$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e36baf6a-3e86-3e4e-a9e9-a0bc30678209.roa File: e36baf6a-3e86-3e4e-a9e9-a0bc30678209.roa (raw, json) Hash identifier: VjTx4jHyKrPV6L83f+L4ddoF+sHfO+NbxCMAZOBlSas= Subject key identifier: 6D:4B:A2:2A:F8:EE:EF:3E:5E:CC:7A:B5:2A:1F:2D:94:12:E4:65:C5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C7FDCCDAB356E7256D500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e36baf6a-3e86-3e4e-a9e9-a0bc30678209.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397234 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7f:dc:cd:ab:35:6e:72:56:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=a452ae5b-5b23-4473-84db-410f5ecaedfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:f9:0b:dd:8a:a7:2f:31:33:d4:d7:3c:99: 30:c8:47:fe:fa:6c:0d:06:84:30:47:ae:f2:7c:29: b0:18:56:94:d0:44:f4:62:89:cf:33:d5:f1:ef:bf: 06:82:a8:f2:15:0f:b7:aa:48:17:dc:34:77:53:31: eb:e5:3d:fb:6b:07:c0:90:8c:0b:06:75:34:d4:fc: 3e:45:2b:02:3e:48:bf:c0:45:40:36:0a:7b:2e:5d: c6:f7:42:c0:e5:7b:a7:ce:77:d5:84:74:da:35:a2: e5:af:d8:60:04:35:ef:d6:6d:2e:08:49:58:b4:3b: a9:07:88:d7:5b:27:1f:21:18:0e:e4:23:98:87:8b: fe:e5:b7:d8:25:76:13:8d:90:25:5e:f3:19:0c:b6: 82:d8:b0:04:f4:47:2a:49:1c:d6:94:76:7f:59:93: 5f:fe:14:f8:2e:f0:21:2e:1f:6b:9d:10:af:8d:9d: d3:65:24:7d:c6:c1:4c:61:bc:fe:ce:04:5b:61:5c: 96:35:db:56:e1:cc:f7:95:a9:fe:bf:4f:97:0b:90: d8:01:39:91:a9:27:87:11:ab:33:af:9c:31:7c:7c: 90:4b:21:67:4e:8d:a6:ed:bd:50:38:c1:99:69:63: bf:f6:82:cb:09:e0:87:af:19:1a:89:54:7d:80:78: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4B:A2:2A:F8:EE:EF:3E:5E:CC:7A:B5:2A:1F:2D:94:12:E4:65:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e36baf6a-3e86-3e4e-a9e9-a0bc30678209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:2d:98:d6:ca:65:9e:b1:a2:1d:83:fa:50:62:3c:06:1b: 9b:16:48:bc:5a:99:4e:f9:99:76:b3:6d:48:21:9c:88:00:f9: 8c:28:93:a5:77:f9:eb:7a:42:b0:40:31:dc:6f:c1:b2:15:26: ab:61:b4:e2:1f:11:45:ea:88:ab:a0:76:cd:bb:c4:96:0e:ba: 51:bd:a5:15:3f:0e:7b:a1:bb:a7:22:3f:5e:d1:89:c8:de:b8: d4:c8:7d:eb:71:af:19:b7:e7:7c:ac:d9:f5:72:1c:df:40:63: 37:5d:6b:21:76:7b:68:83:da:9f:f6:bd:cc:f5:d8:07:ee:79: 4a:8b:94:ed:44:68:d4:ee:3b:67:cb:3c:f3:8b:35:57:e5:57: bd:84:44:4d:f5:8b:4e:d5:1c:e6:e9:de:3c:c3:0a:19:b7:41: 47:5c:17:ea:52:a6:b1:6a:c0:8f:d0:67:10:8c:8c:08:27:f3: 1d:92:3c:7c:7d:51:44:6c:15:7f:81:b9:4e:70:45:7e:de:9d: 59:d4:5f:1c:d3:33:17:b4:d5:7a:3f:f0:46:97:5a:3f:d3:cd: ba:72:ea:53:91:ad:9d:6a:15:42:2c:26:1d:17:56:5b:f7:44: 5f:b4:df:05:3e:0c:62:79:d4:2e:43:54:45:67:b1:8f:bf:28: 67:5e:40:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbH/czas1bnJW1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YTQ1MmFlNWItNWIyMy00NDczLTg0ZGItNDEwZjVlY2FlZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfb5C92Kpy8xM9TXPJkwyEf++mwNBoQwR67y fCmwGFaU0ET0YonPM9Xx778GgqjyFQ+3qkgX3DR3UzHr5T37awfAkIwLBnU01Pw+ RSsCPki/wEVANgp7Ll3G90LA5XunznfVhHTaNaLlr9hgBDXv1m0uCElYtDupB4jX WycfIRgO5COYh4v+5bfYJXYTjZAlXvMZDLaC2LAE9EcqSRzWlHZ/WZNf/hT4LvAh Lh9rnRCvjZ3TZSR9xsFMYbz+zgRbYVyWNdtW4cz3lan+v0+XC5DYATmRqSeHEasz r5wxfHyQSyFnTo2m7b1QOMGZaWO/9oLLCeCHrxkaiVR9gHjImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1Loir47u8+Xsx6tSofLZQS5GXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTM2YmFmNmEtM2U4Ni0z ZTRlLWE5ZTktYTBiYzMwNjc4MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByRLZjWymWesaIdg/pQYjwGG5sWSLxamU75mXazbUghnIgA+Ywok6V3 +et6QrBAMdxvwbIVJqthtOIfEUXqiKugds27xJYOulG9pRU/Dnuhu6ciP17Ricje uNTIfetxrxm353ys2fVyHN9AYzddayF2e2iD2p/2vcz12AfueUqLlO1EaNTuO2fL PPOLNVflV72ERE31i07VHObp3jzDChm3QUdcF+pSprFqwI/QZxCMjAgn8x2SPHx9 UURsFX+BuU5wRX7enVnUXxzTMxe01Xo/8EaXWj/Tzbpy6lORrZ1qFUIsJh0XVlv3 RF+03wU+DGJ51C5DVEVnsY+/KGdeQCk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:59 2025 by rpki-client