$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json) Hash identifier: QSUdOlwlr0EbDl/dPojKA29dttCn4pqgfveLCXzasRk= Subject key identifier: 43:62:F5:D6:04:31:BC:7A:94:F8:D6:7C:FB:8B:51:AE:28:41:D0:3F Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Certificate serial: 010D0C9F4328584B110C0EBA3D2291AD75467680 Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 395497 IP address blocks: 23.166.152.0/24 maxlen: 32 2602:f9d6::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0e:ba:3d:22:91:ad:75:46:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=d59d6b8d-b2e9-4398-9474-f9724a5ac1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:6d:11:29:f3:97:f8:6c:1e:e1:ed:80:64: 27:77:27:b3:79:ae:ad:12:cc:75:c3:43:f7:59:65: 86:7f:3b:62:4c:c0:f5:fb:1c:80:15:3c:23:b3:3b: 88:80:98:d4:ca:08:f5:4f:de:4c:90:1e:e9:2c:f2: 59:a0:7c:01:3c:0f:32:36:ed:2c:fa:46:8a:29:f4: 74:c3:82:e2:76:e9:8c:03:73:32:2f:11:1b:31:bc: b4:fb:81:8c:80:33:2b:cc:bd:de:80:05:f3:4d:99: a6:46:69:53:69:07:1d:48:02:b3:11:dd:52:5b:c6: 40:53:b2:2d:19:c3:34:8f:5f:5d:02:18:c2:a7:eb: 2d:18:41:8c:67:d5:51:49:f4:48:cf:b4:69:3a:8d: cc:86:0a:38:97:ca:91:7d:27:e8:42:20:c6:f9:39: 2d:ed:ac:ac:45:94:4d:51:b4:ee:e8:33:25:e4:29: 10:e7:7d:e8:eb:c8:48:61:9e:fb:08:34:2c:09:e9: d8:55:5d:da:c3:7d:e4:41:b8:93:82:d6:7c:76:c1: c3:66:59:c3:34:ab:7c:07:7c:e8:37:3c:b8:74:ae: c3:76:dc:ef:38:e6:f8:cd:9a:e0:6c:43:41:5a:ce: 05:39:1f:14:fa:5d:13:3a:f7:3c:56:de:82:22:f8: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:F5:D6:04:31:BC:7A:94:F8:D6:7C:FB:8B:51:AE:28:41:D0:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl X509v3 Authority Key Identifier: keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.152.0/24 IPv6: 2602:f9d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:14:de:4a:2e:51:14:bb:42:0e:30:63:68:f4:11:3d:80:f9: 34:f4:47:e9:79:2d:4c:8d:af:c5:31:af:cb:87:aa:f6:04:74: c8:2d:18:13:97:c1:94:af:c1:6a:da:5a:cc:7e:bf:50:1f:d3: f6:88:fb:8b:98:f8:4b:78:1d:9a:0c:eb:2f:86:24:9e:f9:a8: d3:3f:3b:2d:4e:04:81:24:bf:6c:4a:ed:c9:3e:9a:da:69:30: 6d:b0:ff:57:17:f9:97:da:4a:3f:7d:60:df:0a:b8:2b:e6:7e: 1d:19:72:14:5d:2c:55:77:5f:2e:cc:3f:a2:9e:6a:e2:b5:47: 0a:a4:63:08:66:29:d0:fc:1f:6d:13:81:3c:65:4a:3c:21:ba: 12:fd:eb:77:15:02:e2:a7:4d:05:bf:44:39:3e:53:5c:95:eb: 8b:da:2f:f5:6a:1e:ed:32:e9:e6:a6:86:a1:e0:51:14:57:c1: 09:57:a4:04:aa:ac:b8:c7:69:b2:e7:59:9f:d6:20:3f:79:79: ce:ce:ec:29:21:5d:c8:7f:9a:12:9e:d1:46:a4:b2:72:d6:57: 40:ce:68:9e:a4:d6:3f:9f:92:44:49:04:ad:8e:03:e0:e7:7b: 44:da:fa:29:4a:57:2b:ac:59:84:66:ff:83:bf:86:a7:2d:51: f8:be:80:30 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsRDA66PSKRrXVGdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJiNjBmYTItOGMxZC00YTM4LWJkY2YtMTVmNTNmMjc2 YzVhMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDU5ZDZiOGQtYjJlOS00Mzk4LTk0NzQtZjk3MjRhNWFjMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FtESnzl/hsHuHtgGQndyezea6tEsx1w0P3 WWWGfztiTMD1+xyAFTwjszuIgJjUygj1T95MkB7pLPJZoHwBPA8yNu0s+kaKKfR0 w4LidumMA3MyLxEbMby0+4GMgDMrzL3egAXzTZmmRmlTaQcdSAKzEd1SW8ZAU7It GcM0j19dAhjCp+stGEGMZ9VRSfRIz7RpOo3Mhgo4l8qRfSfoQiDG+Tkt7aysRZRN UbTu6DMl5CkQ533o68hIYZ77CDQsCenYVV3aw33kQbiTgtZ8dsHDZlnDNKt8B3zo Nzy4dK7DdtzvOOb4zZrgbENBWs4FOR8U+l0TOvc8Vt6CIvjpFwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFENi9dYEMbx6lPjWfPuLUa4oQdA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2 MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1M2YyNzZjNWEvOTg5ZDA0NDgtY2YwZC0z ZmRmLWE3ODItNjViZjg3NTQ2NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWJiNjBmYTItOGMxZC00YTM4LWJk Y2YtMTVmNTNmMjc2YzVhL2FiYjYwZmEyLThjMWQtNGEzOC1iZGNmLTE1ZjUzZjI3 NmM1YS5jcmwwHwYDVR0jBBgwFoAUEGXqQKCr/AYVNe7VUztpd59c24EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1 M2YyNzZjNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6aYMA4E AgACMAgDBgAmAvnWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3FN5KLlEUu0IOMGNo9BE9gPk09EfpeS1M ja/FMa/Lh6r2BHTILRgTl8GUr8Fq2lrMfr9QH9P2iPuLmPhLeB2aDOsvhiSe+ajT PzstTgSBJL9sSu3JPpraaTBtsP9XF/mX2ko/fWDfCrgr5n4dGXIUXSxVd18uzD+i nmritUcKpGMIZinQ/B9tE4E8ZUo8IboS/et3FQLip00Fv0Q5PlNcleuL2i/1ah7t Munmpoah4FEUV8EJV6QEqqy4x2my51mf1iA/eXnOzuwpIV3If5oSntFGpLJy1ldA zmiepNY/n5JESQStjgPg53tE2vopSlcrrFmEZv+Dv4anLVH4voAw -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:48 2025 by rpki-client