$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa File: 2e094f0a-56a8-330f-bf07-59dec1498d9d.roa (raw, json) Hash identifier: sgIEwrdO1RvHd0IdiEouKC5pFMh6Z2sd+jn/3kY/3y0= Subject key identifier: B9:CC:A3:90:A4:57:4F:C3:A2:18:F5:35:1E:7A:55:40:F2:14:B3:27 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E5205821B4FD1425C0C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397217 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e5:20:58:21:b4:fd:14:25:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=0fca52ef-9175-4349-9bb4-d95aef48b78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:93:6f:5d:73:19:04:46:88:eb:06:56:39: b9:dd:ab:f7:67:85:02:39:b7:5d:07:cf:64:6c:dc: 44:4c:82:27:44:0b:ef:54:32:3c:33:46:b5:e6:5b: c4:e3:ed:c9:0d:e1:06:7e:dc:4f:9c:9b:ba:ab:a2: e3:74:65:25:e4:da:db:ad:0f:c5:eb:a7:f2:b6:4a: 38:cc:1f:7a:fc:57:5c:55:ed:2a:6d:d4:91:16:4b: 7e:8f:92:24:d2:11:e5:c3:13:bd:73:3a:9e:21:1e: 23:94:b1:85:9a:6a:b9:53:cf:5a:c4:51:ac:f3:f6: d7:46:6b:88:e4:3d:87:47:88:a4:aa:21:03:c3:b3: 1b:b6:c6:92:66:61:42:3a:23:6a:f5:50:2d:41:7b: d5:0b:5f:8b:08:f7:e2:a0:0e:71:5f:75:22:08:3e: 34:ee:cf:28:cb:1f:eb:86:15:5e:72:89:98:35:03: 4d:4b:5d:c8:9e:0a:d4:b7:a2:0f:c3:51:1b:aa:08: e9:37:68:e0:b9:16:79:a3:d4:92:97:bb:42:04:48: af:4a:70:b2:28:9e:58:16:54:41:89:88:68:fc:50: cd:10:d7:72:73:c6:ce:c3:67:80:6d:02:8c:fb:69: da:8e:42:d2:4a:ae:d8:fe:12:dd:c6:dc:9f:66:a9: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:A3:90:A4:57:4F:C3:A2:18:F5:35:1E:7A:55:40:F2:14:B3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2e094f0a-56a8-330f-bf07-59dec1498d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:60:cc:88:f8:19:de:52:db:01:6b:61:95:38:df:ea:9f:01: 65:70:e0:b1:43:4a:ad:9f:5e:65:68:d4:a0:e1:16:b4:af:fb: e1:38:f5:7b:dc:0b:5e:06:d1:b6:96:69:9d:56:9a:5d:01:b9: ee:07:01:d9:40:cd:3b:6e:a6:b2:c7:5d:3e:cf:a2:2d:27:cb: 88:44:66:92:fa:81:15:67:ff:01:28:a9:71:36:f4:bf:26:f7: 23:72:85:de:e5:a5:ea:b0:93:a1:4a:c5:a3:bd:b2:4e:31:12: 6c:56:ad:e0:72:4c:73:ec:b2:29:c7:4c:0f:18:49:da:a3:cf: 4e:dd:a0:6c:0a:a8:58:f3:3d:ff:70:4a:38:c7:77:e5:bf:be: b6:14:ea:7b:83:1f:60:1a:c8:95:ef:a5:cb:78:92:af:60:38: f0:e7:fb:d8:83:70:08:ca:aa:bc:52:6b:93:a0:26:56:c1:69: 52:cc:74:48:9a:38:e6:4c:7b:d7:8b:f5:8e:91:4e:a0:22:0a: 48:80:5d:b3:12:23:9c:f3:78:d8:6a:a6:4a:ca:85:5e:46:b4: 62:b5:60:d7:8f:e5:17:c2:db:0a:20:20:05:9c:99:9a:6e:52: e2:8f:97:6d:a8:57:f1:0d:15:42:ef:87:ba:8e:c5:59:93:6a: 92:00:ee:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eUgWCG0/RQlwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MGZjYTUyZWYtOTE3NS00MzQ5LTliYjQtZDk1YWVmNDhiNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9STb11zGQRGiOsGVjm53av3Z4UCObddB89k bNxETIInRAvvVDI8M0a15lvE4+3JDeEGftxPnJu6q6LjdGUl5NrbrQ/F66fytko4 zB96/FdcVe0qbdSRFkt+j5Ik0hHlwxO9czqeIR4jlLGFmmq5U89axFGs8/bXRmuI 5D2HR4ikqiEDw7MbtsaSZmFCOiNq9VAtQXvVC1+LCPfioA5xX3UiCD407s8oyx/r hhVecomYNQNNS13IngrUt6IPw1EbqgjpN2jguRZ5o9SSl7tCBEivSnCyKJ5YFlRB iYho/FDNENdyc8bOw2eAbQKM+2najkLSSq7Y/hLdxtyfZqlT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnMo5CkV0/Dohj1NR56VUDyFLMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmUwOTRmMGEtNTZhOC0z MzBmLWJmMDctNTlkZWMxNDk4ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1gzIj4Gd5S2wFrYZU43+qfAWVw4LFDSq2fXmVo1KDhFrSv++E49Xvc C14G0baWaZ1Wml0Bue4HAdlAzTtuprLHXT7Poi0ny4hEZpL6gRVn/wEoqXE29L8m 9yNyhd7lpeqwk6FKxaO9sk4xEmxWreByTHPssinHTA8YSdqjz07doGwKqFjzPf9w SjjHd+W/vrYU6nuDH2AayJXvpct4kq9gOPDn+9iDcAjKqrxSa5OgJlbBaVLMdEia OOZMe9eL9Y6RTqAiCkiAXbMSI5zzeNhqpkrKhV5GtGK1YNeP5RfC2wogIAWcmZpu UuKPl22oV/ENFULvh7qOxVmTapIA7lU= -----END CERTIFICATE-----Generated at Mon Nov 3 03:18:16 2025 by rpki-client