$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d00b40-e9b7-330c-b58e-7372957ec741.roa File: d5d00b40-e9b7-330c-b58e-7372957ec741.roa (raw, json) Hash identifier: I86MPHripKaz1104PcrzCuIX9TstcsutcHqI0qL5HEM= Subject key identifier: 89:C0:CB:08:0A:DF:A5:7E:5B:F7:C3:4A:A6:B3:4E:C4:B7:70:7D:FB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F532E81D5CAFBDBE3F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d00b40-e9b7-330c-b58e-7372957ec741.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f5:32:e8:1d:5c:af:bd:be:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=10c782f1-7782-4f99-a810-11662a53f08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:87:e5:c7:31:b6:20:89:3a:c4:1c:21:6f: 48:47:a2:7e:7b:b4:c5:e1:ce:ab:b1:17:0f:b9:32: 21:f5:dd:0b:d8:96:91:22:6a:1a:e5:24:73:2c:24: b7:7d:b1:e1:c9:1f:ef:c7:41:20:13:a5:12:13:92: 18:4e:02:3c:e7:bd:f2:99:22:a3:b7:9c:72:5b:09: 64:6f:9b:eb:61:00:11:6f:14:06:78:e3:c6:a8:b3: dd:6e:9b:72:97:dc:2a:92:14:3e:da:43:a3:0d:7d: e2:92:87:98:58:14:c5:1c:42:c4:a4:18:c2:06:bb: e5:b4:2e:71:8a:06:dc:19:23:80:d9:0f:00:00:97: f8:f4:b8:b9:73:3d:f0:c8:a9:68:bc:1a:98:60:a0: a0:98:ff:db:88:15:c1:e5:c0:c9:bb:f2:99:4e:54: 3d:93:dd:c7:af:ac:0b:6a:7b:21:f8:be:bf:00:08: d3:a4:1c:b8:3c:c1:db:5f:d8:ed:ed:e3:5c:ad:92: 0c:3a:a6:e8:19:5d:1d:48:4f:c7:ed:a5:93:ea:61: c2:af:5b:b9:1e:f8:92:22:84:ca:7d:21:b5:c0:a2: 4b:86:b8:67:07:41:1c:d6:29:e0:5d:eb:37:fe:bd: de:c9:0d:78:6e:09:19:5a:ef:51:f5:a9:6f:67:cf: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:CB:08:0A:DF:A5:7E:5B:F7:C3:4A:A6:B3:4E:C4:B7:70:7D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d00b40-e9b7-330c-b58e-7372957ec741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:71:60:49:cc:23:e5:73:45:68:dd:75:7f:a2:54:cb:73:d1: c0:de:aa:31:61:24:c6:a1:2d:17:f4:c1:dd:3a:e7:83:d7:74: 96:fb:7a:12:40:cb:08:41:c6:4b:d2:00:e3:29:9d:f1:3c:fc: 01:7a:db:2d:7f:38:8d:f7:7a:bf:a3:b2:d7:c2:2a:e3:d3:97: c0:8f:dc:6f:3b:ef:3e:85:4b:7b:f5:b9:ca:16:5d:be:7d:3f: c1:09:87:0b:7e:55:33:e2:ab:64:04:81:6a:5e:9e:7b:b9:0d: ea:25:79:e6:24:df:3c:37:15:01:92:f7:8a:97:c8:1d:03:29: 90:18:58:13:a2:b3:f2:07:ea:dd:58:7e:35:c2:b0:84:b2:22: 63:1d:ce:5a:05:d1:f0:0c:54:3c:a2:58:0c:0e:74:f7:f9:98: 19:a1:d6:47:df:51:61:86:5c:fb:b4:c9:4c:ab:a1:8d:b2:eb: 02:4e:e8:ea:21:5c:6e:fa:09:83:a4:3e:37:5a:36:5a:eb:27: 9e:44:af:88:42:ed:cb:79:89:71:71:9b:b9:88:15:d8:42:eb: 46:c2:84:8a:74:63:d4:7c:5d:d4:90:6b:16:04:f3:6c:94:61: 98:61:94:a6:79:5e:88:3f:39:67:38:c1:7f:fa:c6:0e:9c:02: 81:e2:97:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fUy6B1cr72+PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTBjNzgyZjEtNzc4Mi00Zjk5LWE4MTAtMTE2NjJhNTNmMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUWH5ccxtiCJOsQcIW9IR6J+e7TF4c6rsRcP uTIh9d0L2JaRImoa5SRzLCS3fbHhyR/vx0EgE6USE5IYTgI8573ymSKjt5xyWwlk b5vrYQARbxQGeOPGqLPdbptyl9wqkhQ+2kOjDX3ikoeYWBTFHELEpBjCBrvltC5x igbcGSOA2Q8AAJf49Li5cz3wyKlovBqYYKCgmP/biBXB5cDJu/KZTlQ9k93Hr6wL ansh+L6/AAjTpBy4PMHbX9jt7eNcrZIMOqboGV0dSE/H7aWT6mHCr1u5HviSIoTK fSG1wKJLhrhnB0Ec1ingXes3/r3eyQ14bgkZWu9R9alvZ8+g3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInAywgK36V+W/fDSqazTsS3cH37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDVkMDBiNDAtZTliNy0z MzBjLWI1OGUtNzM3Mjk1N2VjNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVxYEnMI+VzRWjddX+iVMtz0cDeqjFhJMahLRf0wd0654PXdJb7ehJA ywhBxkvSAOMpnfE8/AF62y1/OI33er+jstfCKuPTl8CP3G877z6FS3v1ucoWXb59 P8EJhwt+VTPiq2QEgWpennu5DeoleeYk3zw3FQGS94qXyB0DKZAYWBOis/IH6t1Y fjXCsISyImMdzloF0fAMVDyiWAwOdPf5mBmh1kffUWGGXPu0yUyroY2y6wJO6Ooh XG76CYOkPjdaNlrrJ55Er4hC7ct5iXFxm7mIFdhC60bChIp0Y9R8XdSQaxYE82yU YZhhlKZ5Xog/OWc4wX/6xg6cAoHil/0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:42 2025 by rpki-client