$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa File: 89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa (raw, json) Hash identifier: gEDH/FkXi0qWB0TWCe7G2Uq3SVW7uXy+FMQcM7sSbFk= Subject key identifier: 7A:6F:CA:B4:55:5A:7C:22:D2:7C:51:9D:B7:B5:C0:4D:29:EC:BF:56 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3706FFA82AA9060169AB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:06:ff:a8:2a:a9:06:01:69:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3ccde802-798a-4668-adde-84530bbdd116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:b3:34:57:93:dd:26:bb:06:f7:af:bf:b5: f4:90:a5:29:3e:a8:41:6b:20:a9:f0:d2:cf:72:6e: b1:6a:d0:dd:06:c1:2c:0e:2d:5e:7f:ef:4d:1f:dd: 33:e6:fc:84:b9:d7:ef:75:9f:33:ff:89:71:ae:bd: 7b:27:75:c5:f0:c0:ca:60:1d:f5:b3:34:91:17:4f: 83:ae:ed:00:11:dc:f0:d2:c7:2a:d1:0d:03:be:6b: d6:9e:df:3d:93:07:ff:65:d2:2f:ee:99:e5:3e:0c: d6:40:d6:78:1e:a2:47:ea:6e:d6:59:de:08:05:60: 15:4e:16:18:aa:c4:f8:52:92:d3:0d:20:57:cd:39: 65:9e:53:f2:32:70:f9:76:d7:3f:52:79:e7:ad:77: 4a:62:37:49:0a:1e:30:f3:f8:91:bb:27:ad:66:ae: d5:ba:d9:95:1b:8a:2f:30:16:0d:30:c6:40:5e:b7: 29:69:cc:6e:39:bd:4e:d4:75:8a:af:42:8a:48:62: 9a:45:96:62:6c:16:38:04:7f:1f:31:66:de:fa:42: 79:3e:79:3d:12:b0:cf:f1:00:9d:ca:d4:31:19:48: 8f:a6:ad:28:04:41:1b:ec:f1:20:d6:1d:5b:34:98: e3:91:fd:ff:7e:89:da:6c:f1:f4:88:ac:29:e6:40: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6F:CA:B4:55:5A:7C:22:D2:7C:51:9D:B7:B5:C0:4D:29:EC:BF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89cf8cbf-1b3f-3423-817f-650f2f2ad124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:98:25:c8:e6:b0:f8:9f:0d:cc:59:be:43:e2:e4:c4:84:7b: c2:fd:d1:a0:97:23:27:75:56:98:19:1e:9a:e9:d0:13:31:73: 6e:0f:d8:7a:ad:f0:a9:32:13:06:12:2d:fb:cc:74:3b:f8:b9: f0:03:00:cd:86:d2:7b:88:ff:5e:58:d9:a0:a1:b9:79:d7:39: 33:67:81:45:a8:3b:c3:b2:5a:b5:14:b6:f0:ca:25:0b:c8:f4: 5b:b3:94:54:95:22:ac:b6:ea:69:2a:e0:80:e3:1d:cb:1f:44: 86:b4:62:66:49:cb:99:19:db:5c:55:09:0b:f2:d0:3e:dd:5b: 24:d9:be:a1:2f:28:53:2e:81:b4:d4:98:e4:be:d1:fa:8a:f7: 4d:20:fd:f4:f1:48:c2:e5:e5:ca:6d:f7:cf:1c:a8:7a:07:30: a3:80:4a:7b:92:04:89:af:62:a7:60:78:38:76:b0:21:10:aa: 34:4f:a1:0a:51:88:27:49:f3:96:76:d9:df:c2:1c:aa:92:d8: ee:e9:9c:dd:a5:ee:d9:59:97:fc:a8:a0:50:41:f2:db:b8:88: 7d:ca:0e:7b:c0:41:37:e0:b0:d1:ea:54:bf:fc:cb:62:3b:50: 05:9a:de:be:74:52:61:a7:f0:d4:c3:d4:de:a4:a4:21:bb:c2: 6e:e2:a5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwb/qCqpBgFpq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2NjZGU4MDItNzk4YS00NjY4LWFkZGUtODQ1MzBiYmRkMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGzNFeT3Sa7Bvevv7X0kKUpPqhBayCp8NLP cm6xatDdBsEsDi1ef+9NH90z5vyEudfvdZ8z/4lxrr17J3XF8MDKYB31szSRF0+D ru0AEdzw0scq0Q0DvmvWnt89kwf/ZdIv7pnlPgzWQNZ4HqJH6m7WWd4IBWAVThYY qsT4UpLTDSBXzTllnlPyMnD5dtc/UnnnrXdKYjdJCh4w8/iRuyetZq7VutmVG4ov MBYNMMZAXrcpacxuOb1O1HWKr0KKSGKaRZZibBY4BH8fMWbe+kJ5Pnk9ErDP8QCd ytQxGUiPpq0oBEEb7PEg1h1bNJjjkf3/fonabPH0iKwp5kDt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpvyrRVWnwi0nxRnbe1wE0p7L9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODljZjhjYmYtMWIzZi0z NDIzLTgxN2YtNjUwZjJmMmFkMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2YJcjmsPifDcxZvkPi5MSEe8L90aCXIyd1VpgZHprp0BMxc24P2Hqt 8KkyEwYSLfvMdDv4ufADAM2G0nuI/15Y2aChuXnXOTNngUWoO8OyWrUUtvDKJQvI 9FuzlFSVIqy26mkq4IDjHcsfRIa0YmZJy5kZ21xVCQvy0D7dWyTZvqEvKFMugbTU mOS+0fqK900g/fTxSMLl5cpt988cqHoHMKOASnuSBImvYqdgeDh2sCEQqjRPoQpR iCdJ85Z22d/CHKqS2O7pnN2l7tlZl/yooFBB8tu4iH3KDnvAQTfgsNHqVL/8y2I7 UAWa3r50UmGn8NTD1N6kpCG7wm7ipZA= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:03 2025 by rpki-client