$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa File: d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa (raw, json) Hash identifier: PyWU/ZtCpBOu7ig6GF1hk5VDOG1ajbx+AYBDTBaXwH0= Subject key identifier: D3:2B:AE:88:01:35:F8:6F:09:CB:6A:3A:65:1E:A1:69:04:BD:E4:1B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D518A79FD7DF54C37B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397218 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:18:a7:9f:d7:df:54:c3:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0294ce2d-796c-41ef-86c1-7b03f5b3803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:74:f2:5c:34:8d:00:38:4f:e8:ad:6e:50: 87:bc:ce:bb:a9:60:d0:b0:74:06:12:d3:93:f9:34: 8b:53:54:4b:03:2a:73:ed:dd:32:59:18:ea:09:75: ef:d4:8e:cd:9d:b0:af:37:06:a8:f1:50:4e:c6:af: f3:41:0d:59:66:5d:f1:47:25:13:92:dd:3c:db:ec: aa:38:82:cf:d9:36:75:d1:b9:24:17:ad:4c:7b:9c: 24:6d:79:28:ae:5c:82:5b:33:73:5f:b1:5c:85:87: d9:4e:fb:7c:76:1d:8f:34:44:24:85:0e:53:b3:24: 6a:93:c8:f7:25:00:2f:15:68:da:1a:9e:46:16:1e: 8a:4d:27:2d:e8:18:8a:a0:f7:61:03:73:f4:d1:8a: b8:ec:a5:27:90:e9:e9:62:24:54:3b:96:3d:5e:0b: 12:bc:f2:a8:cc:46:69:dc:96:ba:b0:63:b5:fa:cc: c1:61:33:ff:67:d3:78:c7:da:97:d5:d5:44:f6:c2: d0:b5:f7:29:dd:0e:46:ab:7f:85:42:2d:c1:7b:2e: 76:17:62:4d:37:03:b6:26:a2:f9:8c:9f:23:c1:11: fc:a0:57:06:e5:5b:98:f5:08:d2:46:da:2c:03:41: 6c:4c:3d:09:a6:46:e3:46:d2:a3:f4:94:52:db:d9: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:AE:88:01:35:F8:6F:09:CB:6A:3A:65:1E:A1:69:04:BD:E4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d1:9d:68:ad:c1:32:3a:95:b2:37:61:dc:60:fe:88:65:b2: de:cd:db:ef:57:0a:d8:2e:7d:08:89:d4:99:4c:87:1c:9f:12: 97:01:d3:44:62:ce:f6:ee:b6:b4:a5:66:e1:54:55:bf:7e:9f: bb:3d:09:0d:c9:db:c8:1b:0a:ab:72:7a:a8:50:3a:11:38:b5: 35:64:ed:c6:ab:a9:c7:71:70:42:0b:06:81:49:36:3b:e1:67: f5:cf:ec:2b:ce:0e:e7:a9:6d:57:a3:06:92:aa:a1:2c:7d:16: dd:f0:ee:81:4f:16:8e:ba:6d:d4:f6:a0:74:a4:01:57:89:a8: 59:91:80:2a:ec:be:79:83:60:5e:1b:19:ba:44:bc:70:37:31: 84:66:01:fe:00:73:4b:bd:60:4e:c6:e9:cb:76:22:65:37:3a: 74:53:d8:77:70:f3:ba:fa:ae:aa:c6:3d:3c:e1:cf:15:94:f9: 74:b3:15:a5:3f:62:11:87:45:41:23:97:cb:09:84:51:79:94: a0:ed:e1:04:b0:1d:30:0c:70:84:b9:a6:3e:f2:bc:ce:d5:f0: 97:af:7c:d8:cf:b7:a0:b5:d7:94:de:69:ea:6d:24:f3:b7:df: db:3b:58:39:8b:ff:00:97:e5:84:c1:c4:08:b6:ba:37:0d:1d: 86:57:91:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dUYp5/X31TDe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDI5NGNlMmQtNzk2Yy00MWVmLTg2YzEtN2IwM2Y1YjM4MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixJ08lw0jQA4T+itblCHvM67qWDQsHQGEtOT +TSLU1RLAypz7d0yWRjqCXXv1I7NnbCvNwao8VBOxq/zQQ1ZZl3xRyUTkt082+yq OILP2TZ10bkkF61Me5wkbXkorlyCWzNzX7FchYfZTvt8dh2PNEQkhQ5TsyRqk8j3 JQAvFWjaGp5GFh6KTSct6BiKoPdhA3P00Yq47KUnkOnpYiRUO5Y9XgsSvPKozEZp 3Ja6sGO1+szBYTP/Z9N4x9qX1dVE9sLQtfcp3Q5Gq3+FQi3Bey52F2JNNwO2JqL5 jJ8jwRH8oFcG5VuY9QjSRtosA0FsTD0JpkbjRtKj9JRS29mCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMrrogBNfhvCctqOmUeoWkEveQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRjZGE5ZDctNzlmNS0z Nzg4LWE4YmUtNTBkM2RkZTljMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbRnWitwTI6lbI3Ydxg/ohlst7N2+9XCtgufQiJ1JlMhxyfEpcB00Ri zvbutrSlZuFUVb9+n7s9CQ3J28gbCqtyeqhQOhE4tTVk7carqcdxcEILBoFJNjvh Z/XP7CvODuepbVejBpKqoSx9Ft3w7oFPFo66bdT2oHSkAVeJqFmRgCrsvnmDYF4b GbpEvHA3MYRmAf4Ac0u9YE7G6ct2ImU3OnRT2Hdw87r6rqrGPTzhzxWU+XSzFaU/ YhGHRUEjl8sJhFF5lKDt4QSwHTAMcIS5pj7yvM7V8JevfNjPt6C115TeaeptJPO3 39s7WDmL/wCX5YTBxAi2ujcNHYZXkY4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:40 2025 by rpki-client