$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa File: 130c2f2e-c4a7-3e21-b132-2551c4086cac.roa (raw, json) Hash identifier: pMzNB4ozrKGEWvIf4sMAIrgFOG+8H7VfqmbtmACdsoU= Subject key identifier: C1:DF:C1:18:FA:A7:D7:37:02:B9:FE:BC:35:47:49:6B:44:DB:D4:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B004C26A2D1D74734E94CB980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 399164 IP address blocks: 156.154.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:26:a2:d1:d7:47:34:e9:4c:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=b62e2b9e-6ce6-4c98-8c6d-4ef837bae102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:4c:1c:ed:8c:29:51:7f:3b:ef:90:1b:35: 9d:30:54:59:01:aa:23:5c:8a:4d:17:3a:f9:b2:2c: 1c:c5:4b:5a:f6:60:d7:13:9a:6d:d5:b6:7c:63:e1: 82:a8:9d:cb:85:1d:f2:b3:50:dc:85:55:70:45:da: c4:bb:d6:a3:a2:e4:a2:f8:64:a8:1a:23:a7:b5:b4: c8:a4:db:8d:d2:fe:a5:bb:cb:82:9f:73:35:fa:3c: 27:57:0f:7a:2a:41:a8:a3:22:cc:9f:e0:3c:63:fc: 14:4d:e5:f6:bd:8b:f2:1d:13:1b:6a:10:77:98:39: ca:9a:aa:79:1b:66:26:1e:6a:36:ff:4e:21:5c:9b: e7:83:f0:5c:7c:c5:72:0c:a9:2c:58:a0:24:4a:53: 68:6c:40:86:f9:5e:6c:9b:90:49:f3:bd:c2:1c:72: 55:5c:e1:6c:a6:08:78:fe:b1:56:ce:91:7d:51:2d: ba:5c:39:c8:67:ae:35:91:94:02:65:0f:ec:6f:73: f6:5f:e5:d6:26:a4:b4:cd:62:76:5b:fe:70:bb:8e: 15:83:77:f4:24:b3:02:04:21:5f:73:f8:0a:e5:aa: be:dc:fc:92:c1:74:5a:98:2a:14:09:2a:f2:ad:29: 4e:4d:7c:a6:e7:76:e8:2d:98:8b:f4:6c:67:e8:33: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DF:C1:18:FA:A7:D7:37:02:B9:FE:BC:35:47:49:6B:44:DB:D4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/130c2f2e-c4a7-3e21-b132-2551c4086cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:44:7a:ec:98:84:8d:96:ad:f7:db:eb:1b:2a:a1:16:00:5f: d2:96:64:29:23:10:80:25:c6:fe:de:c4:53:d7:3e:34:78:3c: 00:5f:72:6e:82:65:41:19:27:92:2c:c2:bc:dd:23:d2:2e:19: 66:bf:c4:3b:4d:2c:77:ee:6d:39:19:56:d7:2e:37:14:1b:7a: ed:42:7c:46:e8:18:96:2a:f8:70:04:c2:91:b9:19:5f:cb:72: 67:ef:45:8a:52:eb:00:58:ba:90:d4:81:02:ae:03:82:ac:4d: 45:09:70:39:b8:26:cf:8a:82:85:e5:84:52:5f:be:86:74:4c: 11:80:29:9c:bb:d6:03:a4:d6:eb:1a:7d:9f:64:c3:3e:3a:53: f1:7f:72:d9:d6:9a:d6:28:f1:50:ba:dc:02:0a:17:3a:d6:a2: c9:7f:7c:1f:db:8d:0e:85:f7:1e:7f:2d:7d:36:4a:6b:ef:f2: 03:fb:8a:1a:1c:79:0e:7c:60:02:1b:41:50:c6:8c:8c:e3:e0: 07:f5:d1:1b:80:6f:7d:37:25:2b:73:26:74:6a:be:dc:07:77: 44:4a:45:d0:0c:fa:d6:ad:09:31:07:84:ff:0a:64:e0:93:36: f8:5c:43:50:64:d6:33:1e:d2:2b:cc:c2:5b:99:23:14:f4:03: 8f:05:6b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATCai0ddHNOlMuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YjYyZTJiOWUtNmNlNi00Yzk4LThjNmQtNGVmODM3YmFlMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRRMHO2MKVF/O++QGzWdMFRZAaojXIpNFzr5 siwcxUta9mDXE5pt1bZ8Y+GCqJ3LhR3ys1DchVVwRdrEu9ajouSi+GSoGiOntbTI pNuN0v6lu8uCn3M1+jwnVw96KkGooyLMn+A8Y/wUTeX2vYvyHRMbahB3mDnKmqp5 G2YmHmo2/04hXJvng/BcfMVyDKksWKAkSlNobECG+V5sm5BJ873CHHJVXOFspgh4 /rFWzpF9US26XDnIZ641kZQCZQ/sb3P2X+XWJqS0zWJ2W/5wu44Vg3f0JLMCBCFf c/gK5aq+3PySwXRamCoUCSryrSlOTXym53boLZiL9Gxn6DPifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHfwRj6p9c3Arn+vDVHSWtE29SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTMwYzJmMmUtYzRhNy0z ZTIxLWIxMzItMjU1MWM0MDg2Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJEeuyYhI2Wrffb6xsqoRYAX9KWZCkjEIAlxv7exFPXPjR4PABfcm6C ZUEZJ5IswrzdI9IuGWa/xDtNLHfubTkZVtcuNxQbeu1CfEboGJYq+HAEwpG5GV/L cmfvRYpS6wBYupDUgQKuA4KsTUUJcDm4Js+KgoXlhFJfvoZ0TBGAKZy71gOk1usa fZ9kwz46U/F/ctnWmtYo8VC63AIKFzrWosl/fB/bjQ6F9x5/LX02Smvv8gP7ihoc eQ58YAIbQVDGjIzj4Af10RuAb303JStzJnRqvtwHd0RKRdAM+tatCTEHhP8KZOCT NvhcQ1Bk1jMe0ivMwluZIxT0A48Fa3o= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:10 2025 by rpki-client