$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa File: 2a785c30-3480-3c38-8cbc-76cd138708aa.roa (raw, json) Hash identifier: hS/kTdqnCVRVxlZi2z6ySbXL5P6foNMBCfvDZGIEg/w= Subject key identifier: BC:53:58:0B:A9:34:E2:0F:24:D6:4C:30:30:45:E8:5A:B8:32:2D:70 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E6A3F273F019C4028C40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e6:a3:f2:73:f0:19:c4:02:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=5836ac62-1ccb-4f76-bd3e-7c328c473a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:df:c0:50:e6:d0:ef:a3:55:da:fa:97:e4: 0f:84:6a:3a:ad:8a:94:e3:c5:48:8c:b2:82:81:8a: bf:95:7c:af:5d:16:09:e8:cb:e2:3f:be:a8:5f:3b: 55:db:7f:63:ae:f9:f5:06:f9:91:68:93:fe:6e:ba: d5:2f:ec:e7:d4:57:f1:84:e9:23:1c:38:ff:0a:e8: 26:58:5a:7e:2d:c2:d0:c0:8d:67:74:29:01:07:ac: a3:0f:e6:29:1d:64:ad:18:dc:3a:ae:70:e7:fc:f6: 2a:94:76:c5:f5:c3:16:35:d0:52:b3:09:41:5e:08: 96:4e:5a:5e:8f:52:eb:02:85:1d:82:04:ee:ca:38: d7:f0:6f:04:98:0d:65:86:82:3a:e9:42:c1:00:30: 14:b4:d3:c0:d4:58:f6:56:fb:d5:b9:1f:8f:f8:32: 12:10:c4:15:0a:8b:76:28:99:95:96:5f:94:d0:8a: 03:d4:c1:69:ca:b5:d5:16:c5:3f:ea:52:9b:60:0c: b8:b9:ad:7c:8b:fe:68:b6:0f:4f:25:22:71:a8:21: b8:6d:a6:3b:0b:d3:0b:36:e5:24:56:05:7b:0d:f6: 8a:96:8e:2b:65:f0:5b:99:59:67:03:bc:7e:4a:1c: 0d:d2:20:c5:a6:58:c8:9e:c9:ac:19:b0:37:c3:6f: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:53:58:0B:A9:34:E2:0F:24:D6:4C:30:30:45:E8:5A:B8:32:2D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2a785c30-3480-3c38-8cbc-76cd138708aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5e:a9:3f:70:5b:80:e9:61:1c:dd:b1:2b:ad:85:c0:d4:72: 89:b0:6d:be:7e:72:c1:35:9d:cf:85:1e:82:00:32:24:e9:a6: 6b:14:8c:bb:31:69:05:0d:d2:ce:92:85:97:6c:a5:5c:20:cf: f4:1b:6f:0b:25:89:fe:e6:e3:9e:8e:f6:b7:84:75:f5:de:8e: de:3e:b2:bb:91:37:47:31:ce:d1:d5:33:b4:06:ba:40:8f:bf: 9d:04:5e:fa:0a:b1:17:80:05:a5:31:1d:bd:53:e2:c2:d5:39: c7:94:e0:05:f8:37:a1:46:b5:c0:b4:0b:67:a5:54:c0:35:e9: 6e:07:8b:d1:26:b1:c9:d6:be:44:49:18:0f:c1:fa:a5:ec:ac: 92:0b:26:2c:bb:60:9d:38:5a:de:c5:d3:ed:17:ec:cd:2f:40: f8:c5:7f:d0:23:da:b0:b6:3c:e2:52:ab:65:42:e1:06:c0:f0: ff:0c:64:fc:f1:ce:22:c7:1b:6f:b4:c4:fd:dc:e9:4d:f8:cb: 66:7b:0c:ca:5c:ad:6f:d3:cf:e3:a6:77:38:22:26:ef:0f:40: e0:40:8c:09:36:62:eb:8b:c5:10:88:25:10:47:eb:00:fe:59: 61:51:61:d5:99:c6:c9:3e:2d:66:0d:89:dd:50:e8:f4:60:b6: f0:1d:92:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eaj8nPwGcQCjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTgzNmFjNjItMWNjYi00Zjc2LWJkM2UtN2MzMjhjNDczYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTDfwFDm0O+jVdr6l+QPhGo6rYqU48VIjLKC gYq/lXyvXRYJ6MviP76oXztV239jrvn1BvmRaJP+brrVL+zn1FfxhOkjHDj/Cugm WFp+LcLQwI1ndCkBB6yjD+YpHWStGNw6rnDn/PYqlHbF9cMWNdBSswlBXgiWTlpe j1LrAoUdggTuyjjX8G8EmA1lhoI66ULBADAUtNPA1Fj2VvvVuR+P+DISEMQVCot2 KJmVll+U0IoD1MFpyrXVFsU/6lKbYAy4ua18i/5otg9PJSJxqCG4baY7C9MLNuUk VgV7DfaKlo4rZfBbmVlnA7x+ShwN0iDFpljInsmsGbA3w28MeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxTWAupNOIPJNZMMDBF6Fq4Mi1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmE3ODVjMzAtMzQ4MC0z YzM4LThjYmMtNzZjZDEzODcwOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENeqT9wW4DpYRzdsSuthcDUcomwbb5+csE1nc+FHoIAMiTppmsUjLsx aQUN0s6ShZdspVwgz/Qbbwslif7m456O9reEdfXejt4+sruRN0cxztHVM7QGukCP v50EXvoKsReABaUxHb1T4sLVOceU4AX4N6FGtcC0C2elVMA16W4Hi9EmscnWvkRJ GA/B+qXsrJILJiy7YJ04Wt7F0+0X7M0vQPjFf9Aj2rC2POJSq2VC4QbA8P8MZPzx ziLHG2+0xP3c6U34y2Z7DMpcrW/Tz+OmdzgiJu8PQOBAjAk2YuuLxRCIJRBH6wD+ WWFRYdWZxsk+LWYNid1Q6PRgtvAdkus= -----END CERTIFICATE-----Generated at Mon Nov 3 03:19:09 2025 by rpki-client