$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f458e810-d974-3217-9c09-c9dc03ef652e.roa File: f458e810-d974-3217-9c09-c9dc03ef652e.roa (raw, json) Hash identifier: F5fI4m8lMQV8/OJgJLcFcN19WD5jX8wsiYnHYWxHwTY= Subject key identifier: C3:4F:DA:65:50:98:91:4A:F3:BB:9E:AF:55:B8:4E:4D:66:B7:21:E6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B7F525FB07FB2B881DB2690C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f458e810-d974-3217-9c09-c9dc03ef652e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 12008 IP address blocks: 156.154.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5f:b0:7f:b2:b8:81:db:26:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=491bb9b3-1a46-4708-988f-b05030b778ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:05:2f:20:40:54:9e:62:16:70:aa:bb:89: a0:90:13:53:ef:9c:f4:fa:bd:67:a4:41:65:cb:02: fc:f2:86:30:8b:d3:c6:28:e9:46:c2:e7:95:83:8b: 46:45:3a:49:f9:37:ac:c4:f1:03:dd:53:bf:78:66: 56:62:65:f8:e9:ac:a5:01:4e:87:0e:7a:50:21:5c: a0:a5:4e:54:d2:1e:68:d6:7e:b9:b4:24:ea:76:ad: a4:02:0d:a2:fa:7e:28:23:d5:d6:b2:d4:6e:8c:ee: 72:93:64:be:5a:89:ea:be:c2:7b:de:26:e4:80:84: 96:8f:8c:03:0f:e9:95:28:46:65:f0:61:e5:b0:95: 03:ef:15:2d:ee:44:98:61:31:bb:64:74:ae:b3:cc: 6c:ac:b3:5f:8a:73:58:73:7a:08:a5:75:5f:e0:2c: eb:d9:20:bf:0e:f0:55:07:b9:f1:6c:e0:f3:0d:f6: eb:58:9c:b8:95:95:d4:c4:19:09:b4:1f:fc:79:48: fa:d5:15:6b:df:b0:75:1e:c7:10:37:04:35:00:ed: da:f1:1f:09:1a:e5:b6:cb:fe:6b:c4:f5:ed:7f:2d: 65:92:f9:61:e4:84:1c:64:42:20:8f:7a:e1:dd:cf: f2:99:14:f9:0a:f1:2e:50:79:b5:bb:40:59:5b:22: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4F:DA:65:50:98:91:4A:F3:BB:9E:AF:55:B8:4E:4D:66:B7:21:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f458e810-d974-3217-9c09-c9dc03ef652e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0b:79:cf:54:d4:31:09:2f:f6:5d:01:14:7a:4f:cf:76:9e: 7d:a9:bf:e0:ba:67:4f:64:90:b8:3c:42:1f:2a:26:f2:ee:8f: 86:89:10:19:57:5b:42:7f:7c:41:ed:3b:b4:47:17:e8:cc:2e: 29:01:dc:20:8c:fa:02:cf:6d:f2:f4:10:7c:0f:fb:07:e4:e6: 8a:ab:e6:2f:56:66:39:9e:a5:b8:b4:31:50:a2:f1:45:be:a9: dd:04:c0:1f:be:ef:1b:3d:66:3a:0d:af:8e:8f:15:e0:26:62: 64:5d:f2:80:1d:dc:fc:ad:8e:02:44:a3:bd:42:4d:de:57:aa: 50:45:e2:eb:aa:05:e9:98:62:2c:ba:c9:ff:35:7f:d7:9d:9c: 7d:56:27:2d:12:b2:9d:19:04:6b:47:6b:ec:dc:49:2c:8b:48: e6:fb:bf:bf:83:1b:fe:4c:a4:cc:68:02:af:6d:ab:4a:f7:11: 55:05:a6:e0:3b:d3:6a:50:f5:44:8f:90:90:09:55:63:b2:60: d2:8b:68:4d:25:ab:bb:a4:ec:86:07:2c:56:28:e9:bd:bf:6b: 32:d1:19:7d:b7:0d:60:31:a2:c8:fd:15:b1:fa:92:dc:01:d9: 3a:ea:01:a0:60:a8:8e:ad:fc:bd:58:8d:ed:60:41:e0:76:0f: 81:da:91:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul+wf7K4gdsmkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDkxYmI5YjMtMWE0Ni00NzA4LTk4OGYtYjA1MDMwYjc3OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8MFLyBAVJ5iFnCqu4mgkBNT75z0+r1npEFl ywL88oYwi9PGKOlGwueVg4tGRTpJ+TesxPED3VO/eGZWYmX46aylAU6HDnpQIVyg pU5U0h5o1n65tCTqdq2kAg2i+n4oI9XWstRujO5yk2S+WonqvsJ73ibkgISWj4wD D+mVKEZl8GHlsJUD7xUt7kSYYTG7ZHSus8xsrLNfinNYc3oIpXVf4Czr2SC/DvBV B7nxbODzDfbrWJy4lZXUxBkJtB/8eUj61RVr37B1HscQNwQ1AO3a8R8JGuW2y/5r xPXtfy1lkvlh5IQcZEIgj3rh3c/ymRT5CvEuUHm1u0BZWyI36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNP2mVQmJFK87uer1W4Tk1mtyHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjQ1OGU4MTAtZDk3NC0z MjE3LTljMDktYzlkYzAzZWY2NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgLec9U1DEJL/ZdARR6T892nn2pv+C6Z09kkLg8Qh8qJvLuj4aJEBlX W0J/fEHtO7RHF+jMLikB3CCM+gLPbfL0EHwP+wfk5oqr5i9WZjmepbi0MVCi8UW+ qd0EwB++7xs9ZjoNr46PFeAmYmRd8oAd3PytjgJEo71CTd5XqlBF4uuqBemYYiy6 yf81f9ednH1WJy0Ssp0ZBGtHa+zcSSyLSOb7v7+DG/5MpMxoAq9tq0r3EVUFpuA7 02pQ9USPkJAJVWOyYNKLaE0lq7uk7IYHLFYo6b2/azLRGX23DWAxosj9FbH6ktwB 2TrqAaBgqI6t/L1Yje1gQeB2D4HakSY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:08 2025 by rpki-client