$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc63866f-a754-3d95-983e-d944ae9cd427.roa File: dc63866f-a754-3d95-983e-d944ae9cd427.roa (raw, json) Hash identifier: Afc9KvWNsAhoFGXlLo8S6/GE5Rt0AzNMJnxEm293q50= Subject key identifier: 16:72:9C:95:44:CF:C6:6F:57:F9:4E:A8:0C:18:46:D7:B8:7B:14:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C370C16DFC779E9982ECD80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc63866f-a754-3d95-983e-d944ae9cd427.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397235 IP address blocks: 156.154.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0c:16:df:c7:79:e9:98:2e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=27cafd74-aed0-4a17-bfca-78b5d0556794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:27:a1:bf:df:36:f8:03:0f:a6:04:da:09: ab:fe:17:08:21:7f:07:f1:1d:c7:c9:83:9a:ca:d4: 9b:2e:2c:37:91:2d:52:80:e2:53:5c:81:a5:b0:00: 41:cf:e6:04:a3:48:c8:1c:80:0f:43:6f:5e:23:de: ae:d9:ef:5d:5c:2a:f6:f4:20:bc:ea:45:09:04:67: 74:c4:03:dc:60:6b:6a:2f:69:e7:66:fe:8a:ec:98: cc:bd:36:a5:e2:4d:2c:6f:10:59:0b:3d:ea:56:91: 72:59:dc:40:5b:bc:4b:b8:7a:5f:c5:0c:71:b6:6b: d8:c2:50:fb:93:67:f9:1e:00:e4:b9:3e:58:cd:25: e9:e0:88:1f:0d:00:3b:58:16:c7:60:56:a6:7b:7f: 18:ab:4d:8a:b4:21:36:8b:cb:70:bc:bd:fd:03:9b: 43:09:e5:ea:fb:da:97:b6:cd:88:c4:b4:9c:75:f7: 66:52:40:9d:a7:98:aa:5d:24:5f:00:f2:2d:8e:31: 69:b8:6c:3a:26:47:da:ab:9e:c8:f0:cf:5d:6e:2b: b1:03:f6:47:21:dc:b3:5b:46:f5:a2:9a:d3:aa:08: 49:f4:75:ca:75:ae:c6:f0:54:84:82:bc:9b:69:98: 04:17:e2:f5:4e:5e:6e:70:a4:ea:5d:9c:d0:4a:07: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:72:9C:95:44:CF:C6:6F:57:F9:4E:A8:0C:18:46:D7:B8:7B:14:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc63866f-a754-3d95-983e-d944ae9cd427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f6:31:d8:1b:90:72:d5:fa:ea:8b:cd:fe:6d:dc:2d:43:65: 0f:26:c6:22:0a:a1:12:3a:a9:bb:ec:2b:e4:e7:1a:85:03:eb: 87:a4:5b:2f:66:e1:12:fa:a5:f4:92:d8:f5:8e:c6:81:1e:79: ea:0c:01:86:a2:dc:f2:91:76:19:e5:8c:6f:f2:74:48:e5:a1: 17:95:9c:f1:7c:57:e8:ba:51:99:d9:24:a6:c6:39:1f:ef:38: 02:36:39:92:fe:76:f8:5d:fb:a3:39:40:e8:0c:4b:43:e2:76: 53:5f:d9:47:74:e6:ec:98:4b:a4:f7:98:5a:74:74:cb:27:de: 79:3a:56:4c:a4:09:de:c9:6d:2e:0f:88:11:a5:2b:db:c4:55: 20:f6:66:9a:03:1f:2e:28:26:e7:c7:6b:94:c4:60:97:15:30: 57:ed:90:59:ad:7c:7d:c0:23:a6:3b:e6:62:0c:e4:96:ce:10: 16:41:7f:74:99:49:ff:49:ed:fd:c1:5a:db:bc:a5:61:b8:95: 44:2a:55:1b:d6:92:9d:8a:be:ca:47:e4:90:14:4f:54:3b:ab: 01:0d:2c:84:20:18:00:3f:cb:0d:b3:fa:39:de:1d:f5:df:9a: 68:bd:45:ed:d8:f1:3f:e4:b4:17:d2:8c:f4:94:2b:86:c2:ff: 33:82:d9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwwW38d56ZguzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjdjYWZkNzQtYWVkMC00YTE3LWJmY2EtNzhiNWQwNTU2Nzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6Mnob/fNvgDD6YE2gmr/hcIIX8H8R3HyYOa ytSbLiw3kS1SgOJTXIGlsABBz+YEo0jIHIAPQ29eI96u2e9dXCr29CC86kUJBGd0 xAPcYGtqL2nnZv6K7JjMvTal4k0sbxBZCz3qVpFyWdxAW7xLuHpfxQxxtmvYwlD7 k2f5HgDkuT5YzSXp4IgfDQA7WBbHYFame38Yq02KtCE2i8twvL39A5tDCeXq+9qX ts2IxLScdfdmUkCdp5iqXSRfAPItjjFpuGw6Jkfaq57I8M9dbiuxA/ZHIdyzW0b1 oprTqghJ9HXKda7G8FSEgrybaZgEF+L1Tl5ucKTqXZzQSgfjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZynJVEz8ZvV/lOqAwYRte4exQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM2Mzg2NmYtYTc1NC0z ZDk1LTk4M2UtZDk0NGFlOWNkNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJppMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD2MdgbkHLV+uqLzf5t3C1DZQ8mxiIKoRI6qbvsK+TnGoUD64ekWy9m 4RL6pfSS2PWOxoEeeeoMAYai3PKRdhnljG/ydEjloReVnPF8V+i6UZnZJKbGOR/v OAI2OZL+dvhd+6M5QOgMS0PidlNf2Ud05uyYS6T3mFp0dMsn3nk6VkykCd7JbS4P iBGlK9vEVSD2ZpoDHy4oJufHa5TEYJcVMFftkFmtfH3AI6Y75mIM5JbOEBZBf3SZ Sf9J7f3BWtu8pWG4lUQqVRvWkp2KvspH5JAUT1Q7qwENLIQgGAA/yw2z+jneHfXf mmi9Re3Y8T/ktBfSjPSUK4bC/zOC2b4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:22 2025 by rpki-client