$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa File: 2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa (raw, json) Hash identifier: qwJ4Ud463UgoIzHEJLgIXDqnRpDnUon0+t8ZbbzfzOk= Subject key identifier: 9E:1E:5F:85:21:5E:57:27:DF:54:0C:B0:75:70:EA:D2:C0:10:87:AE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FD103E9ED8D7DC930E60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397243 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fd:10:3e:9e:d8:d7:dc:93:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8769ee77-dd34-4057-a419-7bfd6d99f1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:c8:74:43:8d:28:4c:1d:9d:2e:64:9e:c8: 68:27:50:3f:22:c4:56:6e:9e:65:a7:55:ec:ca:bc: 93:e9:2e:e5:fe:81:12:32:d4:5c:5b:67:2a:e5:f9: 43:be:c6:31:22:5c:27:72:df:44:97:8e:a4:88:26: f8:18:82:bd:9a:d2:6c:db:cb:34:14:5a:9c:8d:3e: e3:e1:21:95:20:05:35:2c:dc:80:02:b0:24:56:4d: 0f:b1:f0:f7:ca:24:de:e8:b5:91:4a:f5:d2:2b:a2: ad:7d:90:8e:92:33:8e:09:bc:47:d7:cd:b4:27:8c: 0e:96:cd:70:35:73:84:e2:bd:a3:b9:bd:d2:e5:a0: 6f:39:d8:aa:7a:d0:29:38:a5:b4:92:2b:1a:c9:93: ea:29:06:50:db:b6:b4:bc:7e:9b:9a:04:a5:f0:82: 8e:3b:3e:e7:7b:4c:ed:96:1a:72:14:f1:80:e1:6c: 00:b1:d6:79:7c:cf:38:69:63:24:01:a4:e9:40:77: 91:d8:69:6f:d8:97:44:31:a4:23:ce:8f:39:47:90: 30:c8:56:4d:07:a8:a5:be:73:78:b5:5e:75:6e:7b: a3:c0:2a:78:e1:db:86:8f:00:9b:fd:e7:a7:da:fc: ea:9f:ce:0d:7a:b3:f7:bc:80:03:15:d5:22:db:1a: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1E:5F:85:21:5E:57:27:DF:54:0C:B0:75:70:EA:D2:C0:10:87:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7711c7-62b1-3043-9dd8-11b25a1bf598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8c:dd:17:c5:25:2e:4e:dc:1f:03:2b:ea:4a:3e:4b:89:b5: 37:e8:e4:5a:3e:2b:b7:b8:b0:e9:19:67:e3:70:a8:11:d5:95: f9:af:64:af:2f:f2:c6:c9:a0:26:05:b6:ea:60:59:0d:90:ae: 98:72:ee:47:ef:b6:ba:3d:3b:ac:58:49:e0:2a:4e:5e:94:03: e9:ae:e0:aa:be:9e:71:40:ae:33:69:89:e4:c3:91:eb:6a:b0: d7:1c:05:84:87:0d:75:39:f6:e6:5c:d5:0b:c2:99:dd:5c:c8: e7:ab:04:df:fd:51:91:2f:09:0f:85:a1:dd:ef:95:63:50:a7: 2d:cb:af:fb:dd:04:6b:90:87:82:34:87:d1:9f:7c:15:9e:08: e2:b9:6d:04:96:f4:81:0f:05:f2:0e:8a:b6:55:d7:93:20:4a: 60:de:46:37:26:7c:63:1b:a9:3a:bf:48:fc:56:e0:86:a7:02: 1e:61:fb:89:13:91:c4:06:ca:0b:72:02:65:e5:3d:cb:05:ad: f9:dc:90:19:6c:28:73:d3:a9:f3:02:e3:a7:53:a3:85:67:3a: c4:ca:08:28:bd:6e:9d:c6:f4:87:31:e8:ce:a3:26:cd:d1:5c: 4c:54:cb:86:37:cd:a6:b7:53:4d:a8:9e:9d:7a:ff:b5:fb:ec: 58:13:f7:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4f0QPp7Y19yTDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODc2OWVlNzctZGQzNC00MDU3LWE0MTktN2JmZDZkOTlmMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBfIdEONKEwdnS5knshoJ1A/IsRWbp5lp1Xs yryT6S7l/oESMtRcW2cq5flDvsYxIlwnct9El46kiCb4GIK9mtJs28s0FFqcjT7j 4SGVIAU1LNyAArAkVk0PsfD3yiTe6LWRSvXSK6KtfZCOkjOOCbxH1820J4wOls1w NXOE4r2jub3S5aBvOdiqetApOKW0kisayZPqKQZQ27a0vH6bmgSl8IKOOz7ne0zt lhpyFPGA4WwAsdZ5fM84aWMkAaTpQHeR2Glv2JdEMaQjzo85R5AwyFZNB6ilvnN4 tV51bnujwCp44duGjwCb/een2vzqn84NerP3vIADFdUi2xpPVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4eX4UhXlcn31QMsHVw6tLAEIeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI3NzExYzctNjJiMS0z MDQzLTlkZDgtMTFiMjVhMWJmNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuM3RfFJS5O3B8DK+pKPkuJtTfo5Fo+K7e4sOkZZ+NwqBHVlfmvZK8v 8sbJoCYFtupgWQ2Qrphy7kfvtro9O6xYSeAqTl6UA+mu4Kq+nnFArjNpieTDketq sNccBYSHDXU59uZc1QvCmd1cyOerBN/9UZEvCQ+Fod3vlWNQpy3Lr/vdBGuQh4I0 h9GffBWeCOK5bQSW9IEPBfIOirZV15MgSmDeRjcmfGMbqTq/SPxW4IanAh5h+4kT kcQGygtyAmXlPcsFrfnckBlsKHPTqfMC46dTo4VnOsTKCCi9bp3G9Icx6M6jJs3R XExUy4Y3zaa3U02onp16/7X77FgT96U= -----END CERTIFICATE-----Generated at Sun Nov 2 14:45:40 2025 by rpki-client