$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fdd6664-635b-38a7-83d1-a7ab262a05e6.roa File: 2fdd6664-635b-38a7-83d1-a7ab262a05e6.roa (raw, json) Hash identifier: SuK7QCcTpnU7j6Y2OL8DukXgC0yqrdaAcZpo5wlF73Y= Subject key identifier: F1:70:E9:5E:74:9F:C6:60:3A:A8:DD:4D:42:BA:74:4F:A5:6F:86:8A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3707CA62B308000D086B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fdd6664-635b-38a7-83d1-a7ab262a05e6.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:07:ca:62:b3:08:00:0d:08:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4553be97-2cc5-4daf-a66b-25830f37d161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:27:b8:c2:a1:aa:ab:d2:ba:2c:ae:26:12: 21:81:f7:a1:a3:42:38:54:21:0b:4e:60:7d:31:45: 6d:82:55:83:79:98:b8:33:94:79:1d:79:85:4c:8c: 1d:b7:bd:b3:a3:dd:e9:46:6d:29:f4:42:6f:0c:16: 6f:3a:bb:49:40:a4:df:7a:05:02:a9:a5:9b:07:c3: 06:1d:3f:86:cf:70:d6:d1:7d:3f:2f:a8:25:83:7d: f1:7b:87:4b:cc:0d:37:7d:e8:4a:6f:5a:b8:d8:4d: 87:a7:bb:7b:4d:5e:52:c5:55:ae:bf:30:8a:6e:ef: 79:cc:fe:16:68:eb:04:2c:3f:9d:d5:7f:ae:e4:bc: b5:4b:78:78:cf:1b:a6:fa:fa:10:b9:7d:ad:46:d1: f6:76:1e:0d:73:a4:b3:f4:13:f9:10:df:d5:75:1e: a9:d1:c8:f2:90:78:64:41:6e:c7:3b:b8:37:07:88: e1:be:6e:11:32:30:8f:e1:da:db:bb:16:96:d9:00: d4:93:9d:42:64:c0:3c:9f:97:80:6c:40:04:50:ee: b0:34:40:81:56:68:35:b7:85:76:8c:21:5d:67:f9: 1b:7e:6e:b9:28:fc:2a:71:f6:54:05:99:95:97:74: 76:ae:cc:49:fb:b7:2d:bb:c6:b9:82:94:5b:ce:83: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:E9:5E:74:9F:C6:60:3A:A8:DD:4D:42:BA:74:4F:A5:6F:86:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2fdd6664-635b-38a7-83d1-a7ab262a05e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:7a:f8:f8:80:b9:07:29:ae:cb:29:f3:7d:06:8d:b5:35: a8:92:81:71:54:4c:75:c3:06:34:7e:d7:66:3a:a4:1f:ff:12: 6e:e1:fb:a1:2c:ae:ec:46:d0:55:59:89:98:92:e2:24:15:5f: 63:65:6a:2a:ad:9d:d2:23:71:a4:43:67:b1:3e:9b:f6:b8:72: 40:fe:00:9b:a1:86:da:40:09:4f:a0:34:f3:d5:0f:c0:5a:c1: 07:f7:3c:36:37:ab:c1:34:89:7b:6e:48:4d:a5:d7:29:12:c6: f9:f0:49:84:b7:50:a3:0d:f8:45:80:db:0a:1d:12:96:99:11: 2b:1e:27:54:8b:a4:a0:8b:12:95:4e:6e:28:31:cd:7e:cb:44: 7d:e1:73:f6:99:fe:d7:95:8a:7c:d8:48:82:f2:7b:21:86:e1: c3:6f:d5:5c:fd:e3:03:ce:5c:64:7e:aa:b5:d9:2a:57:1d:de: 6d:6e:f5:7b:8a:43:e7:46:0a:d6:ca:36:26:24:c0:c8:68:9f: 02:25:a8:9b:15:e0:62:73:1a:53:7d:b5:1c:8f:ce:5e:a7:bf: 2e:93:b2:90:16:52:19:18:c8:f6:86:27:89:f5:0f:05:4b:82: 08:d1:a0:93:15:b9:72:ca:69:1b:f7:e7:52:db:af:71:7e:30: a3:16:b1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwfKYrMIAA0Ia4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDU1M2JlOTctMmNjNS00ZGFmLWE2NmItMjU4MzBmMzdkMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaQnuMKhqqvSuiyuJhIhgfeho0I4VCELTmB9 MUVtglWDeZi4M5R5HXmFTIwdt72zo93pRm0p9EJvDBZvOrtJQKTfegUCqaWbB8MG HT+Gz3DW0X0/L6glg33xe4dLzA03fehKb1q42E2Hp7t7TV5SxVWuvzCKbu95zP4W aOsELD+d1X+u5Ly1S3h4zxum+voQuX2tRtH2dh4Nc6Sz9BP5EN/VdR6p0cjykHhk QW7HO7g3B4jhvm4RMjCP4drbuxaW2QDUk51CZMA8n5eAbEAEUO6wNECBVmg1t4V2 jCFdZ/kbfm65KPwqcfZUBZmVl3R2rsxJ+7ctu8a5gpRbzoN5XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFw6V50n8ZgOqjdTUK6dE+lb4aKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmZkZDY2NjQtNjM1Yi0z OGE3LTgzZDEtYTdhYjI2MmEwNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG08evj4gLkHKa7LKfN9Bo21NaiSgXFUTHXDBjR+12Y6pB//Em7h+6Es ruxG0FVZiZiS4iQVX2NlaiqtndIjcaRDZ7E+m/a4ckD+AJuhhtpACU+gNPPVD8Ba wQf3PDY3q8E0iXtuSE2l1ykSxvnwSYS3UKMN+EWA2wodEpaZESseJ1SLpKCLEpVO bigxzX7LRH3hc/aZ/teVinzYSILyeyGG4cNv1Vz94wPOXGR+qrXZKlcd3m1u9XuK Q+dGCtbKNiYkwMhonwIlqJsV4GJzGlN9tRyPzl6nvy6TspAWUhkYyPaGJ4n1DwVL ggjRoJMVuXLKaRv351Lbr3F+MKMWsfA= -----END CERTIFICATE-----Generated at Sun Sep 14 13:16:31 2025 by rpki-client