$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d82786-4143-31fc-be91-90ac996aa95b.roa File: d5d82786-4143-31fc-be91-90ac996aa95b.roa (raw, json) Hash identifier: kfJpxRqBijCjvOoWvlYiQYH8V8RG+S9h3khErOX+A40= Subject key identifier: 2B:15:49:93:10:C7:48:7C:9E:FF:F4:5C:05:4B:2F:41:2C:64:0F:7A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F606DAF05EC9D530BDC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d82786-4143-31fc-be91-90ac996aa95b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f6:06:da:f0:5e:c9:d5:30:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ddf29642-929c-40eb-bf77-4b0dbadfd7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:5e:13:5e:1e:0d:d8:7a:56:ac:59:1d:3d: e2:8f:de:81:58:9c:f5:d5:cb:a7:a3:45:be:a4:e5: f4:5f:dd:e7:11:42:dd:8e:e9:a0:f2:54:e6:56:de: 79:b1:7b:e2:19:a1:dc:1a:8f:bf:bf:1e:03:63:90: 04:85:74:d0:5d:bf:e1:92:e4:5c:c6:cc:47:27:c5: ae:0f:73:fd:75:97:91:35:bb:e9:a7:8b:b7:af:87: 38:95:65:14:00:e0:09:6a:52:83:02:f4:03:b1:51: 78:03:89:78:80:52:3b:ec:67:9c:3e:9c:4f:d3:24: 16:12:0e:06:1d:8a:e6:61:d6:a4:cd:22:8b:72:60: 49:39:de:a3:94:64:86:7a:f6:d4:80:8e:12:f7:f9: 33:c2:30:2b:cf:e9:8a:bd:c6:c3:97:98:7e:4f:3e: 34:1d:d1:17:ae:21:d8:41:10:11:b7:74:55:41:2e: 7d:3a:43:83:90:ff:8e:f7:ea:ca:bb:52:dc:44:80: 2b:cf:73:55:51:78:b0:bf:48:6b:dc:2d:ae:81:8a: 5a:96:c8:0d:50:1e:50:62:26:ef:be:1c:ed:2d:36: 27:63:2b:ec:db:f7:b7:a3:84:48:43:87:19:2b:be: 8e:e3:b0:ec:3f:fc:ba:87:a9:a8:39:f5:f2:8d:b4: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:15:49:93:10:C7:48:7C:9E:FF:F4:5C:05:4B:2F:41:2C:64:0F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5d82786-4143-31fc-be91-90ac996aa95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:c8:fa:08:29:61:95:32:01:a9:f7:b9:07:35:18:39:54:5d: eb:78:3d:19:fe:10:43:6f:0a:8b:b3:82:d5:b4:d5:b5:2b:e1: 98:ad:bc:2e:7c:5e:db:14:ad:83:16:fa:2e:46:d2:2f:b2:7f: a0:cc:c0:9c:31:23:1e:e1:ea:a5:25:66:51:2a:0a:50:9f:c4: 49:3f:0f:ac:e4:28:f4:d9:e6:96:46:ce:4c:da:18:98:80:01: f0:0e:b5:bd:96:ea:5f:f2:bb:b3:c6:52:b8:0a:3b:fe:66:85: 0d:dd:b1:cf:52:15:22:f2:d3:1a:6f:5e:e8:f6:f8:b6:73:cb: a0:e2:7a:87:a4:a4:31:ff:8d:3e:73:16:55:19:9b:ef:95:2e: 33:b6:1e:ee:5d:f9:16:d9:5e:e1:a3:35:94:38:a2:ef:08:84: 9f:eb:93:f7:67:e3:76:87:ed:42:3e:13:6f:eb:9f:ce:39:26: 12:ed:90:b5:f9:92:82:40:a6:f7:1d:02:c4:b0:bc:42:59:45: c2:09:1c:b7:50:dc:d5:9a:b1:17:cb:25:06:ac:c7:6c:32:2a: 01:53:b6:45:2f:1c:72:23:71:14:ac:52:7a:c6:aa:6b:71:34: 04:e6:f7:04:69:fc:58:d3:54:13:87:81:3e:24:ee:d9:07:17: e4:2f:a1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fYG2vBeydUwvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGRmMjk2NDItOTI5Yy00MGViLWJmNzctNGIwZGJhZGZkN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxBeE14eDdh6VqxZHT3ij96BWJz11cuno0W+ pOX0X93nEULdjumg8lTmVt55sXviGaHcGo+/vx4DY5AEhXTQXb/hkuRcxsxHJ8Wu D3P9dZeRNbvpp4u3r4c4lWUUAOAJalKDAvQDsVF4A4l4gFI77GecPpxP0yQWEg4G HYrmYdakzSKLcmBJOd6jlGSGevbUgI4S9/kzwjArz+mKvcbDl5h+Tz40HdEXriHY QRARt3RVQS59OkODkP+O9+rKu1LcRIArz3NVUXiwv0hr3C2ugYpalsgNUB5QYibv vhztLTYnYyvs2/e3o4RIQ4cZK76O47DsP/y6h6moOfXyjbRO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsVSZMQx0h8nv/0XAVLL0EsZA96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDVkODI3ODYtNDE0My0z MWZjLWJlOTEtOTBhYzk5NmFhOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfI+ggpYZUyAan3uQc1GDlUXet4PRn+EENvCouzgtW01bUr4ZitvC58 XtsUrYMW+i5G0i+yf6DMwJwxIx7h6qUlZlEqClCfxEk/D6zkKPTZ5pZGzkzaGJiA AfAOtb2W6l/yu7PGUrgKO/5mhQ3dsc9SFSLy0xpvXuj2+LZzy6DieoekpDH/jT5z FlUZm++VLjO2Hu5d+RbZXuGjNZQ4ou8IhJ/rk/dn43aH7UI+E2/rn845JhLtkLX5 koJApvcdAsSwvEJZRcIJHLdQ3NWasRfLJQasx2wyKgFTtkUvHHIjcRSsUnrGqmtx NATm9wRp/FjTVBOHgT4k7tkHF+Qvod8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:58 2025 by rpki-client