$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa File: cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa (raw, json) Hash identifier: ixdpuovqn0Aw8W5nr4nAGrf0I+EnLnmMzc/Oji+L0VA= Subject key identifier: 27:6E:55:4B:3A:24:33:EA:AF:48:8B:18:DC:D0:4B:B1:E2:1A:E2:FE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C8333AE79EAD6CDF2CA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 12008 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:83:33:ae:79:ea:d6:cd:f2:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=4c58e580-72ff-41dc-b2ae-66e85a883bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:2e:e5:42:0f:df:aa:58:d7:bb:5c:98:8d: c2:12:ba:6d:e6:10:a1:30:9d:0b:f3:66:cf:f0:8e: cf:f1:a5:01:62:4d:dc:ed:9d:25:09:b6:04:9c:ea: ab:1f:a0:8a:f6:16:aa:80:4a:84:51:9b:b0:b3:6e: 97:d1:5b:32:87:ae:97:2a:ca:62:72:33:78:3e:bb: ca:01:1c:a7:24:62:71:64:a4:a1:14:bc:13:3f:e2: d5:da:d0:99:76:3d:74:58:13:fa:4e:3c:b0:1c:89: bc:73:25:28:b1:38:32:d2:46:03:77:c8:c0:43:81: db:1c:0e:a1:c3:37:2e:ad:b7:e8:f0:2e:a7:1a:ac: 1d:f4:7a:a5:d9:83:b9:e2:79:1d:69:02:a6:17:08: c1:83:fc:20:a9:77:fd:47:62:75:ec:cb:a3:4b:01: d3:ae:18:f8:94:92:2c:fd:1a:ab:ee:91:4d:cf:ef: 11:bd:65:51:5e:32:63:a2:64:58:fd:97:4c:af:b6: 50:b6:53:b0:e8:eb:9d:b5:9b:2a:3a:3f:68:67:8f: 23:6d:77:9e:be:f1:b4:b6:1e:e9:01:ed:e5:5d:ff: fb:9e:ce:4c:75:bd:0a:71:69:b1:bd:71:30:f7:eb: 8d:f9:fd:06:03:4c:4b:c0:3f:a2:6a:f8:47:15:50: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:55:4B:3A:24:33:EA:AF:48:8B:18:DC:D0:4B:B1:E2:1A:E2:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cbdd5127-a5e8-37e8-9cde-67c845b538b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5c:9f:3f:ac:a7:ad:bc:ab:39:e5:38:f5:7c:e6:d2:95:67: 5d:56:42:5f:28:ad:39:f8:b3:6d:df:71:4c:0c:4d:ef:f6:0a: 9d:ff:a5:98:54:e8:a5:e0:f0:ee:0e:8b:fd:37:bd:2f:84:d9: c4:f2:8f:22:9d:90:8b:64:15:40:b5:92:06:85:d5:3f:98:0a: 8e:c9:1a:b8:92:57:b1:f4:d4:41:0f:74:3a:ed:04:f0:f8:ca: 23:5e:06:66:16:a5:56:64:51:98:78:1c:1c:49:74:30:1d:61: fb:97:ac:c2:f3:b9:23:be:5e:5e:a0:9f:c4:96:db:3d:b8:71: e9:4c:82:0d:db:0c:60:61:ba:fe:ec:45:44:81:41:67:3d:2a: bd:3c:b0:4b:ea:56:a5:80:d8:6c:ca:fd:9c:04:f8:ad:c5:10: b7:2b:02:ef:22:4e:69:15:80:a8:69:79:d7:dd:1d:b5:8a:df: 99:34:45:cf:ac:64:c4:60:2f:38:09:3b:9e:47:8b:e2:5a:e7: d0:0d:89:e5:d3:cf:83:4f:9f:59:e4:17:cf:05:87:f5:93:a2: 6e:b0:13:a9:dc:9a:6b:64:bf:d1:62:43:02:f2:b7:11:85:99: ea:30:99:4d:76:c5:34:46:83:cc:8e:2f:26:e6:e8:03:cd:be: 75:6a:10:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIMzrnnq1s3yyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NGM1OGU1ODAtNzJmZi00MWRjLWIyYWUtNjZlODVhODgzYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDUu5UIP36pY17tcmI3CErpt5hChMJ0L82bP 8I7P8aUBYk3c7Z0lCbYEnOqrH6CK9haqgEqEUZuws26X0Vsyh66XKspicjN4PrvK ARynJGJxZKShFLwTP+LV2tCZdj10WBP6TjywHIm8cyUosTgy0kYDd8jAQ4HbHA6h wzcurbfo8C6nGqwd9Hql2YO54nkdaQKmFwjBg/wgqXf9R2J17MujSwHTrhj4lJIs /Rqr7pFNz+8RvWVRXjJjomRY/ZdMr7ZQtlOw6OudtZsqOj9oZ48jbXeevvG0th7p Ae3lXf/7ns5Mdb0KcWmxvXEw9+uN+f0GA0xLwD+iavhHFVC8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCduVUs6JDPqr0iLGNzQS7HiGuL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2JkZDUxMjctYTVlOC0z N2U4LTljZGUtNjdjODQ1YjUzOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRcnz+sp628qznlOPV85tKVZ11WQl8orTn4s23fcUwMTe/2Cp3/pZhU 6KXg8O4Oi/03vS+E2cTyjyKdkItkFUC1kgaF1T+YCo7JGriSV7H01EEPdDrtBPD4 yiNeBmYWpVZkUZh4HBxJdDAdYfuXrMLzuSO+Xl6gn8SW2z24celMgg3bDGBhuv7s RUSBQWc9Kr08sEvqVqWA2GzK/ZwE+K3FELcrAu8iTmkVgKhpedfdHbWK35k0Rc+s ZMRgLzgJO55Hi+Ja59ANieXTz4NPn1nkF88Fh/WTom6wE6ncmmtkv9FiQwLytxGF meowmU12xTRGg8yOLybm6APNvnVqEMM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:35 2025 by rpki-client