$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa File: f976ea62-be8d-313b-bb7f-afe7753dffd0.roa (raw, json) Hash identifier: cPbgHbidsQdC2ps191u14ohPqmW5kn5GE4tWNqG+DeI= Subject key identifier: CE:8E:A5:FE:BF:4B:CE:F5:52:28:7D:31:D6:17:EC:D9:B9:7F:45:2F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F4B97E9BC4B63C7D4000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f4:b9:7e:9b:c4:b6:3c:7d:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e53f4ffa-e976-4b59-9727-f2e462a6cad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:44:57:26:9d:ba:67:ae:77:b6:b9:5a:b1: 03:e0:50:5b:ec:18:10:35:62:8b:f0:ab:54:00:91: 23:eb:ad:95:a6:91:3c:cd:af:00:77:ab:38:e7:72: ee:82:b8:28:e6:48:37:bb:e9:a8:08:e3:1b:d3:59: 1e:e8:de:81:aa:f2:7f:7b:87:8c:71:ca:af:e7:1b: b5:55:fe:ac:9c:ff:c7:9f:35:77:9e:b4:a9:6b:e8: ec:3f:5a:ca:a3:6c:d3:b6:73:2f:a2:37:66:b9:ff: 6f:5d:22:7f:be:aa:94:b0:87:81:18:38:31:a0:35: ff:de:06:2d:5c:1f:4d:5a:e3:f4:15:7d:94:f6:98: 07:2e:a0:04:e5:39:df:ee:d9:23:a2:f6:90:23:61: 5a:73:52:dd:61:16:4b:a7:8b:b0:82:56:d2:07:14: 9e:3a:9b:a7:cb:ee:73:ac:89:06:70:f7:bc:f8:77: 39:3a:46:86:a7:e7:9f:5c:47:db:a7:ce:07:d8:bc: a3:a9:a6:26:bf:22:3b:da:c6:2d:8c:b6:8f:ec:09: c7:34:2c:23:17:8a:61:d9:c0:0f:da:15:fe:11:23: a0:c5:b5:0d:5e:04:db:36:bb:ca:90:50:08:37:8a: 98:76:67:65:0e:a6:05:b4:d2:9d:97:20:5c:ec:9b: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:A5:FE:BF:4B:CE:F5:52:28:7D:31:D6:17:EC:D9:B9:7F:45:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f976ea62-be8d-313b-bb7f-afe7753dffd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:04:be:b9:18:92:bc:7b:aa:f4:ce:e5:d8:c7:f1:4d:2c:80: 2b:31:ff:7a:f1:f8:bd:d0:44:67:2c:1c:4f:cb:62:a5:35:05: 0f:c8:23:41:1c:88:a9:d8:bd:7d:41:6e:00:08:c0:5d:d6:c8: e4:93:8d:51:4d:6a:26:06:b5:8a:84:3e:0a:e9:11:34:40:43: bd:40:88:3d:45:4a:5e:b2:eb:89:64:cf:62:d6:a1:c7:8c:ee: e7:f6:69:04:89:75:d2:cd:f0:16:56:23:18:04:1c:df:86:a5: 3c:1b:17:11:e3:47:a1:6e:8c:eb:a4:3a:4a:21:0d:fb:ac:a7: 7a:c1:4b:a2:64:b9:80:26:e1:e8:50:2a:c6:5d:57:06:83:f4: 26:d0:53:0a:f2:90:36:b9:91:a2:15:4c:91:67:aa:ad:5f:65: ff:64:e7:56:28:cf:08:5c:90:af:d6:67:12:c0:8d:49:da:b2: 43:24:ca:a7:de:81:06:62:ba:6f:f7:c3:23:89:4b:84:88:5c: 51:88:c8:7f:5e:40:01:d2:12:ad:47:e5:b2:a6:f4:2b:fb:06: 6f:02:d5:1a:7d:d0:39:be:1a:02:22:9c:10:1d:82:c9:16:99: 4b:7a:35:58:5b:65:56:b9:35:71:b1:bc:f6:fc:41:79:09:81: bb:d7:4f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fS5fpvEtjx9QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzZjRmZmEtZTk3Ni00YjU5LTk3MjctZjJlNDYyYTZjYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdZEVyadumeud7a5WrED4FBb7BgQNWKL8KtU AJEj662VppE8za8Ad6s453Lugrgo5kg3u+moCOMb01ke6N6BqvJ/e4eMccqv5xu1 Vf6snP/HnzV3nrSpa+jsP1rKo2zTtnMvojdmuf9vXSJ/vqqUsIeBGDgxoDX/3gYt XB9NWuP0FX2U9pgHLqAE5Tnf7tkjovaQI2Fac1LdYRZLp4uwglbSBxSeOpuny+5z rIkGcPe8+Hc5OkaGp+efXEfbp84H2LyjqaYmvyI72sYtjLaP7AnHNCwjF4ph2cAP 2hX+ESOgxbUNXgTbNrvKkFAIN4qYdmdlDqYFtNKdlyBc7JvMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6Opf6/S871Uih9MdYX7Nm5f0UvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjk3NmVhNjItYmU4ZC0z MTNiLWJiN2YtYWZlNzc1M2RmZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0EvrkYkrx7qvTO5djH8U0sgCsx/3rx+L3QRGcsHE/LYqU1BQ/II0Ec iKnYvX1BbgAIwF3WyOSTjVFNaiYGtYqEPgrpETRAQ71AiD1FSl6y64lkz2LWoceM 7uf2aQSJddLN8BZWIxgEHN+GpTwbFxHjR6FujOukOkohDfusp3rBS6JkuYAm4ehQ KsZdVwaD9CbQUwrykDa5kaIVTJFnqq1fZf9k51YozwhckK/WZxLAjUnaskMkyqfe gQZium/3wyOJS4SIXFGIyH9eQAHSEq1H5bKm9Cv7Bm8C1Rp90Dm+GgIinBAdgskW mUt6NVhbZVa5NXGxvPb8QXkJgbvXTyo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:34 2025 by rpki-client