$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa File: ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa (raw, json) Hash identifier: XG6AUDr63D8+Fko0ibRkhZLQs2CHY6X3e0TdA2OxgD4= Subject key identifier: 0F:0B:75:5F:5D:C0:2E:08:98:1F:B8:CB:76:06:05:F6:29:4C:20:37 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C99D26236DD0D08064F60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397222 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:99:d2:62:36:dd:0d:08:06:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=8e5a6765-2974-4447-97a5-b630ec559782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4e:6d:38:bf:55:74:43:ba:c3:60:86:7b:40: f0:10:77:3f:ee:6e:b5:f4:78:d7:86:2e:8c:09:a7: 41:09:1f:ce:6b:8f:8a:04:ce:92:b9:7f:b7:0f:36: f3:87:33:d5:05:4f:01:74:ef:0d:e2:f2:38:62:00: 1a:a3:1c:2c:6b:e6:2e:9c:53:65:d0:95:2a:53:95: 40:5e:77:59:74:b6:64:bf:c5:1e:2c:36:89:6a:87: ae:2c:aa:10:92:3c:f4:d2:c3:4a:75:62:b1:f4:57: fd:0c:f3:27:e3:3f:07:a4:74:1f:2b:ad:70:26:e4: 71:e8:0e:83:97:f8:86:e4:8c:2a:bb:bd:17:59:e0: f0:55:a9:9e:ad:58:87:14:85:7b:53:78:90:3e:fa: 85:65:3e:2f:56:3f:6f:e7:34:24:1d:f4:d7:0f:7c: 80:60:29:19:da:06:9b:aa:00:f5:bd:3e:bd:9d:40: 84:8e:da:1a:e4:fb:b1:93:ed:2c:29:8f:af:61:0e: 6b:0d:3b:ef:89:32:25:fb:c8:64:3b:b6:ab:35:b0: c1:6a:37:af:ac:a3:9d:f9:ea:a3:55:49:56:23:a8: 0d:14:49:53:57:11:02:ab:8c:0e:2b:94:c8:ec:06: d1:f4:f4:cd:be:93:39:97:15:b6:72:06:94:91:2e: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0B:75:5F:5D:C0:2E:08:98:1F:B8:CB:76:06:05:F6:29:4C:20:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ea9d8559-7dbe-38c4-a6b1-2b03e56585a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fb:f7:cf:4e:34:e8:bc:68:29:16:bf:7a:60:7e:91:c3:13: 64:8a:25:1f:85:81:5d:7d:ab:0a:8a:5c:56:8b:a7:65:c1:f3: 3a:d8:e7:94:13:80:0c:11:08:34:6f:13:0e:80:18:e1:64:89: c5:38:55:2e:01:35:7a:03:3d:ef:b1:22:b7:11:40:5c:fc:f2: 37:4e:cc:73:d1:51:86:af:b5:c4:c6:a7:57:df:db:88:31:df: ad:78:d9:c7:c3:bc:d0:49:9c:32:85:69:7c:f8:b1:0c:38:bb: 7b:80:9d:76:ee:bf:3f:50:50:3f:03:9d:f4:75:39:c8:89:42: 13:0e:4d:37:39:23:11:35:aa:e1:3d:cb:d2:34:8d:68:73:65: ca:46:e8:2d:b3:d8:57:cd:24:ba:5f:3b:27:fd:fb:0a:a6:c3: 3f:94:fb:4b:76:e3:54:23:61:ed:0e:42:9c:5f:43:f0:57:d4: 91:b5:e9:4f:0f:8d:33:a0:cc:5b:bd:b1:39:27:0f:15:85:8f: 20:bd:f2:22:58:2f:17:80:9e:a3:b2:56:30:2a:95:5b:01:ac: 23:68:1d:8c:43:49:03:17:ff:db:a4:30:66:22:5b:bb:d5:1a: 80:2f:d4:12:95:e0:3a:85:2b:13:5e:83:ba:e4:da:6b:77:14: 90:94:1a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJnSYjbdDQgGT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OGU1YTY3NjUtMjk3NC00NDQ3LTk3YTUtYjYzMGVjNTU5NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k5tOL9VdEO6w2CGe0DwEHc/7m619HjXhi6M CadBCR/Oa4+KBM6SuX+3DzbzhzPVBU8BdO8N4vI4YgAaoxwsa+YunFNl0JUqU5VA XndZdLZkv8UeLDaJaoeuLKoQkjz00sNKdWKx9Ff9DPMn4z8HpHQfK61wJuRx6A6D l/iG5Iwqu70XWeDwVamerViHFIV7U3iQPvqFZT4vVj9v5zQkHfTXD3yAYCkZ2gab qgD1vT69nUCEjtoa5Puxk+0sKY+vYQ5rDTvviTIl+8hkO7arNbDBajevrKOd+eqj VUlWI6gNFElTVxECq4wOK5TI7AbR9PTNvpM5lxW2cgaUkS78twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8LdV9dwC4ImB+4y3YGBfYpTCA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWE5ZDg1NTktN2RiZS0z OGM0LWE2YjEtMmIwM2U1NjU4NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP7989ONOi8aCkWv3pgfpHDE2SKJR+FgV19qwqKXFaLp2XB8zrY55QT gAwRCDRvEw6AGOFkicU4VS4BNXoDPe+xIrcRQFz88jdOzHPRUYavtcTGp1ff24gx 36142cfDvNBJnDKFaXz4sQw4u3uAnXbuvz9QUD8DnfR1OciJQhMOTTc5IxE1quE9 y9I0jWhzZcpG6C2z2FfNJLpfOyf9+wqmwz+U+0t241QjYe0OQpxfQ/BX1JG16U8P jTOgzFu9sTknDxWFjyC98iJYLxeAnqOyVjAqlVsBrCNoHYxDSQMX/9ukMGYiW7vV GoAv1BKV4DqFKxNeg7rk2mt3FJCUGqM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:26 2025 by rpki-client