$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa File: db405216-0b0f-3ed5-821b-744bf64148a4.roa (raw, json) Hash identifier: wHPx15RGgixZn+iGrUUjoM/E6FoJHQyK+AadkdGNZcg= Subject key identifier: EB:FB:72:CD:76:56:1F:6E:B4:C2:76:7E:B1:F8:26:F7:CB:83:A0:7F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D60846FD5A496614FA80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d6:08:46:fd:5a:49:66:14:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=43e5f8bc-614e-462e-97da-1ca8faa9e606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:04:d0:93:50:e9:8a:4a:b6:94:f1:9e:12: 60:ab:00:80:54:b1:a8:12:f9:24:2c:18:95:e1:69: 68:01:06:2f:5b:17:56:26:2f:df:36:5c:97:cb:94: 0e:91:b0:70:61:2e:2c:e5:db:14:62:42:d1:0f:04: 68:0b:bd:b8:7a:75:a8:a8:5d:75:ae:40:b0:0a:40: 77:8d:da:77:5a:3e:e2:2f:b5:13:f3:ee:eb:48:b9: 6b:6a:75:92:8e:a3:7f:01:a6:7e:3a:df:15:af:60: 06:82:26:46:e3:01:03:c8:d8:00:ef:f7:d2:5d:8b: 9c:09:59:93:1a:c7:86:88:4b:e2:4b:df:98:ea:55: 61:9d:13:29:d4:b0:61:7e:e9:cd:80:8a:d5:be:60: 95:a7:78:c3:e0:85:ac:a7:37:68:dd:23:ce:dc:90: 7e:d3:7a:85:19:b8:6b:8b:5c:10:48:2b:55:aa:38: 9a:a8:26:7a:b9:fb:21:fe:0b:cc:44:65:e4:2b:39: 2d:bc:96:ee:67:6a:21:7f:3c:34:60:e1:ab:1f:3c: 5a:85:93:cd:cd:6b:24:8d:51:12:8c:eb:d3:c9:d4: d3:85:cb:74:e5:f7:dd:d6:56:cc:6c:f5:4f:5d:e1: 38:a9:6e:e3:3b:4e:1f:01:d3:d9:97:dc:36:0d:73: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FB:72:CD:76:56:1F:6E:B4:C2:76:7E:B1:F8:26:F7:CB:83:A0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/db405216-0b0f-3ed5-821b-744bf64148a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5f:6a:3d:dd:3f:3c:57:3a:16:8e:8a:80:db:a3:29:bf:14: 59:7d:2c:67:2b:20:c4:46:c4:22:00:1f:3f:38:32:60:26:77: d2:fc:0a:46:d3:5c:3f:29:d7:06:98:88:5f:af:bc:7d:cc:28: 45:be:94:d8:09:b3:3c:58:42:d2:36:58:ca:8d:21:84:a9:c5: 19:67:75:a2:f7:59:44:12:d1:65:04:c8:f6:6d:76:ff:12:a6: b8:4c:52:ed:2e:d3:f5:b0:74:c4:3e:e7:95:e2:02:3c:e3:99: 1f:e7:36:b2:d9:85:ad:5d:27:7f:1a:b8:9d:43:1f:50:c5:5d: cf:da:50:da:ab:15:2f:93:60:a5:e4:58:e1:69:2b:4f:fe:03: f6:b5:f6:5b:ee:7b:98:6f:8e:8d:69:30:a0:b0:03:f0:1f:c0: 4f:14:9b:27:79:df:21:15:52:7f:e4:8d:19:6c:f3:0b:d1:74: 81:5e:03:3c:b0:20:66:34:c1:ac:d6:e6:11:57:cf:0b:49:1e: fe:44:4c:da:f9:8d:53:7b:02:16:c5:e0:ef:9e:2b:47:b6:5b: 6d:9a:ff:ab:39:d0:7f:64:fd:44:7d:12:be:ee:66:05:9b:7d: 99:d7:1c:e5:05:53:31:53:47:60:1f:43:18:d6:ed:f7:f8:12: dd:35:1a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dYIRv1aSWYU+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDNlNWY4YmMtNjE0ZS00NjJlLTk3ZGEtMWNhOGZhYTllNjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4AE0JNQ6YpKtpTxnhJgqwCAVLGoEvkkLBiV 4WloAQYvWxdWJi/fNlyXy5QOkbBwYS4s5dsUYkLRDwRoC724enWoqF11rkCwCkB3 jdp3Wj7iL7UT8+7rSLlranWSjqN/AaZ+Ot8Vr2AGgiZG4wEDyNgA7/fSXYucCVmT GseGiEviS9+Y6lVhnRMp1LBhfunNgIrVvmCVp3jD4IWspzdo3SPO3JB+03qFGbhr i1wQSCtVqjiaqCZ6ufsh/gvMRGXkKzktvJbuZ2ohfzw0YOGrHzxahZPNzWskjVES jOvTydTThct05ffd1lbMbPVPXeE4qW7jO04fAdPZl9w2DXP1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv7cs12Vh9utMJ2frH4JvfLg6B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGI0MDUyMTYtMGIwZi0z ZWQ1LTgyMWItNzQ0YmY2NDE0OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVfaj3dPzxXOhaOioDboym/FFl9LGcrIMRGxCIAHz84MmAmd9L8CkbT XD8p1waYiF+vvH3MKEW+lNgJszxYQtI2WMqNIYSpxRlndaL3WUQS0WUEyPZtdv8S prhMUu0u0/WwdMQ+55XiAjzjmR/nNrLZha1dJ38auJ1DH1DFXc/aUNqrFS+TYKXk WOFpK0/+A/a19lvue5hvjo1pMKCwA/AfwE8Umyd53yEVUn/kjRls8wvRdIFeAzyw IGY0wazW5hFXzwtJHv5ETNr5jVN7AhbF4O+eK0e2W22a/6s50H9k/UR9Er7uZgWb fZnXHOUFUzFTR2AfQxjW7ff4Et01GlM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:45 2025 by rpki-client