$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa File: 14911894-bb25-32ec-a0c7-c729eece742c.roa (raw, json) Hash identifier: gsV9EV4F/BZ14ZCyjtKZLl3FU+8mhGGArwMQdp8LwU4= Subject key identifier: E8:42:9F:EC:CD:C6:8F:07:92:53:98:E6:52:D4:65:13:A1:C5:38:64 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C773FEFE1D9C688ACD80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c7:73:fe:fe:1d:9c:68:8a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=aff9460c-cd5a-47f1-a397-09a4bd945df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:86:c9:54:a5:cd:67:a0:6f:29:97:7f:be: 08:28:e5:0e:0d:b6:7f:2e:38:a8:d1:62:b5:8d:17: 7d:e9:6f:65:fe:cd:91:1d:ec:e9:98:19:f2:71:62: 75:bd:c5:a1:c1:81:4c:cb:2b:49:91:1e:61:99:9e: 5b:85:0d:5c:ad:85:c2:3d:16:de:0f:69:c5:c8:25: 63:8a:78:76:55:2a:fa:4c:2b:34:58:c0:bc:49:f4: 99:d8:bf:25:2c:ed:dd:5b:a7:45:78:03:03:0c:94: 74:67:55:9f:c3:62:e9:62:83:8d:cd:3c:d7:02:79: 1a:45:78:8d:14:e6:ca:78:5f:60:7a:69:ed:43:9a: 4b:f8:67:b1:b9:6c:d0:58:94:15:1a:44:d0:fd:62: ff:2b:58:08:e6:cc:c4:4a:b1:fb:ab:91:82:aa:a7: b4:dd:f2:d1:79:fc:54:5a:e3:7a:ad:e2:40:05:8a: 50:ff:58:aa:96:25:7c:22:c2:4f:6f:6c:f6:ae:eb: de:a3:81:1b:22:cf:eb:ee:6c:95:32:20:fd:b9:92: 4c:8a:fe:04:ee:0a:42:96:01:c0:c6:27:db:a5:54: b2:22:02:41:ca:6a:d8:a5:6c:7c:a0:a2:87:f0:6d: 62:6e:a8:a8:04:5c:36:a7:4f:2b:26:0a:4a:08:15: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:9F:EC:CD:C6:8F:07:92:53:98:E6:52:D4:65:13:A1:C5:38:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/14911894-bb25-32ec-a0c7-c729eece742c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:67:98:a0:94:25:89:b4:d5:4e:85:96:bb:ec:0a:43:f7:82: 07:77:cf:46:f9:18:78:1f:32:c9:e5:da:aa:2f:b9:09:36:a2: 81:b7:d6:80:6a:52:07:ad:38:6a:88:1f:73:b0:3b:4b:19:ea: 78:53:59:9a:7f:a5:8c:81:03:a0:c8:ed:b6:2f:fa:b4:f0:09: 2e:bf:7c:a4:63:f8:4b:c0:42:00:2c:76:34:71:29:47:3a:2d: a9:d7:cd:d4:3b:38:0b:da:98:ae:fd:52:d6:3e:f8:5a:7a:1a: cd:98:8c:59:a1:c6:f3:ae:1c:bf:2e:d2:b7:d1:e9:52:13:d7: d9:ee:27:c5:1a:d2:58:15:34:f4:b9:94:ae:b6:b9:bc:91:00: 8e:75:59:71:0a:29:3c:b2:50:6e:8b:27:65:7e:10:a5:c7:1f: 9b:25:3f:76:1d:df:d6:15:c3:f4:68:73:43:50:d3:0d:32:6c: e2:bf:32:a5:1c:ea:61:07:4b:d8:3c:b4:5f:93:da:32:e5:c5: 15:03:fd:e8:0e:b1:0e:64:76:8c:77:4c:32:e8:ef:80:f7:57: 19:55:0f:91:86:8c:5d:34:01:3d:10:58:cc:d2:56:22:a9:76: fc:01:2a:6b:ef:73:38:19:b4:87:da:0f:24:1a:5e:70:c2:28: a4:9d:fe:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsdz/v4dnGiKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YWZmOTQ2MGMtY2Q1YS00N2YxLWEzOTctMDlhNGJkOTQ1ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tiGyVSlzWegbymXf74IKOUODbZ/Ljio0WK1 jRd96W9l/s2RHezpmBnycWJ1vcWhwYFMyytJkR5hmZ5bhQ1crYXCPRbeD2nFyCVj inh2VSr6TCs0WMC8SfSZ2L8lLO3dW6dFeAMDDJR0Z1Wfw2LpYoONzTzXAnkaRXiN FObKeF9gemntQ5pL+GexuWzQWJQVGkTQ/WL/K1gI5szESrH7q5GCqqe03fLRefxU WuN6reJABYpQ/1iqliV8IsJPb2z2ruveo4EbIs/r7myVMiD9uZJMiv4E7gpClgHA xifbpVSyIgJBymrYpWx8oKKH8G1ibqioBFw2p08rJgpKCBXvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhCn+zNxo8HklOY5lLUZROhxThkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTQ5MTE4OTQtYmIyNS0z MmVjLWEwYzctYzcyOWVlY2U3NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVnmKCUJYm01U6FlrvsCkP3ggd3z0b5GHgfMsnl2qovuQk2ooG31oBq UgetOGqIH3OwO0sZ6nhTWZp/pYyBA6DI7bYv+rTwCS6/fKRj+EvAQgAsdjRxKUc6 LanXzdQ7OAvamK79UtY++Fp6Gs2YjFmhxvOuHL8u0rfR6VIT19nuJ8Ua0lgVNPS5 lK62ubyRAI51WXEKKTyyUG6LJ2V+EKXHH5slP3Yd39YVw/Roc0NQ0w0ybOK/MqUc 6mEHS9g8tF+T2jLlxRUD/egOsQ5kdox3TDLo74D3VxlVD5GGjF00AT0QWMzSViKp dvwBKmvvczgZtIfaDyQaXnDCKKSd/sY= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:38 2025 by rpki-client