$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/abae80db-0726-36c0-bbe6-366faff7d6d4.roa File: abae80db-0726-36c0-bbe6-366faff7d6d4.roa (raw, json) Hash identifier: ri7cYKG8qcSHyNobzJHh/0ADWko00wng1mv37RG5Xbc= Subject key identifier: 2C:08:AF:8E:73:86:A0:A1:96:25:72:DE:94:F9:88:83:8C:D6:84:00 Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7 Certificate serial: 010D0C9F4328584B1AD1B012CE94AD7EC7134680 Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/abae80db-0726-36c0-bbe6-366faff7d6d4.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 6341 IP address blocks: 156.76.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:12:ce:94:ad:7e:c7:13:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=7cd84abe-90c8-415e-b8bc-dd0d7003d852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f5:b1:65:12:17:16:da:20:9f:5d:92:f2:df: a5:b4:f9:3e:71:2f:cc:69:b3:8f:5c:ed:d6:9a:6f: cd:55:38:9c:6e:e7:df:fb:c6:a6:4e:f3:cd:48:11: 6f:6c:23:cf:ba:65:40:78:e1:48:e0:ff:e4:d1:90: 50:25:7e:11:e1:5f:85:2c:cf:e8:63:b2:af:5a:d8: 0f:d3:94:13:15:45:b4:61:0b:66:f9:99:dd:cb:ca: 66:f9:f5:14:a6:58:d1:9d:c7:7a:50:2e:66:ec:33: 44:fb:b4:df:ab:55:13:8b:37:7f:37:56:d7:ad:68: a5:00:7e:cb:d6:44:a1:d4:5f:60:72:6e:5f:e8:93: 56:68:62:40:c6:c3:91:4c:32:b5:f2:f0:da:08:11: 3a:99:9f:ea:94:54:3c:b6:66:27:02:2a:50:96:0a: 54:fc:63:bf:f3:54:d9:0c:55:2a:da:33:73:bf:77: 54:6f:10:4f:d6:cf:79:43:1b:51:e1:3f:94:87:81: 6a:68:41:75:f9:64:fa:55:6d:5c:ff:ca:19:0f:19: 3c:1e:68:4f:a1:18:c5:64:d7:6b:57:dd:66:19:10: d1:9f:f7:de:15:98:6d:52:5a:23:f9:c8:ec:c6:cc: a9:6a:d9:de:29:67:51:97:83:ff:cb:7b:b0:19:bf: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:08:AF:8E:73:86:A0:A1:96:25:72:DE:94:F9:88:83:8C:D6:84:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/abae80db-0726-36c0-bbe6-366faff7d6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl X509v3 Authority Key Identifier: keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer sbgp-ipAddrBlock: critical IPv4: 156.76.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f7:26:46:a1:15:ef:7e:30:18:33:ba:e4:a1:48:5a:d3:7b: dc:fc:e4:9a:e8:9d:84:d8:f8:d3:a2:d0:12:ec:a2:57:3c:00: 3c:78:64:fc:e0:a9:ee:13:0d:8a:b1:df:a1:75:b1:e6:21:9a: 90:69:5e:2d:09:c3:30:6a:84:e3:4d:52:96:d5:bc:e1:80:85: 83:26:f0:9e:4c:f8:b7:58:50:17:f2:5b:b1:c3:95:b5:e2:ef: 38:ad:4d:47:4a:da:39:86:b8:7c:b8:23:58:ac:77:8a:42:ce: 3d:53:6c:f0:bf:de:61:8c:8c:7b:ea:53:f3:4b:b6:a8:b4:a1: ea:07:f0:8a:ef:84:82:2f:42:14:2c:71:d9:32:34:1a:09:b8: f8:4c:e4:a8:d9:35:59:41:7d:68:66:34:3d:55:cf:70:23:07: e3:8a:ce:3e:a3:03:dc:2a:31:f4:65:f8:7b:d4:22:8e:d4:11: 4f:6e:d4:66:d3:8a:38:b8:00:7c:b7:73:8e:7e:3a:03:fd:a6: 43:e1:a1:47:26:ff:81:77:fd:10:e9:0b:31:07:b1:21:6d:17: 9f:58:dc:65:c2:29:23:c8:7e:09:68:4e:c0:72:66:42:23:45: 1f:5c:40:8d:98:3c:48:ec:53:37:13:f8:65:52:05:d9:12:c2: 59:e4:f1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bASzpStfscTRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI5NzNlMjAtNDJiNS00OTdlLTgzMWItNjZkMzUzZjky OGQ3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk N2NkODRhYmUtOTBjOC00MTVlLWI4YmMtZGQwZDcwMDNkODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPWxZRIXFtogn12S8t+ltPk+cS/MabOPXO3W mm/NVTicbuff+8amTvPNSBFvbCPPumVAeOFI4P/k0ZBQJX4R4V+FLM/oY7KvWtgP 05QTFUW0YQtm+Zndy8pm+fUUpljRncd6UC5m7DNE+7Tfq1UTizd/N1bXrWilAH7L 1kSh1F9gcm5f6JNWaGJAxsORTDK18vDaCBE6mZ/qlFQ8tmYnAipQlgpU/GO/81TZ DFUq2jNzv3dUbxBP1s95QxtR4T+Uh4FqaEF1+WT6VW1c/8oZDxk8HmhPoRjFZNdr V91mGRDRn/feFZhtUloj+cjsxsypatneKWdRl4P/y3uwGb8U9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwIr45zhqChliVy3pT5iIOM1oQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3 M2UyMC00MmI1LTQ5N2UtODMxYi02NmQzNTNmOTI4ZDcvYWJhZTgwZGItMDcyNi0z NmMwLWJiZTYtMzY2ZmFmZjdkNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGI5NzNlMjAtNDJiNS00OTdlLTgz MWItNjZkMzUzZjkyOGQ3LzhiOTczZTIwLTQyYjUtNDk3ZS04MzFiLTY2ZDM1M2Y5 MjhkNy5jcmwwHwYDVR0jBBgwFoAUDKLrkz+M3NmIkVq9lGUWMncCGXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3M2UyMC00MmI1LTQ5N2UtODMxYi02NmQz NTNmOTI4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnEzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf3JkahFe9+MBgzuuShSFrTe9z85JronYTY+NOi0BLsolc8ADx4ZPzg qe4TDYqx36F1seYhmpBpXi0JwzBqhONNUpbVvOGAhYMm8J5M+LdYUBfyW7HDlbXi 7zitTUdK2jmGuHy4I1isd4pCzj1TbPC/3mGMjHvqU/NLtqi0oeoH8IrvhIIvQhQs cdkyNBoJuPhM5KjZNVlBfWhmND1Vz3AjB+OKzj6jA9wqMfRl+HvUIo7UEU9u1GbT iji4AHy3c45+OgP9pkPhoUcm/4F3/RDpCzEHsSFtF59Y3GXCKSPIfgloTsByZkIj RR9cQI2YPEjsUzcT+GVSBdkSwlnk8QA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:34:23 2025 by rpki-client