$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa File: fa782e23-6f23-364d-a991-e124d0e95e13.roa (raw, json) Hash identifier: UNHIbwfY7oZfgcPE1qEwo0n7FdaWuiwW73CouGELGE8= Subject key identifier: CB:39:31:75:8F:61:51:24:BC:7B:5C:75:A2:1A:30:6F:53:BE:F4:DC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FB88DEE4915D177A4040 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397222 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fb:88:de:e4:91:5d:17:7a:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=66669133-6e17-4eeb-bcc0-5e6ce5b9c340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:6b:0b:58:35:87:26:09:4d:86:6c:71:21: fe:da:6e:10:73:29:42:64:fd:bf:01:ae:33:34:a0: 4b:f0:71:fb:4e:5c:53:b9:6e:da:fd:ba:25:ec:0d: 0e:0c:e6:ac:32:71:5b:a9:65:49:61:d5:ba:2d:4c: 8a:23:e3:24:21:53:b0:c5:25:93:e7:12:13:10:4f: 87:00:b4:78:2b:19:67:b7:c3:18:27:8b:3f:43:54: 21:a0:e3:b6:2c:98:79:b2:7a:a3:da:ff:34:1d:3c: 74:fd:8c:0c:f0:a6:14:d4:d0:cb:e5:99:c8:6b:3f: d1:04:e3:8a:d8:ad:a3:d7:f0:42:d2:b6:d2:2f:e3: 75:ad:25:3c:d3:8f:cb:4d:a0:d8:4d:49:0b:ee:c0: 1c:a0:67:ca:c8:3b:ef:d4:74:c1:71:81:94:24:5d: 05:9c:e3:06:98:d1:49:5a:6c:f9:9b:fd:4e:8f:93: 30:39:8a:e0:11:5e:22:15:4d:9f:50:77:28:4a:7e: a7:da:bb:f4:85:54:80:96:98:b5:7d:fd:1e:cd:55: ee:bc:dc:fa:5c:50:a2:2d:3b:a2:09:c9:d7:37:5c: ee:93:d7:85:8a:74:97:18:f6:ff:be:e6:38:08:99: 4e:81:73:6d:d6:e9:7a:44:ac:d1:20:d4:44:4e:b6: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:39:31:75:8F:61:51:24:BC:7B:5C:75:A2:1A:30:6F:53:BE:F4:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa782e23-6f23-364d-a991-e124d0e95e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:19:26:d9:5a:f2:0d:e7:7d:c5:fe:20:08:0b:c7:04:68: 7d:e5:64:85:77:2d:d5:c3:84:3c:65:05:6f:b3:ea:60:9c:d9: ec:93:c4:11:84:67:72:51:83:b8:16:54:2a:8c:e3:f2:f8:e5: d7:59:f1:c6:34:de:d4:51:fd:2c:e2:ba:aa:23:b6:61:f9:d8: 0e:7e:18:78:64:42:b9:14:19:9f:d1:1a:7d:3c:7f:fd:7c:86: bc:e3:8f:c0:7e:91:53:d5:6d:24:de:cb:25:96:d4:25:c4:ff: 65:ae:4b:2e:d3:a1:a0:43:13:97:18:b0:49:a2:20:09:c9:f4: 7b:32:f5:96:e4:25:73:9c:10:60:8d:2f:95:41:b2:dd:63:37: 38:cc:16:5e:e7:92:ef:98:f0:11:ef:d1:d2:91:53:3d:f5:5f: 75:ca:31:0c:60:7e:52:eb:98:ac:bf:bc:e6:2d:78:64:dd:30: 24:c9:e5:50:78:af:96:2a:f5:d9:96:51:e3:39:3f:07:df:b8: f2:9f:41:2e:2f:f8:07:4a:d7:01:08:10:22:5d:13:6d:b1:9b: 84:72:21:bc:fd:00:8e:af:e7:e5:b5:b2:9a:22:99:a5:00:64: c3:c0:ee:2b:69:ab:19:3e:ad:9b:30:44:eb:10:84:c6:14:8b: 20:aa:d0:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fuI3uSRXRd6QEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjY2NjkxMzMtNmUxNy00ZWViLWJjYzAtNWU2Y2U1YjljMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9xrC1g1hyYJTYZscSH+2m4QcylCZP2/Aa4z NKBL8HH7TlxTuW7a/bol7A0ODOasMnFbqWVJYdW6LUyKI+MkIVOwxSWT5xITEE+H ALR4Kxlnt8MYJ4s/Q1QhoOO2LJh5snqj2v80HTx0/YwM8KYU1NDL5ZnIaz/RBOOK 2K2j1/BC0rbSL+N1rSU804/LTaDYTUkL7sAcoGfKyDvv1HTBcYGUJF0FnOMGmNFJ Wmz5m/1Oj5MwOYrgEV4iFU2fUHcoSn6n2rv0hVSAlpi1ff0ezVXuvNz6XFCiLTui CcnXN1zuk9eFinSXGPb/vuY4CJlOgXNt1ul6RKzRINRETrbk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs5MXWPYVEkvHtcdaIaMG9TvvTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmE3ODJlMjMtNmYyMy0z NjRkLWE5OTEtZTEyNGQwZTk1ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3XGSbZWvIN533F/iAIC8cEaH3lZIV3LdXDhDxlBW+z6mCc2eyTxBGE Z3JRg7gWVCqM4/L45ddZ8cY03tRR/SziuqojtmH52A5+GHhkQrkUGZ/RGn08f/18 hrzjj8B+kVPVbSTeyyWW1CXE/2WuSy7ToaBDE5cYsEmiIAnJ9Hsy9ZbkJXOcEGCN L5VBst1jNzjMFl7nku+Y8BHv0dKRUz31X3XKMQxgflLrmKy/vOYteGTdMCTJ5VB4 r5Yq9dmWUeM5PwffuPKfQS4v+AdK1wEIECJdE22xm4RyIbz9AI6v5+W1spoimaUA ZMPA7itpqxk+rZswROsQhMYUiyCq0L0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:16:22 2025 by rpki-client