$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/607d1d65-41f1-3664-ad0c-4cb37eae9010.roa File: 607d1d65-41f1-3664-ad0c-4cb37eae9010.roa (raw, json) Hash identifier: 0g+Nca5KdizgxxX9PvU5c95bDjWXmujgyxeLTqdsr8E= Subject key identifier: C0:08:F3:45:28:88:1B:05:4D:BC:F4:1B:1E:B6:08:26:8A:D7:7D:EA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F2852654ECB432ADF780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/607d1d65-41f1-3664-ad0c-4cb37eae9010.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f2:85:26:54:ec:b4:32:ad:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=472c0911-3bae-47c7-9b4d-037982351c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:e6:3d:5e:77:38:7a:f1:cd:15:d7:46:fb: a9:df:cf:12:30:56:ca:33:51:f0:11:d7:40:18:34: bb:94:3f:51:c2:df:96:b8:8b:2a:31:6e:8f:7d:52: 66:dd:d9:4a:16:0c:75:f8:4f:3a:fa:2d:e7:71:de: f1:30:70:8d:14:4b:b2:b8:3f:fd:18:2f:40:2f:c1: 21:e2:63:5a:a8:b0:fd:4c:b3:8a:c8:4e:bd:3f:25: 60:be:c2:e1:ce:0c:8c:fb:48:9f:67:91:c8:1f:a7: c2:45:98:74:a2:09:4f:cb:3e:a4:0a:eb:13:80:43: 6e:79:da:42:f4:3d:ed:10:ff:1a:51:cc:1f:ac:af: 3b:08:fc:28:90:75:15:74:d4:cf:e3:99:34:f2:85: 8c:40:49:06:10:e8:80:7b:2a:c8:4d:87:56:72:ca: 12:c1:4e:0b:31:c8:96:9f:6d:08:e9:cc:0d:69:fa: 14:ab:55:e0:59:38:d5:8a:f4:e5:68:62:4f:0a:02: 58:c8:95:07:4b:d9:83:20:64:7d:9d:44:9d:fc:3d: f0:e7:f8:75:b7:38:77:c3:84:09:66:51:38:20:10: 53:7d:86:3f:61:7e:27:a2:50:b6:72:de:66:71:33: 06:9b:75:4c:8d:4f:28:ed:f1:cd:75:db:32:c5:3f: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:F3:45:28:88:1B:05:4D:BC:F4:1B:1E:B6:08:26:8A:D7:7D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/607d1d65-41f1-3664-ad0c-4cb37eae9010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d5:27:ed:ec:7c:b2:84:3a:ec:b2:5a:4d:78:e9:4c:a1:69: b0:0b:70:24:56:6f:5f:b7:4a:86:f7:80:43:d2:1f:3f:21:e1: 67:80:ed:4d:86:34:ee:e2:07:98:93:a1:94:59:d2:bc:cd:a5: 02:7e:b9:a7:1d:77:2a:3c:50:47:ad:70:cc:a8:34:a0:36:c7: d2:10:60:ad:19:e4:88:03:4a:fb:69:8e:98:fd:31:72:47:6c: ad:eb:91:28:e0:6a:8e:b5:84:4b:58:3a:90:3c:df:25:73:9c: fd:22:40:54:05:53:65:b0:81:f3:d3:19:dd:30:99:d3:b5:9e: 7d:e8:14:c0:89:f0:24:61:98:4b:82:0a:d5:55:29:9d:85:31: 5a:d9:8b:47:a3:31:a6:b2:64:be:9b:26:b2:2a:47:e2:f9:a5: b8:ef:70:8a:79:1a:9d:75:71:84:06:93:c4:0f:d7:77:2b:de: 55:34:82:49:c2:5a:86:76:04:00:b9:a1:1a:6f:b7:57:8c:f5: be:69:43:43:4b:bb:24:f7:49:90:e3:df:64:5a:ce:c0:fa:7c: ae:40:95:8f:2d:d1:32:06:c8:85:9a:bf:fe:d1:fd:f6:ad:6f: 9f:0d:50:a8:67:4a:a1:3b:bf:ba:34:01:af:d4:2a:9f:b9:70: a2:26:b3:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fKFJlTstDKt94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDcyYzA5MTEtM2JhZS00N2M3LTliNGQtMDM3OTgyMzUxYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFPmPV53OHrxzRXXRvup388SMFbKM1HwEddA GDS7lD9Rwt+WuIsqMW6PfVJm3dlKFgx1+E86+i3ncd7xMHCNFEuyuD/9GC9AL8Eh 4mNaqLD9TLOKyE69PyVgvsLhzgyM+0ifZ5HIH6fCRZh0oglPyz6kCusTgENuedpC 9D3tEP8aUcwfrK87CPwokHUVdNTP45k08oWMQEkGEOiAeyrITYdWcsoSwU4LMciW n20I6cwNafoUq1XgWTjVivTlaGJPCgJYyJUHS9mDIGR9nUSd/D3w5/h1tzh3w4QJ ZlE4IBBTfYY/YX4nolC2ct5mcTMGm3VMjU8o7fHNddsyxT+kdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAI80UoiBsFTbz0Gx62CCaK133qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjA3ZDFkNjUtNDFmMS0z NjY0LWFkMGMtNGNiMzdlYWU5MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3VJ+3sfLKEOuyyWk146UyhabALcCRWb1+3Sob3gEPSHz8h4WeA7U2G NO7iB5iToZRZ0rzNpQJ+uacddyo8UEetcMyoNKA2x9IQYK0Z5IgDSvtpjpj9MXJH bK3rkSjgao61hEtYOpA83yVznP0iQFQFU2WwgfPTGd0wmdO1nn3oFMCJ8CRhmEuC CtVVKZ2FMVrZi0ejMaayZL6bJrIqR+L5pbjvcIp5Gp11cYQGk8QP13cr3lU0gknC WoZ2BAC5oRpvt1eM9b5pQ0NLuyT3SZDj32RazsD6fK5AlY8t0TIGyIWav/7R/fat b58NUKhnSqE7v7o0Aa/UKp+5cKIms+A= -----END CERTIFICATE-----Generated at Mon Nov 3 10:11:31 2025 by rpki-client