$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa File: dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa (raw, json) Hash identifier: SoOdivBC0fImPdbMp61dnl8KcQ8EZQsJEMXKVyU6X/A= Subject key identifier: 3D:96:D2:E2:34:5C:CD:A6:25:E7:70:EB:79:4C:16:01:2E:73:ED:A9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D6E574432F7058351680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397243 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d6:e5:74:43:2f:70:58:35:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e5858dc9-0e3d-40b8-9e18-b134beec60e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:78:f0:94:18:e8:af:8f:fa:e9:35:b9:98: e3:9a:68:6d:5e:92:5e:b6:a4:60:b3:99:2c:d2:d4: 22:78:58:8b:a6:c5:c3:3a:e8:53:f6:7a:8d:68:51: 61:63:16:a6:ba:34:51:1b:99:d5:d1:a7:ab:ca:5c: e5:92:fe:03:b0:fe:e0:44:8c:00:8d:11:f7:f5:c7: 18:56:4c:36:e4:3d:71:e5:54:b8:2e:45:ec:e7:82: be:d8:c6:0a:1a:98:f1:62:cf:67:e0:66:1c:f3:64: d8:4d:d0:50:f3:65:a2:54:aa:ad:e7:f7:65:02:01: d7:3f:f3:26:3d:d8:fa:ec:bd:21:4d:cb:46:53:e0: ad:5b:16:e4:38:2b:64:c1:1e:94:9f:35:03:1f:91: c1:ff:d9:0c:c9:00:84:1f:3c:5b:3c:e0:e8:8a:62: 14:8e:ca:fd:e5:3e:7f:28:81:56:75:f8:17:ec:86: e3:19:5f:34:70:24:7b:02:9a:90:ef:88:ed:91:eb: 66:7e:19:87:7d:27:33:44:aa:6b:f4:75:6b:09:b3: 32:38:9d:7c:69:50:66:2d:c3:27:6e:2f:15:3f:9a: 79:34:96:54:96:a0:a9:76:e4:cf:0d:fd:40:e8:94: c1:52:bc:73:75:ac:8b:19:14:9e:35:59:7c:da:10: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:D2:E2:34:5C:CD:A6:25:E7:70:EB:79:4C:16:01:2E:73:ED:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc8880dd-58e3-3de9-bec8-1f10587e2d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:98:12:72:02:3b:34:3e:80:98:a5:ea:b9:44:be:5d:c1:d5: aa:6d:e3:06:f8:b9:51:a3:85:b7:17:7c:2b:a7:53:9f:ec:05: 8d:a7:9f:38:d7:9d:41:30:ee:60:38:22:0c:01:21:ca:a1:aa: 31:55:ea:a7:32:fd:3c:ea:07:49:b0:4c:e5:b5:3c:84:07:8b: 27:a7:69:b5:08:5d:cf:bd:13:47:7f:a1:56:04:e2:d2:fd:68: 98:16:fe:d9:b0:cf:9e:ed:84:bd:9a:c4:ee:49:ac:d1:b4:8f: 19:fa:f8:4b:07:a3:2c:ea:a2:2a:0e:70:bd:3f:3d:dc:eb:5a: 52:dd:23:7e:58:3e:d8:56:5f:14:02:f2:ee:6d:bc:8c:dc:82: a1:31:4b:bc:57:61:c9:95:03:ed:39:90:56:51:3e:7d:8f:25: 5f:57:96:e1:38:6d:f2:e7:3d:28:09:d1:19:c6:50:6c:b5:37: 07:55:84:9e:a7:bf:e1:2e:cf:e0:1c:07:5c:c9:d8:7e:dd:08: 6c:69:02:ba:87:2b:e2:90:8c:00:35:41:04:1e:ff:e2:67:81: cf:0f:f5:57:85:10:ea:d5:9a:f1:45:0e:67:6b:f3:7a:09:2d: c0:d7:0c:f0:ed:a9:97:d1:c2:80:65:cf:c2:c8:81:1f:6b:da: c1:c1:75:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dbldEMvcFg1FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTU4NThkYzktMGUzZC00MGI4LTllMTgtYjEzNGJlZWM2MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHB48JQY6K+P+uk1uZjjmmhtXpJetqRgs5ks 0tQieFiLpsXDOuhT9nqNaFFhYxamujRRG5nV0aerylzlkv4DsP7gRIwAjRH39ccY Vkw25D1x5VS4LkXs54K+2MYKGpjxYs9n4GYc82TYTdBQ82WiVKqt5/dlAgHXP/Mm Pdj67L0hTctGU+CtWxbkOCtkwR6UnzUDH5HB/9kMyQCEHzxbPODoimIUjsr95T5/ KIFWdfgX7IbjGV80cCR7ApqQ74jtketmfhmHfSczRKpr9HVrCbMyOJ18aVBmLcMn bi8VP5p5NJZUlqCpduTPDf1A6JTBUrxzdayLGRSeNVl82hDmXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2W0uI0XM2mJedw63lMFgEuc+2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM4ODgwZGQtNThlMy0z ZGU5LWJlYzgtMWYxMDU4N2UyZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaYEnICOzQ+gJil6rlEvl3B1apt4wb4uVGjhbcXfCunU5/sBY2nnzjX nUEw7mA4IgwBIcqhqjFV6qcy/TzqB0mwTOW1PIQHiyenabUIXc+9E0d/oVYE4tL9 aJgW/tmwz57thL2axO5JrNG0jxn6+EsHoyzqoioOcL0/PdzrWlLdI35YPthWXxQC 8u5tvIzcgqExS7xXYcmVA+05kFZRPn2PJV9XluE4bfLnPSgJ0RnGUGy1NwdVhJ6n v+Euz+AcB1zJ2H7dCGxpArqHK+KQjAA1QQQe/+Jngc8P9VeFEOrVmvFFDmdr83oJ LcDXDPDtqZfRwoBlz8LIgR9r2sHBdYE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:52 2025 by rpki-client