$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa File: cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa (raw, json) Hash identifier: Z2E+bsTCzw6Rncqit9XZkR7uLZFMHiiABG9T+EuhUbk= Subject key identifier: CB:13:AE:6F:05:6F:CD:F4:6B:02:E4:7C:F7:11:0E:3D:89:DA:67:82 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FBCA769BE90911272980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fb:ca:76:9b:e9:09:11:27:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0b9a0518-53d9-4844-ada6-c4221fa3e107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:39:8f:23:66:b9:15:32:5b:8b:e2:e0:47: 49:ca:90:16:dc:30:d2:df:a4:d0:0c:ff:05:0a:e5: 67:ff:38:07:ec:a5:54:a8:ab:7a:4e:c1:35:bc:56: 98:4d:fa:87:eb:21:a4:2b:4b:74:78:d8:a8:52:cf: 1f:97:6b:72:6f:09:09:dc:7c:07:32:bd:7d:ee:01: a5:50:ce:e7:6c:37:b2:f5:9c:3d:9a:b9:4a:ca:b0: 43:f3:a2:5e:62:ea:88:ac:c9:58:b5:75:21:e9:86: 19:0b:f7:34:d7:ff:de:f0:54:cb:e5:e7:ca:56:53: f6:7f:ca:37:3c:da:36:9b:d0:1e:57:b7:c7:bd:c1: 7d:22:49:3f:ad:26:a3:41:c5:eb:82:3a:6c:16:a9: dc:f1:84:24:09:99:f4:5d:77:77:c1:2f:1e:0d:48: 65:d1:dd:97:0a:3b:88:d4:0f:98:b6:a7:85:22:4b: a1:9a:cc:5d:95:79:df:fa:84:7f:b0:c3:d9:34:69: 74:65:3c:6c:3d:2e:04:6e:43:90:87:a8:6f:e0:b6: d7:f3:d0:38:09:ac:86:c3:16:a7:73:41:ad:7e:10: 8e:15:9d:4c:13:d6:6c:1d:b8:71:29:4d:56:0b:a5: 08:c8:be:18:f1:8c:72:02:2a:06:20:eb:21:05:6a: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:13:AE:6F:05:6F:CD:F4:6B:02:E4:7C:F7:11:0E:3D:89:DA:67:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc2ffeb5-6936-376a-abaa-483a2b1c4efd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b9:54:f3:66:96:83:a0:a2:be:a0:9a:9a:a8:b8:1f:ea:be: 93:8b:80:86:2d:a9:4b:70:b2:db:5c:06:62:a5:1e:9d:d1:6c: 65:35:5a:60:82:ba:7f:ad:41:69:a4:89:99:8d:97:ef:c9:52: b3:61:36:e3:03:dc:64:a7:10:f0:10:ca:f0:47:9f:54:13:4e: ab:98:a4:2f:3a:29:bc:58:c6:2d:0c:0d:ae:ed:7b:13:51:05: cf:b6:fb:d8:6d:2c:87:fb:aa:37:65:2f:7f:43:2f:c0:00:17: 75:7a:ea:16:c5:5b:a9:40:15:cf:30:89:f7:74:3b:fc:8c:61: 60:b6:0c:a5:3b:7d:0c:d2:58:17:60:a1:7f:71:6a:00:a5:95: ec:9e:a2:e0:82:47:24:cb:e2:00:f1:49:d9:78:62:16:49:fb: 8e:35:3c:3d:19:b8:c5:bf:d8:f3:cf:18:75:92:8d:f7:62:b2: 03:79:37:62:0d:4c:8b:1a:00:85:ff:6a:4d:d0:cd:de:2f:40: f3:a1:07:b2:0d:c4:87:e6:1c:ef:5e:f8:a0:33:f5:25:6b:57: 58:b3:7b:f9:1d:60:9a:33:85:11:1b:2e:f9:42:2a:55:76:f6: d7:c2:a5:60:ec:de:20:0e:10:2f:78:9d:19:7f:13:a7:01:d2: 22:b3:25:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fvKdpvpCREnKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGI5YTA1MTgtNTNkOS00ODQ0LWFkYTYtYzQyMjFmYTNlMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2c5jyNmuRUyW4vi4EdJypAW3DDS36TQDP8F CuVn/zgH7KVUqKt6TsE1vFaYTfqH6yGkK0t0eNioUs8fl2tybwkJ3HwHMr197gGl UM7nbDey9Zw9mrlKyrBD86JeYuqIrMlYtXUh6YYZC/c01//e8FTL5efKVlP2f8o3 PNo2m9AeV7fHvcF9Ikk/rSajQcXrgjpsFqnc8YQkCZn0XXd3wS8eDUhl0d2XCjuI 1A+YtqeFIkuhmsxdlXnf+oR/sMPZNGl0ZTxsPS4EbkOQh6hv4LbX89A4CayGwxan c0GtfhCOFZ1ME9ZsHbhxKU1WC6UIyL4Y8YxyAioGIOshBWoe8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsTrm8Fb830awLkfPcRDj2J2meCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2MyZmZlYjUtNjkzNi0z NzZhLWFiYWEtNDgzYTJiMWM0ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW5VPNmloOgor6gmpqouB/qvpOLgIYtqUtwsttcBmKlHp3RbGU1WmCC un+tQWmkiZmNl+/JUrNhNuMD3GSnEPAQyvBHn1QTTquYpC86KbxYxi0MDa7texNR Bc+2+9htLIf7qjdlL39DL8AAF3V66hbFW6lAFc8wifd0O/yMYWC2DKU7fQzSWBdg oX9xagClleyeouCCRyTL4gDxSdl4YhZJ+441PD0ZuMW/2PPPGHWSjfdisgN5N2IN TIsaAIX/ak3Qzd4vQPOhB7INxIfmHO9e+KAz9SVrV1ize/kdYJozhREbLvlCKlV2 9tfCpWDs3iAOEC94nRl/E6cB0iKzJdE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:01 2025 by rpki-client