$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa File: fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa (raw, json) Hash identifier: CkzwAHIdConkYOD3niEooQ7qDmELwv3GsbWVahjQZt8= Subject key identifier: AC:B9:81:42:24:1C:B4:E6:CE:11:56:5A:A2:80:CC:4F:72:D4:6F:78 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D5732F999C2465F1B080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d5:73:2f:99:9c:24:65:f1:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=5b72e526-45e5-4f28-8a92-5a9dff765d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:57:ad:0b:c5:19:d5:93:a0:46:ff:ba:1e: 9f:98:12:e4:a4:ed:1d:c0:df:34:ea:2d:b8:7c:4e: 8a:62:38:21:1e:90:89:1e:69:9c:19:43:e1:36:ac: 87:17:97:e8:a2:dd:e0:34:7d:5b:f0:f6:87:c6:80: b6:61:fb:ce:d6:d1:58:5a:68:e7:b5:19:fb:2f:42: 85:b5:1b:57:fc:37:54:e7:36:12:d7:b7:0a:79:b7: f9:9c:62:42:d3:d0:fb:01:1a:14:6d:9c:b7:4a:38: c1:fc:22:c5:45:d5:1b:85:51:04:f2:bc:51:72:76: ef:c6:8c:04:cc:19:3c:84:23:13:bd:30:40:4f:8a: 53:38:86:1c:bc:b3:06:29:94:92:e4:5c:af:21:87: 75:1b:28:cb:5d:ce:1d:b1:ab:3c:6e:11:b6:36:08: e1:4b:f8:15:72:56:00:32:ad:6d:ba:48:4f:b4:f2: bf:52:a3:63:d3:c8:c4:b8:4e:fc:e1:ec:6f:1c:52: 0f:13:db:2d:39:bd:48:70:bd:e5:66:ec:25:38:38: ed:cd:aa:35:cc:75:cc:12:62:d7:f8:cd:53:1e:94: 89:c1:e9:28:74:ea:d9:06:0f:fb:f3:50:54:34:44: f5:85:43:0e:e3:c7:d2:a5:8a:81:52:c6:9f:f6:56: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B9:81:42:24:1C:B4:E6:CE:11:56:5A:A2:80:CC:4F:72:D4:6F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9e:a9:6e:5f:b6:3e:26:4e:14:00:f9:32:2e:3b:88:29:9e: 4c:03:91:f6:e7:d7:09:85:4d:b8:fb:16:0f:af:25:71:22:fd: 14:f8:e1:b8:97:1d:1b:f2:39:8f:54:10:ae:e2:b6:ec:51:16: cf:47:c2:96:8f:dc:38:d6:34:f5:aa:f7:ad:b1:6a:39:ea:a8: f0:32:07:e4:8e:7f:7c:9a:e3:16:75:30:79:14:0b:3f:0f:fc: 19:71:51:22:3e:00:2a:4e:46:5c:4e:93:ea:a6:52:fc:39:8c: 15:c3:f8:64:54:24:e3:a9:f9:cd:b1:39:9a:08:5b:ae:79:ad: 1e:21:09:51:ac:a4:f4:5b:2d:a3:63:4e:5e:b8:d4:9a:c2:24: bb:e0:f8:5d:f8:3f:fe:1d:94:04:15:aa:34:dc:c0:df:c6:a4: da:72:aa:ee:52:ce:04:2d:c4:8b:01:b8:1c:e9:e2:25:c6:1f: 32:e6:68:4b:f7:bd:6f:d4:40:83:fc:a4:3e:46:91:b3:ba:b2: aa:ad:87:9b:cf:f9:3a:02:dd:d6:1d:ac:48:3a:9b:aa:e7:0f: 7e:21:64:9f:bf:23:19:37:67:5e:bc:f4:a0:60:a3:39:e1:1a: 44:30:96:2b:b6:50:e4:ab:5d:b8:e1:5c:ad:48:6b:16:dc:5a: 97:67:5f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dVzL5mcJGXxsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWI3MmU1MjYtNDVlNS00ZjI4LThhOTItNWE5ZGZmNzY1ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLRXrQvFGdWToEb/uh6fmBLkpO0dwN806i24 fE6KYjghHpCJHmmcGUPhNqyHF5foot3gNH1b8PaHxoC2YfvO1tFYWmjntRn7L0KF tRtX/DdU5zYS17cKebf5nGJC09D7ARoUbZy3SjjB/CLFRdUbhVEE8rxRcnbvxowE zBk8hCMTvTBAT4pTOIYcvLMGKZSS5FyvIYd1GyjLXc4dsas8bhG2NgjhS/gVclYA Mq1tukhPtPK/UqNj08jEuE784exvHFIPE9stOb1IcL3lZuwlODjtzao1zHXMEmLX +M1THpSJwekodOrZBg/781BUNET1hUMO48fSpYqBUsaf9lYDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy5gUIkHLTmzhFWWqKAzE9y1G94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmFiMGE4YWMtZTRiZi0z MmY4LWE3MjAtM2ZiYzQ1Njk3OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICeqW5ftj4mThQA+TIuO4gpnkwDkfbn1wmFTbj7Fg+vJXEi/RT44biX HRvyOY9UEK7ituxRFs9HwpaP3DjWNPWq962xajnqqPAyB+SOf3ya4xZ1MHkUCz8P /BlxUSI+ACpORlxOk+qmUvw5jBXD+GRUJOOp+c2xOZoIW655rR4hCVGspPRbLaNj Tl641JrCJLvg+F34P/4dlAQVqjTcwN/GpNpyqu5SzgQtxIsBuBzp4iXGHzLmaEv3 vW/UQIP8pD5GkbO6sqqth5vP+ToC3dYdrEg6m6rnD34hZJ+/Ixk3Z1689KBgoznh GkQwliu2UOSrXbjhXK1IaxbcWpdnX0w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:38 2025 by rpki-client