nsg5jcgy9ZjKz8BpT/N9GZpSFVuoUGN WDm3mYEjGjfKD1s6X86O1OTJstQJOyPKeklIaAynM6YgVfejoLIe4X1e77PBEc0J ghpnQRQzErLU17D7NW2nEXWzD/DzfLnNG8EwJwFiroq1AKUXVLYEsiMFFHKQMFFS 9w54CQFa3TSRgrZaR86ovVK/R+Rzn3xlhJTXByZAD2mxR5cDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxax8dTq4LVV9I0NzCryD9nW3RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzEzMDNkOWEtMTJmMS0z NDFjLWEyNDUtMTc0ZTA4OTlkNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZwAHiaMYA2qQ41XRzuPxtE7kBXWS2ZaazbswB0GFmY3mt3OWg8Dep tQ4SbCCe7XIJTmSVuDvLX+1oYgrAaXlfpvJJBQMatU8+RYC6jmedu6UaT2Ra+2l8 YtRs1nOjgMDlxlZTdy+fp5jRXCWOJHbA47Fb3c9AsHSg2QQH82PG+dUnJ8hKujMg +K45nyMRchC2yHy+DeRSdSx+E/5ViIlX7ZTytEUR+oxcKFcrriifIOoU+83TLZmS 0+3zWDrPqjtFCjwpn7p2otE9PjdLL1UZ7VYpJmMVRCnXY41g0TUzYpjKIAfXi0H1 0iUpIwkcIZp+pejoDQgD42nwLcsA7Jg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:34 2025 by rpki-client