$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa File: f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa (raw, json) Hash identifier: 0R2U+/vkGu+EhH5YHG+m6VDsdKbh9O31k5UofKkZmrI= Subject key identifier: 20:34:3B:FE:35:18:A3:F2:97:00:1C:1A:AF:30:57:11:82:83:62:19 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CAB961BBE3D75C008B900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:ab:96:1b:be:3d:75:c0:08:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=28541ef2-9bc0-4673-803d-426409b3ba7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:0e:69:13:10:24:75:4b:18:d2:d3:bf:50: d3:11:36:94:bc:74:b3:a2:0f:e9:bc:84:cb:35:fe: 6b:d8:f9:13:09:8a:ab:a6:e0:ba:f4:58:9c:e1:06: cf:e9:a0:17:0f:79:4a:64:0d:be:d9:4f:53:56:dc: 15:14:f8:6c:9d:c9:ac:72:0c:99:b8:d9:e7:bc:17: 4a:56:75:3b:31:a4:f2:d4:d4:c9:d3:ed:0c:6d:09: 05:2e:2c:a8:cc:79:c6:90:46:b5:21:42:46:07:f2: 03:87:32:5e:aa:d4:d0:1c:ed:aa:98:a3:e6:17:1e: 28:ae:d4:8b:4e:15:0e:b5:4c:33:e2:0a:c9:c3:ef: 1b:76:a2:b9:ba:66:6f:4f:49:29:ef:a7:40:b0:4f: a4:c6:d0:2d:32:98:ce:70:58:2b:94:14:30:26:cf: b9:df:62:d2:b6:e1:db:f5:a9:c3:e2:f4:d2:31:65: d4:4c:bf:52:19:7c:b7:d5:8e:5e:47:d6:b0:44:9f: da:ce:f2:55:98:bb:78:2e:97:ed:c3:ce:ba:e4:c6: 82:06:d8:43:e9:c6:af:a2:9b:18:e6:72:5a:f6:ca: e1:7e:15:19:ee:cf:a5:9c:7b:75:ae:e0:48:e9:59: 24:55:24:83:8c:40:13:84:ee:1a:63:3a:2b:96:3a: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:3B:FE:35:18:A3:F2:97:00:1C:1A:AF:30:57:11:82:83:62:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8f421e2-a7c0-32b6-b18a-49a4c2a32faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:81:c7:7f:97:fc:fa:48:3b:03:82:2b:85:d4:ee:7d:15:a1: 98:8e:21:88:e0:31:69:bf:b2:3c:71:30:a9:ea:ad:4d:b5:84: a9:a1:df:92:67:25:dd:fa:38:18:d4:56:0f:01:52:d7:5d:ad: a5:81:f9:6c:24:ea:52:54:d5:3d:6e:0b:2c:58:eb:9c:b9:b4: ce:a8:75:d2:41:7a:cd:7a:e5:cf:8d:52:b6:2d:90:2b:90:d5: 9c:d5:ee:03:d1:67:fa:b1:c7:bb:94:95:31:6e:f3:03:e5:b1: 3b:f1:f9:62:44:cc:60:98:0c:0e:01:f6:3d:57:0a:6d:fd:6c: 3c:d5:2f:a2:54:2c:26:7c:6d:6b:fd:21:e0:25:ce:c6:a6:49: 73:6d:fb:6e:15:bd:ba:8d:81:fe:6e:31:93:74:77:3f:fb:d8: d8:f8:1b:c9:6d:32:cc:16:ce:b9:34:e7:d2:d4:a0:17:2f:93: d0:31:28:96:49:bc:45:fa:3f:7d:57:07:44:34:aa:a7:32:d5: 63:27:2d:f5:42:bd:66:37:76:42:ee:c9:af:34:a4:09:ab:5d: 6b:f3:6f:d9:c6:40:2a:f2:63:b2:aa:a5:6a:7a:9a:d4:40:b3: 55:ed:b4:9d:ff:f9:cf:33:fc:4f:2c:cd:f1:e9:13:11:5e:b2: 7d:55:40:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKuWG749dcAIuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk Mjg1NDFlZjItOWJjMC00NjczLTgwM2QtNDI2NDA5YjNiYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGoOaRMQJHVLGNLTv1DTETaUvHSzog/pvITL Nf5r2PkTCYqrpuC69Fic4QbP6aAXD3lKZA2+2U9TVtwVFPhsncmscgyZuNnnvBdK VnU7MaTy1NTJ0+0MbQkFLiyozHnGkEa1IUJGB/IDhzJeqtTQHO2qmKPmFx4ortSL ThUOtUwz4grJw+8bdqK5umZvT0kp76dAsE+kxtAtMpjOcFgrlBQwJs+532LStuHb 9anD4vTSMWXUTL9SGXy31Y5eR9awRJ/azvJVmLt4Lpftw8665MaCBthD6cavopsY 5nJa9srhfhUZ7s+lnHt1ruBI6VkkVSSDjEAThO4aYzorljo3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA0O/41GKPylwAcGq8wVxGCg2IZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjhmNDIxZTItYTdjMC0z MmI2LWIxOGEtNDlhNGMyYTMyZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqBx3+X/PpIOwOCK4XU7n0VoZiOIYjgMWm/sjxxMKnqrU21hKmh35Jn Jd36OBjUVg8BUtddraWB+Wwk6lJU1T1uCyxY65y5tM6oddJBes165c+NUrYtkCuQ 1ZzV7gPRZ/qxx7uUlTFu8wPlsTvx+WJEzGCYDA4B9j1XCm39bDzVL6JULCZ8bWv9 IeAlzsamSXNt+24VvbqNgf5uMZN0dz/72Nj4G8ltMswWzrk059LUoBcvk9AxKJZJ vEX6P31XB0Q0qqcy1WMnLfVCvWY3dkLuya80pAmrXWvzb9nGQCryY7KqpWp6mtRA s1XttJ3/+c8z/E8szfHpExFesn1VQOA= -----END CERTIFICATE-----Generated at Sun Oct 19 23:43:52 2025 by rpki-client