$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e67af0ad-b54e-3dd9-8019-56324b3def9c.roa File: e67af0ad-b54e-3dd9-8019-56324b3def9c.roa (raw, json) Hash identifier: S3qSVrjoHl/+BZm4hTw4uwPUCsLyEr6VMV5jkaE/Wy4= Subject key identifier: 55:E2:6C:66:39:53:AF:5C:86:AA:42:E5:35:98:15:3E:71:30:B5:1A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D6AE264B9B8626650380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e67af0ad-b54e-3dd9-8019-56324b3def9c.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397240 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d6:ae:26:4b:9b:86:26:65:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9c07f70e-6bed-42a0-83e1-a3e748ee4f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:ee:09:14:53:5f:1e:33:fb:cd:06:6e:34: 26:9b:12:51:71:29:79:3f:dd:2d:fe:e5:f0:c2:be: c4:c9:0d:fd:94:51:b6:37:08:e7:44:ba:37:f4:be: a5:4a:fd:23:bc:02:c3:3d:0f:32:41:3c:92:64:ef: cd:31:b2:75:fd:e1:09:ae:35:4b:9c:ad:10:03:4f: 35:33:e3:1c:b4:a5:f2:ac:c7:ae:09:81:74:80:6b: 7b:8a:f2:86:61:97:83:2f:25:a3:4f:50:81:c8:fc: 0c:dd:4d:55:91:6f:07:38:8c:ad:a0:8e:7c:dc:98: 49:3b:80:5c:50:26:2d:69:5e:a8:aa:a3:4c:a2:c4: 13:30:6c:72:ee:fa:f7:58:dd:ac:00:54:4b:b9:26: ca:0f:a2:2a:89:b4:8a:5d:c6:63:f5:6c:11:eb:7b: e3:11:b1:a0:71:63:4f:d6:02:af:83:5b:a4:aa:a3: fc:28:c2:83:74:50:64:ee:37:3d:b6:a7:84:df:a0: bb:9a:c9:76:e0:74:78:db:d1:09:a4:a0:3f:f7:5f: b6:ea:ad:8e:d5:be:f1:24:bd:46:5f:0a:37:82:d5: 47:76:a7:91:88:0a:45:0f:fe:27:4a:80:c2:cd:00: bb:b3:55:f4:30:25:d4:92:50:7f:67:ff:5f:c5:3a: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E2:6C:66:39:53:AF:5C:86:AA:42:E5:35:98:15:3E:71:30:B5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e67af0ad-b54e-3dd9-8019-56324b3def9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:31:9c:69:09:bf:2a:05:6f:9c:cc:ac:87:80:5f:ec:3b:26: 06:12:eb:73:a5:85:8b:46:b7:e8:64:77:d6:26:d0:9e:5e:0f: 63:76:e5:20:8d:d6:30:ba:62:a9:9d:5a:c7:66:6e:10:7e:b2: 55:d8:3e:ae:ce:5e:6c:25:7f:ac:14:6a:12:f0:d7:e6:ee:d7: 32:b4:25:c1:86:bc:24:30:ff:5d:57:92:5f:ba:91:b8:93:09: f1:aa:75:95:c9:05:8e:2f:56:36:3e:74:e5:f7:5e:b7:20:3a: 56:37:f2:fb:42:ae:09:0d:82:bc:7f:1a:a2:62:be:f5:6e:ac: 63:d4:ac:50:d2:7c:41:60:22:c4:44:16:0e:9c:4a:c9:ae:d5: 80:42:31:69:a1:ad:3a:56:32:be:64:cb:cf:43:98:78:ab:2e: 63:68:78:24:27:2e:9a:6a:57:65:6d:8e:ff:2c:24:42:76:f1: a6:8e:0d:bf:5a:51:e8:4e:24:de:30:54:93:e8:91:b0:59:76: 83:39:b2:59:3e:6a:e3:a5:14:5f:77:01:a7:24:25:d0:f5:9b: b6:a8:6c:65:35:2f:52:ec:70:5f:4d:58:32:d2:b8:7e:6d:98: 90:41:5e:15:25:0b:25:92:08:cb:27:a5:b3:c4:cc:6f:a3:4a: c9:93:cd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dauJkubhiZlA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWMwN2Y3MGUtNmJlZC00MmEwLTgzZTEtYTNlNzQ4ZWU0ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKjuCRRTXx4z+80GbjQmmxJRcSl5P90t/uXw wr7EyQ39lFG2NwjnRLo39L6lSv0jvALDPQ8yQTySZO/NMbJ1/eEJrjVLnK0QA081 M+MctKXyrMeuCYF0gGt7ivKGYZeDLyWjT1CByPwM3U1VkW8HOIytoI583JhJO4Bc UCYtaV6oqqNMosQTMGxy7vr3WN2sAFRLuSbKD6IqibSKXcZj9WwR63vjEbGgcWNP 1gKvg1ukqqP8KMKDdFBk7jc9tqeE36C7msl24HR429EJpKA/91+26q2O1b7xJL1G Xwo3gtVHdqeRiApFD/4nSoDCzQC7s1X0MCXUklB/Z/9fxTpdMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXibGY5U69chqpC5TWYFT5xMLUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTY3YWYwYWQtYjU0ZS0z ZGQ5LTgwMTktNTYzMjRiM2RlZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIxnGkJvyoFb5zMrIeAX+w7JgYS63OlhYtGt+hkd9Ym0J5eD2N25SCN 1jC6YqmdWsdmbhB+slXYPq7OXmwlf6wUahLw1+bu1zK0JcGGvCQw/11Xkl+6kbiT CfGqdZXJBY4vVjY+dOX3XrcgOlY38vtCrgkNgrx/GqJivvVurGPUrFDSfEFgIsRE Fg6cSsmu1YBCMWmhrTpWMr5ky89DmHirLmNoeCQnLppqV2Vtjv8sJEJ28aaODb9a UehOJN4wVJPokbBZdoM5slk+auOlFF93AackJdD1m7aobGU1L1LscF9NWDLSuH5t mJBBXhUlCyWSCMsnpbPEzG+jSsmTzVk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:18 2025 by rpki-client