$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa File: d5399463-70a6-30f2-a6e1-8ace69b6d019.roa (raw, json) Hash identifier: ehuU3aPaDMyzgeT3DbROAXf3H0fdG8I49u9/dtrrCrk= Subject key identifier: 99:B7:33:4B:D0:54:2D:D6:4F:5D:C7:11:97:61:60:D3:D0:9A:59:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D68715B8F3F86DA806D0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397238 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d6:87:15:b8:f3:f8:6d:a8:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b3e8fd9e-2f8a-4e97-8ed3-5d2dfb55fee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:cd:d4:80:eb:e7:43:95:aa:5b:ac:b0:0f: a7:3a:d7:bc:89:d6:1e:e3:af:e4:6e:17:6e:b5:14: 86:0f:61:7a:c9:f7:93:0a:8a:b8:22:3f:66:60:c4: d3:f8:73:bd:be:da:69:6d:a5:34:5e:41:10:e9:1f: 1b:7b:ed:c9:b2:ef:24:34:5a:ef:11:25:dc:57:eb: fb:15:91:11:03:e9:85:85:c0:88:40:0b:9f:66:9d: 44:a9:d6:e7:32:4f:41:7b:66:3a:67:ac:0d:1f:0c: 6d:f3:57:05:47:73:8f:22:07:35:de:be:89:fd:3d: 54:ff:78:bb:69:d8:ee:af:24:2f:95:26:b2:31:02: 52:bf:5b:17:68:d8:21:71:9a:3b:3f:47:a4:7e:94: 7a:ae:0a:1d:56:f1:18:b1:3d:f3:e9:93:f6:9a:57: b1:2c:19:82:45:99:f0:2a:bc:8b:c6:02:8e:36:ac: a4:b7:27:98:17:ad:7a:69:98:11:3e:e1:55:97:29: f7:27:2a:b6:6a:1e:4f:ae:74:a8:dd:a9:f3:ca:c8: 2f:04:a5:dc:79:1b:e8:a1:42:13:0e:df:c4:83:19: fa:6a:db:25:dd:11:6f:b3:24:12:76:6b:86:dd:6f: 3c:6e:55:18:f4:ff:25:be:ba:46:44:96:b1:78:a5: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B7:33:4B:D0:54:2D:D6:4F:5D:C7:11:97:61:60:D3:D0:9A:59:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5399463-70a6-30f2-a6e1-8ace69b6d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dc:c4:f0:14:b9:3a:c4:5b:e9:10:4a:e7:21:09:2e:95:83: a6:a6:00:e3:65:26:ac:8e:7a:23:e3:50:f6:38:3c:c5:47:b2: fb:f0:33:d3:4f:7f:7f:4d:aa:b5:73:7c:a0:2b:c0:e2:81:4a: 92:df:31:b3:84:41:f7:f6:97:e1:25:7c:df:7a:f5:ed:b6:a9: 5a:62:28:5e:16:b1:0b:41:41:8d:2c:8f:27:5e:ca:72:17:5e: fc:cf:9d:68:24:24:17:63:8b:f1:b2:0d:44:1d:8a:46:a8:42: eb:08:87:26:57:60:e2:14:1e:84:fa:50:ea:14:1e:07:8a:3b: 63:cc:e6:f3:bd:33:44:07:7d:19:72:38:b6:4c:53:cd:a0:c2: 99:fb:f6:5b:3d:7c:3a:a5:b1:88:45:07:1a:82:47:66:c5:68: 75:e6:4b:69:2c:ad:a5:2d:76:3d:95:1b:10:72:16:9b:ce:dc: fd:c5:44:f5:e0:81:60:3f:29:1d:52:aa:cc:8a:46:4b:3a:63: 32:09:9b:13:f0:f8:41:05:37:c1:c4:67:02:a0:5d:ae:e5:8a: fc:ca:34:36:e3:c0:12:90:29:59:c6:d0:e4:d4:fe:65:5f:a2: 07:1f:46:d7:2e:a6:60:cf:d8:0f:f3:07:eb:af:83:cf:eb:47: cf:aa:47:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4daHFbjz+G2oBtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjNlOGZkOWUtMmY4YS00ZTk3LThlZDMtNWQyZGZiNTVmZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa/N1IDr50OVqlussA+nOte8idYe46/kbhdu tRSGD2F6yfeTCoq4Ij9mYMTT+HO9vtppbaU0XkEQ6R8be+3Jsu8kNFrvESXcV+v7 FZERA+mFhcCIQAufZp1EqdbnMk9Be2Y6Z6wNHwxt81cFR3OPIgc13r6J/T1U/3i7 adjuryQvlSayMQJSv1sXaNghcZo7P0ekfpR6rgodVvEYsT3z6ZP2mlexLBmCRZnw KryLxgKONqyktyeYF616aZgRPuFVlyn3Jyq2ah5PrnSo3anzysgvBKXceRvooUIT Dt/Egxn6atsl3RFvsyQSdmuG3W88blUY9P8lvrpGRJaxeKW4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm3M0vQVC3WT13HEZdhYNPQmln4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDUzOTk0NjMtNzBhNi0z MGYyLWE2ZTEtOGFjZTY5YjZkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELcxPAUuTrEW+kQSuchCS6Vg6amAONlJqyOeiPjUPY4PMVHsvvwM9NP f39NqrVzfKArwOKBSpLfMbOEQff2l+ElfN969e22qVpiKF4WsQtBQY0sjydeynIX XvzPnWgkJBdji/GyDUQdikaoQusIhyZXYOIUHoT6UOoUHgeKO2PM5vO9M0QHfRly OLZMU82gwpn79ls9fDqlsYhFBxqCR2bFaHXmS2ksraUtdj2VGxByFpvO3P3FRPXg gWA/KR1SqsyKRks6YzIJmxPw+EEFN8HEZwKgXa7livzKNDbjwBKQKVnG0OTU/mVf ogcfRtcupmDP2A/zB+uvg8/rR8+qRw4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:29 2025 by rpki-client