$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d844d9-49df-380c-97c3-7a81945098c8.roa File: f3d844d9-49df-380c-97c3-7a81945098c8.roa (raw, json) Hash identifier: J8l41VLjx4RYEIrjyeKYNHTmgc5ah/MLilyRcNdcSRI= Subject key identifier: B5:A0:59:82:AC:05:5C:EA:39:A3:DA:14:E4:73:D5:01:5A:EB:C8:2A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B7F520AF115DA99D4E6D12400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d844d9-49df-380c-97c3-7a81945098c8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 12008 IP address blocks: 156.154.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0a:f1:15:da:99:d4:e6:d1:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=dab512fc-a350-4580-9580-917aa1d410be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:db:21:32:a9:f9:2c:fd:2f:f8:c2:cd:15: 22:b8:be:5f:5a:62:21:d8:3d:bb:27:7a:13:46:a3: c5:0c:8e:4b:e2:3d:5f:21:9c:8e:4e:11:c4:97:96: f5:e8:16:35:67:e4:11:9c:3c:30:66:71:c5:3b:35: 10:b7:c0:9c:43:5c:91:30:68:d1:a6:c9:09:e7:f3: 36:c4:15:1b:ef:15:a6:ba:71:eb:a3:7b:2f:2e:a6: 8c:ac:e5:a9:be:7f:b1:df:5c:cd:8d:6a:f1:82:05: 08:44:7d:d1:b9:5f:65:fd:97:86:f6:ff:09:f6:26: 15:0a:fd:73:d7:37:f5:b7:8e:ed:ca:e2:03:ed:1d: 6f:bc:6e:b0:cb:8e:02:0c:4e:11:9a:d4:72:80:15: d9:07:ec:58:59:23:9f:8e:40:ce:3a:b6:70:b2:7c: 4c:11:0e:b6:a7:b0:55:f4:19:fe:47:c3:71:4e:81: ce:1f:d0:cd:d8:13:02:3a:41:6b:35:7b:ba:56:69: 86:03:46:29:a8:d1:8f:03:36:ac:1d:01:03:4a:37: dd:69:0b:46:dd:10:73:1a:eb:b9:25:e6:da:2a:fc: 0a:e8:6c:1b:f0:5b:3b:61:16:38:c0:6a:21:23:2d: 33:bc:fc:40:d3:03:42:ca:3b:20:19:b8:79:08:b1: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:59:82:AC:05:5C:EA:39:A3:DA:14:E4:73:D5:01:5A:EB:C8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f3d844d9-49df-380c-97c3-7a81945098c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:89:1c:90:cd:fe:8f:b8:f2:24:c3:55:23:76:35:8b:f9:c4: ea:4a:73:24:9d:71:71:0f:1e:97:39:50:e5:74:ef:dd:49:34: be:3c:75:d3:45:2a:37:96:99:98:84:63:57:61:c6:f5:ad:b9: 6c:e3:af:b8:99:95:2a:a0:fc:55:63:b8:72:f8:80:1b:25:dd: ac:5c:57:f3:98:05:3c:fa:45:32:e3:9f:b1:dc:1c:fc:dd:95: 4b:86:4c:f7:99:4b:79:89:f0:83:8f:ea:38:5f:43:01:ac:0f: c0:03:ba:c8:bc:7a:e8:b0:f5:a4:7b:46:aa:6d:fc:23:34:45: 44:61:4d:e0:a2:a9:2d:83:8b:51:34:6a:3a:20:ea:97:77:37: 91:04:ef:b1:56:e0:c9:7c:75:89:33:51:fa:59:6c:44:2a:54: 04:d6:61:fc:30:5e:d1:93:0b:72:e0:04:64:63:6a:05:3b:a4: 9e:23:eb:73:c7:c2:fd:14:73:9d:0e:ac:f1:d0:58:08:4f:b0: 6f:7d:92:ef:de:58:4d:66:02:73:93:76:b7:e8:4b:ec:3f:fe: dd:81:bb:f6:3d:04:f8:8a:72:61:2b:b6:6b:aa:65:76:ad:b9: 39:76:1d:8c:ad:71:43:8a:72:4d:e2:13:22:18:69:5e:f0:61: 90:15:9c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgrxFdqZ1ObRJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGFiNTEyZmMtYTM1MC00NTgwLTk1ODAtOTE3YWExZDQxMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg3bITKp+Sz9L/jCzRUiuL5fWmIh2D27J3oT RqPFDI5L4j1fIZyOThHEl5b16BY1Z+QRnDwwZnHFOzUQt8CcQ1yRMGjRpskJ5/M2 xBUb7xWmunHro3svLqaMrOWpvn+x31zNjWrxggUIRH3RuV9l/ZeG9v8J9iYVCv1z 1zf1t47tyuID7R1vvG6wy44CDE4RmtRygBXZB+xYWSOfjkDOOrZwsnxMEQ62p7BV 9Bn+R8NxToHOH9DN2BMCOkFrNXu6VmmGA0YpqNGPAzasHQEDSjfdaQtG3RBzGuu5 JebaKvwK6Gwb8Fs7YRY4wGohIy0zvPxA0wNCyjsgGbh5CLGSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWgWYKsBVzqOaPaFORz1QFa68gqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjNkODQ0ZDktNDlkZi0z ODBjLTk3YzMtN2E4MTk0NTA5OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6JHJDN/o+48iTDVSN2NYv5xOpKcySdcXEPHpc5UOV0791JNL48ddNF KjeWmZiEY1dhxvWtuWzjr7iZlSqg/FVjuHL4gBsl3axcV/OYBTz6RTLjn7HcHPzd lUuGTPeZS3mJ8IOP6jhfQwGsD8ADusi8euiw9aR7Rqpt/CM0RURhTeCiqS2Di1E0 ajog6pd3N5EE77FW4Ml8dYkzUfpZbEQqVATWYfwwXtGTC3LgBGRjagU7pJ4j63PH wv0Uc50OrPHQWAhPsG99ku/eWE1mAnOTdrfoS+w//t2Bu/Y9BPiKcmErtmuqZXat uTl2HYytcUOKck3iEyIYaV7wYZAVnPs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:42 2025 by rpki-client