$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa File: dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa (raw, json) Hash identifier: 7i+G9q7nt5rD4RU1nWLkrcUIdFnGKrBTm4Swl8/uBKM= Subject key identifier: C8:47:96:12:E8:7E:A4:85:82:DB:47:47:F4:63:89:A3:71:EB:0B:B6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A78628DA71593A2F41EA Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a7:86:28:da:71:59:3a:2f:41:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=85fe00f1-f3c6-4031-9dad-42a6e9a460cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:a3:52:65:f3:61:52:97:c7:25:3b:b6:91: e7:e9:26:4d:53:4e:87:9b:3b:5e:4f:04:a5:a4:8a: 86:dc:7b:3b:f6:26:cb:9c:7b:18:4c:31:7b:d3:78: bb:6f:a0:42:e7:38:c4:14:42:d0:d7:39:8c:1e:62: cc:22:d2:1b:c1:a6:a0:bc:0e:8a:e0:37:ac:05:fb: 02:c0:b8:6e:f4:45:ed:0b:7f:81:3a:16:f8:b7:5f: 94:f9:60:0b:85:7c:11:a4:fb:81:8e:4a:47:fc:53: ee:36:3f:b0:b6:38:5a:04:b6:8a:a5:47:dc:de:d1: f6:c6:ea:17:49:65:55:52:e6:ed:0f:40:73:66:5a: 4f:23:5b:7e:d5:69:8c:9a:04:c2:d4:13:f9:0f:52: 77:2c:9a:e8:21:d0:37:36:61:25:30:1e:64:7a:de: 17:d1:3c:02:c0:ef:e9:8f:8f:9b:81:c2:9c:8d:93: a0:42:10:da:84:60:ce:5e:4f:4c:b9:98:7c:36:2e: b4:22:eb:2a:a4:3c:84:77:66:19:dc:94:d0:fa:ec: 02:ba:3c:57:4e:4c:55:4d:4d:39:fc:3f:3e:c2:0e: 96:3b:f1:4e:75:9b:64:b8:bd:0a:7f:f4:71:47:83: ab:2b:b0:03:83:0c:8c:e3:4c:4e:aa:77:01:53:c8: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:96:12:E8:7E:A4:85:82:DB:47:47:F4:63:89:A3:71:EB:0B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfdffbd5-2d22-3c06-9aeb-31cac2c1ec01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fe:94:46:8b:b0:68:79:7e:40:a4:f5:27:f4:ea:6a:f6:7b: 39:ef:da:4c:82:77:40:e8:d7:8f:6f:96:49:25:c2:9d:c9:9b: 57:3b:eb:29:fe:9b:d0:04:40:68:e8:fc:3f:ca:9f:c5:07:ea: 08:fd:59:c7:43:45:54:da:4a:40:61:85:a8:42:3a:1d:f4:0a: 4b:56:05:e4:df:79:4e:f3:17:74:40:cf:e0:3a:fc:44:0a:2d: a7:6d:32:f9:96:38:cc:7a:46:94:0b:7b:3d:54:ef:71:d6:73: ee:b3:47:1d:d4:37:db:77:64:29:bc:50:3f:55:b5:5e:56:1f: 21:1b:43:ea:9c:6e:34:f0:f3:f4:e5:70:50:44:29:e3:b4:00: 5f:a7:1a:69:7b:07:75:cd:f8:e0:dd:04:68:39:25:40:e2:1c: d8:8c:b7:83:10:f6:33:ed:5e:13:eb:de:59:6d:25:e6:fc:92: f5:43:df:3f:18:e1:ba:92:ba:02:62:ac:10:ff:2d:b4:32:7e: 65:34:4c:b6:8c:3b:dd:9b:19:b8:38:da:d1:1a:16:9a:7a:e0: 71:35:82:3f:04:69:ff:fb:76:a5:d9:3e:ab:18:77:2d:2e:90: 14:20:4c:53:3f:41:92:a2:5b:1b:52:22:e2:2e:dc:80:15:f2: 42:5d:ef:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaeGKNpxWTovQeowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ODVmZTAwZjEtZjNjNi00MDMxLTlkYWQtNDJhNmU5YTQ2MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWWjUmXzYVKXxyU7tpHn6SZNU06HmzteTwSl pIqG3Hs79ibLnHsYTDF703i7b6BC5zjEFELQ1zmMHmLMItIbwaagvA6K4DesBfsC wLhu9EXtC3+BOhb4t1+U+WALhXwRpPuBjkpH/FPuNj+wtjhaBLaKpUfc3tH2xuoX SWVVUubtD0BzZlpPI1t+1WmMmgTC1BP5D1J3LJroIdA3NmElMB5ket4X0TwCwO/p j4+bgcKcjZOgQhDahGDOXk9MuZh8Ni60IusqpDyEd2YZ3JTQ+uwCujxXTkxVTU05 /D8+wg6WO/FOdZtkuL0Kf/RxR4OrK7ADgwyM40xOqncBU8jUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhHlhLofqSFgttHR/RjiaNx6wu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGZkZmZiZDUtMmQyMi0z YzA2LTlhZWItMzFjYWMyYzFlYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/+lEaLsGh5fkCk9Sf06mr2eznv2kyCd0Do149vlkklwp3Jm1c76yn+ m9AEQGjo/D/Kn8UH6gj9WcdDRVTaSkBhhahCOh30CktWBeTfeU7zF3RAz+A6/EQK LadtMvmWOMx6RpQLez1U73HWc+6zRx3UN9t3ZCm8UD9VtV5WHyEbQ+qcbjTw8/Tl cFBEKeO0AF+nGml7B3XN+ODdBGg5JUDiHNiMt4MQ9jPtXhPr3lltJeb8kvVD3z8Y 4bqSugJirBD/LbQyfmU0TLaMO92bGbg42tEaFpp64HE1gj8Eaf/7dqXZPqsYdy0u kBQgTFM/QZKiWxtSIuIu3IAV8kJd7+4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:32 2025 by rpki-client