$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa File: fcec44ab-958b-39e8-89de-d1a81273e2f3.roa (raw, json) Hash identifier: +KWGYAQgfNfHu7S4pt1JHRe3Gx7t3/oAmZ29Itergj8= Subject key identifier: 44:EA:F3:19:68:21:CE:D1:71:99:96:E9:BD:37:94:DC:AE:7E:13:44 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B76F240D797136E047F28EE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 12008 IP address blocks: 156.154.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:40:d7:97:13:6e:04:7f:28:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=67132fb9-310c-4a9a-a6b2-6ef745a1f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:fc:a0:92:7c:3d:43:2a:40:d6:72:49:b3: 5e:ab:46:0d:07:21:49:e0:99:96:9f:90:f0:8b:22: 34:ef:57:8b:a2:de:9f:ff:08:b1:9a:fd:a9:a8:3f: bb:2d:c9:84:b2:78:d5:e9:e8:f1:cf:74:34:2e:5f: c2:9a:65:8c:e9:16:11:7b:89:65:dc:bb:0a:ea:65: 45:e0:01:34:cd:20:78:49:ca:0e:aa:de:bd:30:17: a7:7f:1a:07:ae:a7:75:54:f7:19:6c:09:fa:00:dd: a4:0b:81:97:40:32:7e:68:45:0b:27:88:2d:e0:d6: 1f:5a:c3:a4:30:b7:bb:52:cb:23:f4:de:bb:7b:a1: f6:14:d3:a5:de:01:44:69:bd:d1:06:9f:22:cf:f9: d6:a7:6d:8a:7e:97:10:d4:49:9a:6a:6a:f9:e1:16: 1a:33:d5:f9:ef:e0:93:21:8f:d2:e5:68:2c:35:73: 76:1d:fa:ea:22:16:10:c5:fa:32:d9:68:1f:25:60: 1a:1b:cc:66:87:41:e4:c6:2c:cb:c5:6e:9b:0d:78: 59:5d:d2:51:79:3f:d4:e3:1e:de:22:9a:0c:62:5c: f8:c4:7a:cf:03:06:31:21:12:e3:15:71:6a:cf:4d: 80:5a:be:7c:62:bc:b6:70:04:c7:16:e9:9a:0f:74: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EA:F3:19:68:21:CE:D1:71:99:96:E9:BD:37:94:DC:AE:7E:13:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcec44ab-958b-39e8-89de-d1a81273e2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0a:d4:55:eb:dd:ff:10:2c:a6:83:de:bd:37:61:c4:46:c3: 37:cc:c4:e5:6b:25:e6:51:23:fa:1a:9a:1f:9e:b8:de:78:61: 3f:eb:31:44:ad:3e:a4:a6:22:a5:80:6e:d8:e9:59:fc:58:1a: 13:2c:52:20:84:06:7f:1a:cd:2c:e2:00:0e:64:d7:b7:25:0f: 42:6f:60:ec:13:5b:c7:59:f4:15:13:61:d1:c9:38:04:52:f8: b6:3f:96:c3:40:d5:56:95:4f:11:b8:a7:6b:fd:4b:39:bc:71: 7f:9d:35:49:9b:ae:8d:34:e7:8a:96:f9:85:62:1d:26:d0:92: bd:0a:60:00:0a:9b:bb:ab:b1:b3:43:45:11:d0:6b:94:12:74: 30:68:0a:ee:07:fd:31:2d:c1:df:ff:d9:bc:85:f4:2c:e0:48: d1:76:25:d7:59:ed:60:28:30:a3:ee:a7:21:ad:56:73:d9:39: 32:36:57:bc:9d:71:38:38:53:b8:83:c6:fd:25:e7:50:34:f9: 8d:b3:df:04:69:a9:d1:55:48:a5:02:3f:0f:f8:18:0e:ef:0e: 4b:b7:bc:b8:9b:e5:60:75:77:a7:d7:12:d5:b6:ef:0a:e9:8d: 49:a8:69:ab:e3:dd:9f:80:fb:1c:e2:b8:7c:b2:db:6d:ae:e5: 3a:bc:2f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kDXlxNuBH8o7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjcxMzJmYjktMzEwYy00YTlhLWE2YjItNmVmNzQ1YTFmMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3v8oJJ8PUMqQNZySbNeq0YNByFJ4JmWn5Dw iyI071eLot6f/wixmv2pqD+7LcmEsnjV6ejxz3Q0Ll/CmmWM6RYRe4ll3LsK6mVF 4AE0zSB4ScoOqt69MBenfxoHrqd1VPcZbAn6AN2kC4GXQDJ+aEULJ4gt4NYfWsOk MLe7Ussj9N67e6H2FNOl3gFEab3RBp8iz/nWp22KfpcQ1Emaamr54RYaM9X57+CT IY/S5WgsNXN2HfrqIhYQxfoy2WgfJWAaG8xmh0HkxizLxW6bDXhZXdJReT/U4x7e IpoMYlz4xHrPAwYxIRLjFXFqz02AWr58Yry2cATHFumaD3QgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETq8xloIc7RcZmW6b03lNyufhNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmNlYzQ0YWItOTU4Yi0z OWU4LTg5ZGUtZDFhODEyNzNlMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsK1FXr3f8QLKaD3r03YcRGwzfMxOVrJeZRI/oamh+euN54YT/rMUSt PqSmIqWAbtjpWfxYGhMsUiCEBn8azSziAA5k17clD0JvYOwTW8dZ9BUTYdHJOARS +LY/lsNA1VaVTxG4p2v9Szm8cX+dNUmbro0054qW+YViHSbQkr0KYAAKm7ursbND RRHQa5QSdDBoCu4H/TEtwd//2byF9CzgSNF2JddZ7WAoMKPupyGtVnPZOTI2V7yd cTg4U7iDxv0l51A0+Y2z3wRpqdFVSKUCPw/4GA7vDku3vLib5WB1d6fXEtW27wrp jUmoaavj3Z+A+xziuHyy222u5Tq8Lww= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:35 2025 by rpki-client