$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b2eb4f6-5eec-335b-838c-ac2738a9cb31.roa File: 8b2eb4f6-5eec-335b-838c-ac2738a9cb31.roa (raw, json) Hash identifier: xs6t2IazX4YzhPfGwzpiWtOF4CHNTsw6rv1ACH7UYsw= Subject key identifier: 35:DE:23:13:73:41:D0:7F:50:1D:F4:88:F5:56:53:05:A8:0B:08:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA2E88B98A6566E557980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b2eb4f6-5eec-335b-838c-ac2738a9cb31.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397220 IP address blocks: 156.154.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a2:e8:8b:98:a6:56:6e:55:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=1a9d02ff-9b5f-4a9a-b214-7cf9b30e5062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:9a:49:f5:f0:2f:1e:f9:0a:0c:be:27:c4: c8:8a:5a:7d:2b:90:c6:e7:3c:19:50:57:55:cb:10: e5:56:8c:2a:86:d6:c4:b1:03:ee:d7:3c:c5:cd:31: b3:e5:9d:15:05:6a:2d:7f:a1:72:e4:e6:d3:6a:22: fa:8e:76:df:76:1a:35:9a:be:fc:09:d0:75:1f:21: ff:cf:35:e7:98:be:33:84:00:26:db:a7:4f:33:5d: a8:7f:13:45:25:aa:c7:c5:d1:e8:7c:b8:ad:ad:d3: 6b:b3:fe:b1:96:ba:7e:59:16:d9:09:91:66:26:d0: f4:9f:8f:9e:8d:6a:3d:3f:83:a8:e0:fe:e4:2d:e8: d7:c1:ae:98:70:40:d7:c7:ae:bd:7e:63:84:23:83: 6c:c3:96:2b:b1:c3:a2:7b:fd:c5:09:ec:1c:75:95: 7b:1e:52:9f:81:45:5a:93:6c:c5:19:70:02:3f:90: 22:c1:2c:36:2f:18:86:de:e7:68:3f:6a:a7:dc:2e: d3:b4:6f:6b:89:71:a3:2c:8d:64:b7:7b:aa:01:9b: b6:cd:ab:6a:1e:41:90:8d:5b:9c:ae:e9:a6:1f:12: ef:59:7b:02:7b:ef:13:2d:ed:1a:2a:dc:7e:47:d1: db:08:4e:f2:e6:bb:d3:da:9e:bb:01:ab:cb:98:8d: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:23:13:73:41:D0:7F:50:1D:F4:88:F5:56:53:05:A8:0B:08:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8b2eb4f6-5eec-335b-838c-ac2738a9cb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e5:ed:d2:84:0f:00:7c:57:03:62:d4:6d:94:4e:9a:c3:e6: a8:54:45:f0:59:e8:1d:05:2b:c3:06:0f:17:4e:df:cf:7d:9b: 18:ea:ca:a1:c2:4d:34:e7:1d:3c:82:aa:09:e1:3b:47:1c:8f: 6a:8c:d4:b1:51:ee:35:8b:5f:4e:8a:1a:71:bd:a7:64:cf:75: 4b:40:24:43:bd:30:54:ab:fc:70:6e:f2:ff:37:67:48:99:2b: 59:46:14:35:5c:f3:d9:8b:ba:b2:d9:97:55:14:7c:3b:48:de: 4f:59:93:fe:af:0a:c4:69:84:6e:7c:fd:29:53:a6:56:16:3e: a8:d5:f0:68:be:59:f1:d6:10:0c:84:cd:4d:e9:b0:4f:dc:12: de:eb:64:87:b9:29:00:3d:d6:b9:b4:86:39:d9:cd:55:fb:18: 80:65:61:dd:7c:1e:e8:49:6f:e9:e1:bd:a5:6e:b7:45:de:da: 6e:29:a3:b7:61:f0:4a:88:83:29:86:0f:e2:ea:59:b1:5a:a2: 64:8b:8f:63:af:f1:ff:ac:f2:55:b0:f9:be:b8:88:dd:79:a3: 37:cd:6f:50:f5:7d:a6:ba:13:80:aa:80:d3:e9:47:7b:a3:98: 4e:ae:10:7f:02:b3:77:36:76:87:4c:f2:8f:bc:a6:43:28:05: 79:4d:5e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKLoi5imVm5VeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MWE5ZDAyZmYtOWI1Zi00YTlhLWIyMTQtN2NmOWIzMGU1MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDmaSfXwLx75Cgy+J8TIilp9K5DG5zwZUFdV yxDlVowqhtbEsQPu1zzFzTGz5Z0VBWotf6Fy5ObTaiL6jnbfdho1mr78CdB1HyH/ zzXnmL4zhAAm26dPM12ofxNFJarHxdHofLitrdNrs/6xlrp+WRbZCZFmJtD0n4+e jWo9P4Oo4P7kLejXwa6YcEDXx669fmOEI4Nsw5YrscOie/3FCewcdZV7HlKfgUVa k2zFGXACP5AiwSw2LxiG3udoP2qn3C7TtG9riXGjLI1kt3uqAZu2zatqHkGQjVuc rummHxLvWXsCe+8TLe0aKtx+R9HbCE7y5rvT2p67AavLmI1vpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXeIxNzQdB/UB30iPVWUwWoCwjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGIyZWI0ZjYtNWVlYy0z MzViLTgzOGMtYWMyNzM4YTljYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDl7dKEDwB8VwNi1G2UTprD5qhURfBZ6B0FK8MGDxdO3899mxjqyqHC TTTnHTyCqgnhO0ccj2qM1LFR7jWLX06KGnG9p2TPdUtAJEO9MFSr/HBu8v83Z0iZ K1lGFDVc89mLurLZl1UUfDtI3k9Zk/6vCsRphG58/SlTplYWPqjV8Gi+WfHWEAyE zU3psE/cEt7rZIe5KQA91rm0hjnZzVX7GIBlYd18HuhJb+nhvaVut0Xe2m4po7dh 8EqIgymGD+LqWbFaomSLj2Ov8f+s8lWw+b64iN15ozfNb1D1faa6E4CqgNPpR3uj mE6uEH8Cs3c2dodM8o+8pkMoBXlNXm4= -----END CERTIFICATE-----Generated at Thu Oct 30 15:40:21 2025 by rpki-client