$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa File: 939a6336-aae9-3493-918b-a3783c63d4c0.roa (raw, json) Hash identifier: KXpsA3q4fyjLrL6dV7Oo0HR/JQVl7TfP3hwAv8aXHNc= Subject key identifier: C4:36:79:30:9C:0D:5F:81:65:64:CB:35:04:FE:2E:0B:94:E9:9F:A9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FA1841E6D379E9D66000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fa:18:41:e6:d3:79:e9:d6:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=fcdbfdb3-66f4-4f7d-b959-7c826aa24dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:5a:fa:6c:8e:06:58:c4:ef:b9:91:b4:f6: 0b:cd:71:6f:9d:04:b0:7a:3c:86:da:b6:b2:ec:01: 0b:64:01:69:95:73:8f:15:fa:dd:84:32:6b:4c:f2: fc:2b:86:58:72:f3:34:d3:b3:5e:c4:88:7b:ba:61: 69:d7:3f:37:de:09:89:c9:a7:ce:3d:d1:05:c3:32: d0:7e:6d:ae:a6:0d:07:0e:0e:70:6c:9b:06:64:99: ce:03:9d:8b:53:d4:20:3e:81:b6:c2:d5:db:2a:85: ec:16:97:41:a5:1b:d8:3c:0d:8d:a9:11:bb:52:dc: f8:01:8a:c6:a4:6c:f2:9e:50:c2:1a:48:52:b7:47: 83:41:0c:65:9c:1e:39:bd:10:79:10:f0:c6:b5:66: 1f:33:90:47:60:d9:0d:57:59:41:72:9f:b1:fc:fe: 11:b5:66:41:95:ac:f1:b3:a8:b7:d1:93:b2:e1:21: 29:32:ba:b0:f4:d5:44:8a:0c:57:f8:2e:67:3e:b6: 17:f6:ba:af:27:70:47:01:82:16:e9:dc:39:d0:82: 86:1d:89:1b:f2:d0:25:44:a3:1e:22:3e:08:b4:28: f8:8f:a0:38:e1:80:30:91:a8:60:b2:90:95:82:fb: 0b:7f:44:cf:5e:29:6f:17:04:64:11:c9:16:9c:df: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:36:79:30:9C:0D:5F:81:65:64:CB:35:04:FE:2E:0B:94:E9:9F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/939a6336-aae9-3493-918b-a3783c63d4c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:63:79:38:ad:0f:0b:e1:e1:5d:64:48:bf:21:17:7b:9d:35: 28:cd:6e:17:6e:58:9e:c8:9d:f9:8e:e2:6c:22:4d:86:96:07: 63:34:82:a7:b2:dd:7f:50:e3:b5:71:7a:9a:ab:b7:ba:2d:90: c4:f9:5b:09:54:fa:e5:c7:3e:7f:f3:51:c3:64:94:8a:60:b1: 8e:5c:9e:67:1e:9a:1e:db:c4:87:22:34:7a:47:a3:78:17:f8: 4c:a6:bd:a5:bd:13:16:5d:b1:ef:03:b3:56:0f:c6:b9:28:39: 4b:e2:09:1a:61:97:8d:1f:da:e4:de:7f:c5:a3:7b:4a:f6:b1: b5:1e:28:ee:18:d0:b3:c9:e6:f8:cb:05:3e:fa:90:a5:bc:5a: be:a7:12:e0:a4:a4:18:40:26:d6:e4:d5:31:ae:ba:2a:fe:bb: 69:5c:13:ed:b6:62:ec:f1:57:77:77:c9:33:fe:35:bf:f6:e4: ae:f8:fa:84:53:05:6b:14:39:94:64:69:53:60:a4:a4:12:13: 73:7e:dc:a1:e9:d8:e1:7b:59:88:ca:c8:9c:d5:48:6e:81:e5: fd:c9:0f:b5:0d:9e:a1:fb:ef:6e:a1:bb:7c:1b:81:a1:8d:98: 8f:3c:73:33:94:e3:c4:e6:1b:90:60:0b:0e:9b:01:3f:a7:4f: 15:d7:ab:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4foYQebTeenWYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmNkYmZkYjMtNjZmNC00ZjdkLWI5NTktN2M4MjZhYTI0ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo1a+myOBljE77mRtPYLzXFvnQSwejyG2ray 7AELZAFplXOPFfrdhDJrTPL8K4ZYcvM007NexIh7umFp1z833gmJyafOPdEFwzLQ fm2upg0HDg5wbJsGZJnOA52LU9QgPoG2wtXbKoXsFpdBpRvYPA2NqRG7Utz4AYrG pGzynlDCGkhSt0eDQQxlnB45vRB5EPDGtWYfM5BHYNkNV1lBcp+x/P4RtWZBlazx s6i30ZOy4SEpMrqw9NVEigxX+C5nPrYX9rqvJ3BHAYIW6dw50IKGHYkb8tAlRKMe Ij4ItCj4j6A44YAwkahgspCVgvsLf0TPXilvFwRkEckWnN/39wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ2eTCcDV+BZWTLNQT+LguU6Z+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTM5YTYzMzYtYWFlOS0z NDkzLTkxOGItYTM3ODNjNjNkNGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdjeTitDwvh4V1kSL8hF3udNSjNbhduWJ7InfmO4mwiTYaWB2M0gqey 3X9Q47Vxepqrt7otkMT5WwlU+uXHPn/zUcNklIpgsY5cnmcemh7bxIciNHpHo3gX +EymvaW9ExZdse8Ds1YPxrkoOUviCRphl40f2uTef8Wje0r2sbUeKO4Y0LPJ5vjL BT76kKW8Wr6nEuCkpBhAJtbk1TGuuir+u2lcE+22YuzxV3d3yTP+Nb/25K74+oRT BWsUOZRkaVNgpKQSE3N+3KHp2OF7WYjKyJzVSG6B5f3JD7UNnqH7726hu3wbgaGN mI88czOU48TmG5BgCw6bAT+nTxXXqxw= -----END CERTIFICATE-----Generated at Thu Oct 30 15:30:18 2025 by rpki-client