$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/261b1e88-c174-3565-8f7c-0ed32db5e7f8.roa File: 261b1e88-c174-3565-8f7c-0ed32db5e7f8.roa (raw, json) Hash identifier: YzY9LbMHVCSEdyKv0WnLim1H5ueo393qLifZQQ+5lbE= Subject key identifier: ED:E6:67:AA:AB:9C:5B:A6:B9:82:24:F1:8A:7A:F0:86:A5:1A:A7:3E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F4DB9D127A049C1C2380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/261b1e88-c174-3565-8f7c-0ed32db5e7f8.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397225 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f4:db:9d:12:7a:04:9c:1c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=023a6e8d-13c6-4f62-b894-9734f55c8418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:d4:fb:87:d9:59:16:31:d7:8d:83:8e:f6: c6:c1:41:64:ff:d7:48:9a:ab:05:57:b6:aa:1c:c0: 5f:7b:a6:13:2c:a8:2f:02:dc:05:2b:40:26:6a:4d: 2c:89:f6:6a:15:99:de:fc:3f:13:bf:58:39:6e:f9: d7:e7:10:77:50:02:cc:40:0c:55:6d:96:9e:2d:08: 12:3d:4d:72:24:7e:0b:2a:8d:26:c3:00:d7:af:6b: 4e:10:1d:26:48:c3:5f:f7:03:5a:45:44:ab:61:21: 00:9c:29:b9:56:ce:01:4a:de:df:57:1d:5f:ac:a4: 88:73:a2:77:a1:0c:ed:df:75:0e:ca:40:03:78:5c: e2:fe:2f:d3:14:b9:ff:4d:d3:bb:a4:e0:22:1c:ca: 4d:0f:e6:d3:39:ae:01:7a:fb:ab:51:19:0a:b8:8d: 2b:3b:fe:08:f2:c1:96:51:d9:4b:b4:dd:84:3a:9e: ed:2d:ad:ac:db:33:4c:8d:41:88:8a:ab:e4:ce:28: b4:dc:4b:45:a2:5e:49:d9:10:7d:5c:e6:db:e6:99: 1e:ce:18:0b:db:8e:cb:98:08:d1:5a:08:ad:57:98: 98:ad:30:f5:68:b8:2f:7c:b4:6d:7a:a7:1d:c9:25: be:cc:c0:8a:d3:f7:d1:5c:42:d2:eb:8a:f7:fe:28: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E6:67:AA:AB:9C:5B:A6:B9:82:24:F1:8A:7A:F0:86:A5:1A:A7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/261b1e88-c174-3565-8f7c-0ed32db5e7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5b:aa:b4:33:92:6b:29:45:4c:2e:e6:47:42:ef:78:71:95: 37:33:8c:8f:c6:e8:f4:c2:dc:1a:15:eb:a8:4a:fd:0f:fc:e9: dd:7e:de:a1:65:4c:d4:09:65:8a:55:39:c2:67:10:f0:05:cc: 08:6c:6b:e0:3e:aa:ff:cb:f7:80:14:d1:80:13:28:92:6d:74: ba:a0:25:9d:d9:0a:14:0d:45:a9:b4:16:a4:7c:f2:b8:c6:1c: a6:23:d1:0c:67:d1:fa:46:ba:48:70:68:5b:85:0d:d3:13:41: 2e:65:e8:8d:5c:4d:44:37:69:09:77:b8:81:38:43:51:2e:6b: 74:83:4f:bb:f2:10:22:bb:1d:cf:16:7e:00:4d:b8:ec:8f:2e: 2d:ee:4b:dd:6b:01:c1:dd:03:ae:30:de:28:82:d1:66:22:e5: 79:bc:92:43:8f:c0:54:d3:39:e4:72:35:c4:9d:01:c8:0b:fb: 95:29:38:f9:9b:e8:2e:dd:d0:5c:97:ab:b1:5c:98:bf:2b:05: 42:c7:ec:30:2c:f4:6f:c3:66:96:c4:41:ce:3e:83:b8:0c:ae: c5:f5:08:48:af:0e:69:67:cd:84:a7:56:a5:c6:62:84:2e:96: c2:18:c1:f3:d6:09:30:3a:13:fa:04:4a:93:fa:07:05:90:6a: d2:97:f4:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fTbnRJ6BJwcI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDIzYTZlOGQtMTNjNi00ZjYyLWI4OTQtOTczNGY1NWM4NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNTU+4fZWRYx142DjvbGwUFk/9dImqsFV7aq HMBfe6YTLKgvAtwFK0Amak0sifZqFZne/D8Tv1g5bvnX5xB3UALMQAxVbZaeLQgS PU1yJH4LKo0mwwDXr2tOEB0mSMNf9wNaRUSrYSEAnCm5Vs4BSt7fVx1frKSIc6J3 oQzt33UOykADeFzi/i/TFLn/TdO7pOAiHMpND+bTOa4BevurURkKuI0rO/4I8sGW UdlLtN2EOp7tLa2s2zNMjUGIiqvkzii03EtFol5J2RB9XObb5pkezhgL247LmAjR WgitV5iYrTD1aLgvfLRteqcdySW+zMCK0/fRXELS64r3/igA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3mZ6qrnFumuYIk8Yp68IalGqc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjYxYjFlODgtYzE3NC0z NTY1LThmN2MtMGVkMzJkYjVlN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpbqrQzkmspRUwu5kdC73hxlTczjI/G6PTC3BoV66hK/Q/86d1+3qFl TNQJZYpVOcJnEPAFzAhsa+A+qv/L94AU0YATKJJtdLqgJZ3ZChQNRam0FqR88rjG HKYj0Qxn0fpGukhwaFuFDdMTQS5l6I1cTUQ3aQl3uIE4Q1Eua3SDT7vyECK7Hc8W fgBNuOyPLi3uS91rAcHdA64w3iiC0WYi5Xm8kkOPwFTTOeRyNcSdAcgL+5UpOPmb 6C7d0FyXq7FcmL8rBULH7DAs9G/DZpbEQc4+g7gMrsX1CEivDmlnzYSnVqXGYoQu lsIYwfPWCTA6E/oESpP6BwWQatKX9Og= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:20 2025 by rpki-client