$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7a9a205-f227-33e2-8a4a-58a3f73a1ae6.roa File: f7a9a205-f227-33e2-8a4a-58a3f73a1ae6.roa (raw, json) Hash identifier: w13hk7vHwG2D1kzuTp7Jy40CkSem2DeaOxfo2/H2QB0= Subject key identifier: D9:1B:9B:E2:05:5B:DB:1B:1B:82:BA:C7:89:50:0F:9F:C6:CA:0A:08 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D3914412F4DB31B6F680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7a9a205-f227-33e2-8a4a-58a3f73a1ae6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d3:91:44:12:f4:db:31:b6:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b21bbf13-2f8b-4570-bfbc-7c668c64413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:e6:92:a1:d7:72:88:68:ed:75:7b:94:46: cf:f9:6d:0c:36:16:e7:a6:56:ab:01:e6:c1:91:65: f3:09:fa:bf:c1:4f:e3:18:86:4a:53:b9:cb:04:21: 29:c8:71:7e:90:7a:ef:6f:7b:fd:45:07:8b:d9:c4: 72:8e:45:e5:82:24:6c:0f:a3:b6:d3:8e:58:87:74: 5a:e3:46:53:68:a6:00:ee:01:5e:ae:da:a4:ee:7d: e4:40:d7:42:d4:ed:3f:e2:ea:5e:df:4a:61:44:af: c8:5c:dc:7a:3a:3e:06:91:9c:8b:61:89:02:8e:b3: e1:51:06:49:34:3c:c8:81:28:8e:2a:58:0b:0a:69: a6:48:6d:cf:09:93:ef:43:ca:5b:fd:c0:3f:d2:b2: 48:ed:0d:fa:b0:42:ff:c4:cd:16:af:7a:f3:59:81: 01:6d:27:0f:de:a6:70:10:c8:70:0b:09:f3:de:2c: bb:12:45:d7:b3:2c:37:43:a4:d1:ac:30:0c:9f:74: 3d:c4:18:aa:88:3f:0c:2b:26:54:b4:46:cf:b6:57: 3c:6a:c5:b6:34:0f:aa:19:8e:90:18:4d:7e:02:bf: 45:09:b2:90:91:79:ef:4e:9d:d7:62:c9:01:a9:47: 25:88:96:a8:e5:6e:d2:c9:ec:64:d9:93:c2:21:e7: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1B:9B:E2:05:5B:DB:1B:1B:82:BA:C7:89:50:0F:9F:C6:CA:0A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7a9a205-f227-33e2-8a4a-58a3f73a1ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:12:71:fa:36:47:fe:ca:72:e0:1a:3b:e1:b7:13:8c:52:19: 2a:75:93:9b:89:60:83:b2:c0:62:68:a6:cb:09:ac:61:11:ea: 7f:dd:f3:ca:a2:0f:f6:66:6d:00:07:bb:e8:a0:66:27:18:80: fb:ac:cc:3f:9f:81:af:49:6d:06:07:40:3f:39:0c:38:d1:d8: 41:4e:5d:9e:ef:3f:e6:e1:ef:81:7e:ee:7c:4c:e7:dc:ef:c0: 04:1d:59:31:8a:46:6e:64:4f:06:05:9e:b4:57:36:59:b3:88: e4:c1:a7:16:e0:42:15:65:d2:d3:a7:48:59:71:b9:28:5f:ad: a1:7f:4b:cb:15:38:d5:97:36:b4:c2:b7:28:a5:35:f3:2d:a7: dd:49:4f:21:c5:3c:2c:bc:80:3c:c2:87:f1:0e:65:88:87:2d: 1f:52:81:31:fa:c5:e0:48:57:c9:e6:e9:1e:6a:53:ce:08:f2: 72:aa:7c:74:8b:ef:16:79:a4:0a:82:11:c1:22:44:ea:e5:fa: dd:c0:7b:ae:2b:b7:46:9e:05:cb:8a:5f:5b:f8:98:4b:55:95: 3d:48:48:dd:0e:44:f3:10:d1:12:da:bc:22:e2:95:3e:18:6f: df:11:cb:17:ab:b6:00:83:24:8a:ec:2d:28:f0:a4:b1:41:a6: 3a:1a:ff:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dORRBL02zG29oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjIxYmJmMTMtMmY4Yi00NTcwLWJmYmMtN2M2NjhjNjQ0MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8rmkqHXcoho7XV7lEbP+W0MNhbnplarAebB kWXzCfq/wU/jGIZKU7nLBCEpyHF+kHrvb3v9RQeL2cRyjkXlgiRsD6O2045Yh3Ra 40ZTaKYA7gFertqk7n3kQNdC1O0/4upe30phRK/IXNx6Oj4GkZyLYYkCjrPhUQZJ NDzIgSiOKlgLCmmmSG3PCZPvQ8pb/cA/0rJI7Q36sEL/xM0Wr3rzWYEBbScP3qZw EMhwCwnz3iy7EkXXsyw3Q6TRrDAMn3Q9xBiqiD8MKyZUtEbPtlc8asW2NA+qGY6Q GE1+Ar9FCbKQkXnvTp3XYskBqUcliJao5W7Syexk2ZPCIeffDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkbm+IFW9sbG4K6x4lQD5/GygoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjdhOWEyMDUtZjIyNy0z M2UyLThhNGEtNThhM2Y3M2ExYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoScfo2R/7KcuAaO+G3E4xSGSp1k5uJYIOywGJopssJrGER6n/d88qi D/ZmbQAHu+igZicYgPuszD+fga9JbQYHQD85DDjR2EFOXZ7vP+bh74F+7nxM59zv wAQdWTGKRm5kTwYFnrRXNlmziOTBpxbgQhVl0tOnSFlxuShfraF/S8sVONWXNrTC tyilNfMtp91JTyHFPCy8gDzCh/EOZYiHLR9SgTH6xeBIV8nm6R5qU84I8nKqfHSL 7xZ5pAqCEcEiROrl+t3Ae64rt0aeBcuKX1v4mEtVlT1ISN0ORPMQ0RLavCLilT4Y b98RyxertgCDJIrsLSjwpLFBpjoa/4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:55 2025 by rpki-client