$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa File: 34343666-2d52-3393-8ab1-1eb7a039d51e.roa (raw, json) Hash identifier: Lp52hg86VPqG5Hi5GLqoqGJW8WBzadecwWyzMVLnwYo= Subject key identifier: FA:9B:61:A7:AB:E2:4A:D2:AB:81:5F:36:4E:2F:26:41:3D:7A:EB:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F5418522B10C0627ED00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f5:41:85:22:b1:0c:06:27:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d72a9184-ae03-4238-bd40-9c8b24903582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:f0:cf:3b:14:a8:a5:cc:52:11:c9:ca:86: f1:1c:f9:b7:13:7e:bf:54:4b:70:b9:0d:6b:29:b1: 7f:22:a7:d0:44:3e:7d:c3:6f:20:18:80:09:f3:60: 3c:f8:be:08:cf:13:d6:f3:ac:e4:d9:f6:b9:98:55: 57:1f:d6:e8:4d:ce:06:72:7c:48:6a:fa:45:11:f2: fc:30:6f:d4:09:4a:87:5b:b6:e3:cb:bd:ac:cf:6c: a0:54:cf:3f:00:d6:39:71:ea:38:e9:21:d8:e5:63: d0:61:3e:db:07:5d:04:2c:cd:2a:65:23:96:4f:62: ea:ad:ca:7e:71:8a:d9:4e:06:5f:66:0b:91:fd:c3: 31:bd:b8:c6:a7:8f:6b:a8:b7:dc:5c:16:cf:97:86: dd:de:b5:41:34:02:77:c0:8c:a1:c1:cf:41:c6:0d: 83:ef:4a:5a:1b:40:d1:c0:37:42:1a:0d:22:f5:11: 5a:70:9f:ef:57:0c:bf:71:32:e0:1d:c1:dc:38:a2: 0a:0a:5e:56:a3:3e:ad:f1:bc:56:0d:59:20:c5:f6: 77:ea:dd:32:c4:02:a1:3c:36:6a:96:d6:aa:93:dc: 92:14:d4:33:b9:a2:1c:d1:39:27:84:24:48:13:af: b4:0b:e4:c5:f6:7c:6f:2c:a4:2b:a4:91:15:d5:dc: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:61:A7:AB:E2:4A:D2:AB:81:5F:36:4E:2F:26:41:3D:7A:EB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/34343666-2d52-3393-8ab1-1eb7a039d51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:42:12:ca:b2:79:44:92:aa:1b:57:57:7a:af:6d:6d:32:ca: 89:56:ac:f2:8f:db:16:bf:09:9b:fa:6c:6b:64:b1:02:00:82: be:84:4a:f3:72:5e:22:bb:fc:be:4f:35:dc:c2:37:6e:88:42: 9c:0a:19:8b:5e:89:0d:7b:c6:6b:a9:b1:a9:f9:b2:a7:da:de: 2d:85:3b:42:d3:27:55:4d:24:5e:cc:ce:43:90:59:4d:13:35: 52:f4:0b:41:e7:4b:c4:13:fc:fe:48:29:e1:63:70:1a:14:ea: 34:24:7d:8c:46:80:10:ef:11:52:ff:46:ac:8e:11:b3:37:32: 45:50:44:45:a8:26:84:e9:43:ad:38:44:02:cb:94:1f:64:4c: 35:c6:f0:09:e6:f2:b9:39:44:7b:fa:59:f2:53:aa:cf:74:cc: f8:71:4c:99:da:2c:3e:f1:ec:4e:ef:01:e7:c8:4f:04:96:12: ed:ce:e3:0f:e1:2f:21:4a:53:80:86:26:b5:37:62:1f:dc:a5: 0d:ba:1d:53:65:2f:16:46:56:d6:35:06:74:85:82:23:24:ba: 34:53:96:11:3b:14:c5:d1:f9:bd:ca:40:d1:3a:6d:21:5b:a2: c2:69:64:6d:ec:4b:59:18:af:1f:13:5e:d2:b6:3f:c9:19:82: ae:7d:3f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fVBhSKxDAYn7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDcyYTkxODQtYWUwMy00MjM4LWJkNDAtOWM4YjI0OTAzNTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dHwzzsUqKXMUhHJyobxHPm3E36/VEtwuQ1r KbF/IqfQRD59w28gGIAJ82A8+L4IzxPW86zk2fa5mFVXH9boTc4GcnxIavpFEfL8 MG/UCUqHW7bjy72sz2ygVM8/ANY5ceo46SHY5WPQYT7bB10ELM0qZSOWT2Lqrcp+ cYrZTgZfZguR/cMxvbjGp49rqLfcXBbPl4bd3rVBNAJ3wIyhwc9Bxg2D70paG0DR wDdCGg0i9RFacJ/vVwy/cTLgHcHcOKIKCl5Woz6t8bxWDVkgxfZ36t0yxAKhPDZq ltaqk9ySFNQzuaIc0TknhCRIE6+0C+TF9nxvLKQrpJEV1dyjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqbYaer4krSq4FfNk4vJkE9euvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzQzNDM2NjYtMmQ1Mi0z MzkzLThhYjEtMWViN2EwMzlkNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExCEsqyeUSSqhtXV3qvbW0yyolWrPKP2xa/CZv6bGtksQIAgr6ESvNy XiK7/L5PNdzCN26IQpwKGYteiQ17xmupsan5sqfa3i2FO0LTJ1VNJF7MzkOQWU0T NVL0C0HnS8QT/P5IKeFjcBoU6jQkfYxGgBDvEVL/RqyOEbM3MkVQREWoJoTpQ604 RALLlB9kTDXG8Anm8rk5RHv6WfJTqs90zPhxTJnaLD7x7E7vAefITwSWEu3O4w/h LyFKU4CGJrU3Yh/cpQ26HVNlLxZGVtY1BnSFgiMkujRTlhE7FMXR+b3KQNE6bSFb osJpZG3sS1kYrx8TXtK2P8kZgq59P3c= -----END CERTIFICATE-----Generated at Mon Oct 27 08:20:28 2025 by rpki-client