$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa File: c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa (raw, json) Hash identifier: ynZIxGhGcaSaGgTcfSQNQIki0dHk1hVVw/oQCUReJFs= Subject key identifier: EA:4C:68:B7:43:A0:D5:CA:55:7F:FC:AF:30:78:5A:39:4E:2A:70:75 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E77390654414F0177E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397222 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e7:73:90:65:44:14:f0:17:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=6e2b3c60-0755-44dc-8a59-6389edc49952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:fb:04:c1:96:cf:25:a7:d3:0a:78:56:a3: 86:da:f8:8c:de:47:dc:52:1e:cd:92:fd:d3:5d:e8: d9:09:c0:86:c1:8d:cd:8a:65:6c:63:67:a0:4b:b8: 89:cf:2a:8e:65:64:48:71:e0:fd:bb:05:f7:e9:24: f3:a4:72:45:69:9b:8e:ad:23:70:3f:e2:3c:0a:cb: 0e:70:da:e3:c3:2e:fd:c3:4f:8f:94:5b:d0:d3:1e: 5f:3d:4a:2b:ec:0c:72:15:af:97:d3:03:b5:84:55: 6c:5c:60:5c:85:30:7a:45:b1:35:66:6c:46:87:a9: 6a:67:f4:11:c7:27:9f:e7:c8:53:b8:3c:dc:71:5c: fc:4a:4f:52:6b:3d:c3:f1:ac:f7:46:34:83:ef:cd: dc:ba:59:63:84:5f:16:65:69:4c:70:62:14:c8:96: 63:0c:29:46:a2:c3:17:99:41:cb:67:a2:e8:cf:f6: 68:00:65:78:93:33:5a:8f:02:bc:78:0d:b9:6e:bd: 89:8b:b1:b8:b7:85:b5:75:3c:b1:0a:bc:00:87:b3: 6e:d9:1e:f4:23:bc:19:99:04:69:43:9e:f3:a7:0d: 30:15:93:a8:e6:c8:2c:e6:76:ea:e4:a2:3a:59:38: 6a:6b:ce:9e:d2:6c:3e:21:8f:0f:6e:3e:e8:b5:5b: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:68:B7:43:A0:D5:CA:55:7F:FC:AF:30:78:5A:39:4E:2A:70:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5cb91d4-a957-3b1a-8ec8-4c438772fe80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4c:29:4d:5d:45:1d:b9:6d:e2:ae:c7:b8:4a:ab:bf:09:29: 64:12:54:03:b1:51:43:df:4d:99:59:8d:e0:c6:42:a8:23:43: a9:63:1d:9e:75:10:c1:bf:d4:c8:41:58:bf:1a:0c:4e:6c:cc: 68:9a:b1:89:39:73:71:bd:a5:75:22:67:1a:50:56:d9:47:ae: 13:e8:a0:dd:c9:fa:fc:73:c5:22:b4:28:e3:76:98:ab:6b:0f: 4a:da:5b:14:d9:1e:78:96:36:cf:b8:ec:f3:14:18:45:71:3e: 5a:3d:1b:ac:07:35:8b:8d:18:f3:28:ae:31:93:23:bf:d2:ce: 9d:d8:ca:d4:63:f7:f8:63:c7:d2:fa:82:cf:6a:93:f5:41:fb: 41:1a:53:9b:82:74:f0:cb:53:ab:7d:32:bd:5e:86:19:48:d4: c5:ae:08:dd:74:87:db:60:82:fb:34:46:d9:43:6c:cb:d2:95: 30:ad:9d:ff:ee:ec:6d:11:c7:3b:60:ce:96:05:67:1d:9c:10: 82:4b:ea:60:93:73:1e:2a:13:c9:16:6a:16:9d:31:51:e4:e9: b8:71:04:1f:f6:6c:68:56:03:f7:db:36:62:61:c3:7a:c2:c4: 91:ed:1c:76:4e:c7:24:a2:0b:7b:19:6b:77:75:d4:9c:ef:d1: 43:ea:fe:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4edzkGVEFPAXfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmUyYjNjNjAtMDc1NS00NGRjLThhNTktNjM4OWVkYzQ5OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFv7BMGWzyWn0wp4VqOG2viM3kfcUh7Nkv3T XejZCcCGwY3NimVsY2egS7iJzyqOZWRIceD9uwX36STzpHJFaZuOrSNwP+I8CssO cNrjwy79w0+PlFvQ0x5fPUor7AxyFa+X0wO1hFVsXGBchTB6RbE1ZmxGh6lqZ/QR xyef58hTuDzccVz8Sk9Saz3D8az3RjSD783culljhF8WZWlMcGIUyJZjDClGosMX mUHLZ6Loz/ZoAGV4kzNajwK8eA25br2Ji7G4t4W1dTyxCrwAh7Nu2R70I7wZmQRp Q57zpw0wFZOo5sgs5nbq5KI6WThqa86e0mw+IY8Pbj7otVuGUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpMaLdDoNXKVX/8rzB4WjlOKnB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVjYjkxZDQtYTk1Ny0z YjFhLThlYzgtNGM0Mzg3NzJmZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9MKU1dRR25beKux7hKq78JKWQSVAOxUUPfTZlZjeDGQqgjQ6ljHZ51 EMG/1MhBWL8aDE5szGiasYk5c3G9pXUiZxpQVtlHrhPooN3J+vxzxSK0KON2mKtr D0raWxTZHniWNs+47PMUGEVxPlo9G6wHNYuNGPMorjGTI7/Szp3YytRj9/hjx9L6 gs9qk/VB+0EaU5uCdPDLU6t9Mr1ehhlI1MWuCN10h9tggvs0RtlDbMvSlTCtnf/u 7G0RxztgzpYFZx2cEIJL6mCTcx4qE8kWahadMVHk6bhxBB/2bGhWA/fbNmJhw3rC xJHtHHZOxySiC3sZa3d11Jzv0UPq/qE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:31 2025 by rpki-client