$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa File: 9857cae2-4739-3d30-88c9-a5e631859a2a.roa (raw, json) Hash identifier: E+f8/kozlcdfNaDjO7a2Pe/PU/pMAMirlnUa2/nggV8= Subject key identifier: BA:AF:60:11:FA:A8:B3:5A:36:75:03:93:B8:00:DD:A0:49:59:69:AE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3708FD3C295EE0A4ED4380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397220 IP address blocks: 156.154.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:08:fd:3c:29:5e:e0:a4:ed:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=71f4bbde-9ae6-40ae-a469-a1b8add770d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:6e:2d:5e:ef:29:d6:cb:db:75:83:5c:2b: 59:37:e4:23:10:60:7d:ed:5f:9c:9f:37:90:f5:11: 0e:8d:a8:18:20:f7:dd:01:b4:f0:af:d3:3e:e3:b5: 21:18:d6:0d:07:a4:48:68:50:f5:71:58:eb:1d:cd: de:0e:1e:c7:6b:97:ba:78:5c:bb:19:96:d1:4f:21: db:0b:8f:64:e5:c2:0c:7d:a4:46:7e:82:24:2c:1a: 24:d4:66:02:fd:24:72:f2:7f:98:ac:19:cd:da:ae: f6:e5:0e:30:71:82:6a:ca:ba:fe:53:64:d9:23:f2: 14:09:b1:d4:ed:84:14:3d:41:6e:5e:f5:56:93:78: 31:86:e1:64:c7:3a:94:e4:ab:12:8f:ae:26:34:ee: e4:07:f5:c3:99:45:39:4b:e5:90:c6:6b:22:1f:38: 60:46:b5:7d:a8:fa:e0:a9:19:da:74:d6:8c:3d:e0: 6a:b0:33:b1:24:3e:6f:b2:74:7e:d4:a8:e7:59:d9: 2f:a1:fe:2e:6d:9e:ca:57:19:8d:2e:24:06:cc:f1: fb:7b:5e:a5:f4:86:71:ed:2b:41:55:f4:e4:e8:2d: 86:aa:eb:33:7d:fd:71:44:3d:60:01:1a:5e:9f:46: 14:ed:71:45:fd:d1:5f:ba:10:37:a5:9a:37:85:70: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:60:11:FA:A8:B3:5A:36:75:03:93:B8:00:DD:A0:49:59:69:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9857cae2-4739-3d30-88c9-a5e631859a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:df:a0:5b:f7:f9:41:b8:e5:7f:ba:d9:ce:1c:0a:7a:c2:8b: bf:a7:8b:ca:33:fc:ec:49:ed:ab:f5:4a:fb:c1:55:65:f3:7c: 98:7b:49:54:cc:87:ef:25:7e:fe:6c:e5:9c:a9:df:6b:ff:0f: 4d:26:f5:e4:78:b7:56:f5:d5:b7:57:1b:0e:5a:a5:ac:ba:3d: e4:97:8e:0a:3b:11:15:15:8a:e6:4e:e4:b5:08:8a:b7:2d:4b: c8:f0:10:56:dc:fc:77:3b:79:c4:66:dd:98:b2:d3:a8:df:98: 08:44:42:4a:04:1b:ec:56:07:77:58:9e:59:22:ee:e3:5e:11: 75:a6:1b:37:72:6a:de:10:5f:9c:a3:11:d8:99:05:ae:47:5e: 2c:a0:f6:2b:a5:8b:c6:cf:65:cb:9b:0f:80:b4:9e:b3:63:ab: 95:ae:ac:2a:f7:57:30:c8:3a:28:bf:c9:8d:28:ed:02:14:38: 1c:fb:95:9b:c6:80:de:f0:38:7b:b8:cd:91:f4:8d:46:5a:b3: 6a:2f:0b:0d:09:03:7f:a2:8b:3e:e7:25:79:ef:05:b9:a2:80: ab:cf:7e:67:a9:97:43:2e:3e:fd:03:bc:64:cb:14:b4:fa:e7: 9e:8a:a2:bd:85:41:dc:7b:56:f5:8b:02:8f:90:d6:44:a5:15: be:8f:56:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwj9PCle4KTtQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzFmNGJiZGUtOWFlNi00MGFlLWE0NjktYTFiOGFkZDc3MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFFuLV7vKdbL23WDXCtZN+QjEGB97V+cnzeQ 9REOjagYIPfdAbTwr9M+47UhGNYNB6RIaFD1cVjrHc3eDh7Ha5e6eFy7GZbRTyHb C49k5cIMfaRGfoIkLBok1GYC/SRy8n+YrBnN2q725Q4wcYJqyrr+U2TZI/IUCbHU 7YQUPUFuXvVWk3gxhuFkxzqU5KsSj64mNO7kB/XDmUU5S+WQxmsiHzhgRrV9qPrg qRnadNaMPeBqsDOxJD5vsnR+1KjnWdkvof4ubZ7KVxmNLiQGzPH7e16l9IZx7StB VfTk6C2Gquszff1xRD1gARpen0YU7XFF/dFfuhA3pZo3hXCdvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqvYBH6qLNaNnUDk7gA3aBJWWmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTg1N2NhZTItNDczOS0z ZDMwLTg4YzktYTVlNjMxODU5YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjfoFv3+UG45X+62c4cCnrCi7+ni8oz/OxJ7av1SvvBVWXzfJh7SVTM h+8lfv5s5Zyp32v/D00m9eR4t1b11bdXGw5apay6PeSXjgo7ERUViuZO5LUIirct S8jwEFbc/Hc7ecRm3Ziy06jfmAhEQkoEG+xWB3dYnlki7uNeEXWmGzdyat4QX5yj EdiZBa5HXiyg9iuli8bPZcubD4C0nrNjq5WurCr3VzDIOii/yY0o7QIUOBz7lZvG gN7wOHu4zZH0jUZas2ovCw0JA3+iiz7nJXnvBbmigKvPfmepl0MuPv0DvGTLFLT6 556Kor2FQdx7VvWLAo+Q1kSlFb6PViA= -----END CERTIFICATE-----Generated at Sun Sep 14 13:48:46 2025 by rpki-client