$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa File: e7aabf01-851c-3ef9-b334-10a9a4085206.roa (raw, json) Hash identifier: +NTxIVjdHEFArkSAbX8kESCOrkwDQVsnDXNGpLnqx48= Subject key identifier: 56:25:E0:AC:8C:0C:B9:B1:B5:1C:FA:8F:67:36:B7:FB:77:21:C0:4F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B7F520A2BC1C131F6DB88AB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 12008 IP address blocks: 156.154.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0a:2b:c1:c1:31:f6:db:88:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ca2f74b3-0cba-4f36-9138-ee25c7f168d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:2a:5f:de:49:cd:1f:89:af:52:ad:85:2c: ac:ad:cc:7e:78:db:6f:44:6f:f7:7b:dc:7a:5f:ab: a9:29:10:c0:a2:ee:13:fb:ad:4d:7c:a9:4b:05:d7: 39:52:24:14:eb:82:a6:7e:4d:da:5f:b1:a7:d3:46: f4:36:75:0e:86:03:03:7e:0c:d2:27:4b:6c:c1:56: 30:c9:20:88:70:a5:bb:41:e3:1b:5e:f5:a0:04:de: 82:35:68:d6:8c:12:33:6e:11:10:6e:30:26:1f:7b: 0e:5e:4e:64:23:b7:09:24:ac:1a:29:74:68:fb:e2: 5c:df:2c:0d:8c:a2:d2:41:e2:f2:7a:9e:c7:42:d6: ed:f5:11:00:6f:03:ea:0e:c4:18:aa:36:f8:7e:d7: 0f:d8:03:33:3f:a9:f7:bb:9f:49:88:e0:c7:30:97: df:ac:66:d2:90:6b:c9:2f:03:02:72:39:07:90:bc: d1:91:51:8f:4f:2b:73:2e:52:bd:e3:61:80:2c:f3: f9:54:38:8a:d3:7b:e4:d0:66:e3:29:57:26:c2:b6: 16:40:d6:35:9f:73:da:08:29:be:da:bb:f0:8f:70: 60:24:96:e4:0d:d7:fb:2e:ed:6f:78:3d:e6:25:61: 3d:6d:e5:08:9b:73:7f:c7:91:c2:74:0e:44:39:c1: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:25:E0:AC:8C:0C:B9:B1:B5:1C:FA:8F:67:36:B7:FB:77:21:C0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e7aabf01-851c-3ef9-b334-10a9a4085206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:dd:14:86:ec:d8:dd:d3:e4:7e:08:14:25:01:4a:00:48: 3b:fe:28:82:e6:25:b1:9a:3b:b4:dd:6a:bb:21:07:2f:2a:29: 80:bf:f3:e9:d1:ca:9a:bc:52:7a:f4:b3:80:cd:2a:d3:21:82: 1e:65:ca:c4:08:67:3c:1c:38:17:a8:73:de:95:cc:3a:2d:e4: b7:45:d6:0b:4f:ea:5d:68:a7:3b:7c:9d:8f:56:17:1f:ff:e0: 73:00:17:d3:09:bf:a6:33:7b:86:6b:73:b8:cf:f1:ef:c9:df: c5:92:eb:f4:b4:38:47:04:c7:36:11:fa:37:e6:1a:58:29:6e: 24:1d:62:ec:eb:fb:6c:a5:fb:3f:5c:91:e8:18:6b:5b:84:60: 61:40:9e:1f:fe:37:cf:a7:8a:80:ab:94:37:45:34:cd:a4:5a: 0b:d4:e0:1a:46:d7:57:5c:2b:98:4b:0d:c6:ef:31:14:32:36: fc:50:ae:37:6a:f9:1e:74:1c:bc:bc:b4:5a:e9:e9:9c:50:e3: 8f:cb:f2:9b:65:ff:72:08:50:a5:82:7e:04:c0:4c:69:aa:4e: f4:41:54:78:f2:85:74:7f:37:0f:32:a1:12:ad:ac:ce:09:1d: 8d:93:75:69:67:68:87:1b:fa:ae:d0:db:6a:c6:b6:38:1e:03: d4:41:16:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgorwcEx9tuIq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2EyZjc0YjMtMGNiYS00ZjM2LTkxMzgtZWUyNWM3ZjE2OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO8qX95JzR+Jr1KthSysrcx+eNtvRG/3e9x6 X6upKRDAou4T+61NfKlLBdc5UiQU64Kmfk3aX7Gn00b0NnUOhgMDfgzSJ0tswVYw ySCIcKW7QeMbXvWgBN6CNWjWjBIzbhEQbjAmH3sOXk5kI7cJJKwaKXRo++Jc3ywN jKLSQeLyep7HQtbt9REAbwPqDsQYqjb4ftcP2AMzP6n3u59JiODHMJffrGbSkGvJ LwMCcjkHkLzRkVGPTytzLlK942GALPP5VDiK03vk0GbjKVcmwrYWQNY1n3PaCCm+ 2rvwj3BgJJbkDdf7Lu1veD3mJWE9beUIm3N/x5HCdA5EOcHuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYl4KyMDLmxtRz6j2c2t/t3IcBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTdhYWJmMDEtODUxYy0z ZWY5LWIzMzQtMTBhOWE0MDg1MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJonMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJ3RSG7Njd0+R+CBQlAUoASDv+KILmJbGaO7TdarshBy8qKYC/8+nR ypq8Unr0s4DNKtMhgh5lysQIZzwcOBeoc96VzDot5LdF1gtP6l1opzt8nY9WFx// 4HMAF9MJv6Yze4Zrc7jP8e/J38WS6/S0OEcExzYR+jfmGlgpbiQdYuzr+2yl+z9c kegYa1uEYGFAnh/+N8+nioCrlDdFNM2kWgvU4BpG11dcK5hLDcbvMRQyNvxQrjdq +R50HLy8tFrp6ZxQ44/L8ptl/3IIUKWCfgTATGmqTvRBVHjyhXR/Nw8yoRKtrM4J HY2TdWlnaIcb+q7Q22rGtjgeA9RBFtA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:00 2025 by rpki-client