$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa File: 9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa (raw, json) Hash identifier: 1x0lRD7E0vFriH/LRX7UcsKeL8Ejxngcx+W3zS8U4IU= Subject key identifier: A1:5D:6E:15:EF:65:EA:9B:7B:89:4B:69:8C:16:9E:EB:BC:89:36:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C84293FE17D81E35F4880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397223 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:84:29:3f:e1:7d:81:e3:5f:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=8b1d706f-b88d-4b1a-8783-158616e3a933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:d8:5f:a5:ba:ad:2b:c5:b6:df:f5:14:aa: f1:df:71:57:29:e7:21:69:43:15:0a:eb:ab:2f:97: 1d:d4:c9:18:d0:fe:bb:36:9a:87:b2:54:48:25:dd: 72:4c:e1:85:c8:7b:6c:5e:9b:4c:6a:7b:70:14:51: 64:34:4b:0b:2a:e5:3c:c8:73:06:3a:0a:28:7b:b7: e5:92:ea:44:a3:a8:d7:7a:8b:47:8d:86:3b:25:9d: 43:9b:32:fd:55:f4:75:10:50:b2:5b:a9:a3:00:2b: f0:23:ef:9f:e8:6b:53:5f:15:95:b9:5d:d2:ff:bc: 40:39:e2:b6:76:f9:9d:b8:1c:25:1a:fc:02:e1:a5: 61:43:21:c9:64:98:e8:7a:ed:50:15:11:51:bf:f3: cd:50:a2:75:97:b7:c1:68:4c:d6:89:fa:23:fa:08: 7b:02:e1:5a:fa:8c:ee:67:9b:09:c5:2e:1f:79:aa: 40:ec:72:12:b7:da:59:95:a2:40:40:61:eb:8c:67: 27:5e:29:cc:69:71:eb:07:bd:8a:9c:44:dc:41:c4: 6d:0d:d7:7c:5f:28:32:b7:ed:28:44:85:11:f5:e6: 67:5a:86:fe:10:48:3f:b0:82:fd:e9:a2:1d:2e:31: 7b:d6:00:d5:4e:99:f9:94:7e:24:29:58:19:89:08: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:6E:15:EF:65:EA:9B:7B:89:4B:69:8C:16:9E:EB:BC:89:36:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9f4004c2-b73d-32e1-9e6c-2a919903df3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:be:a0:2f:0a:d1:45:0e:7e:71:cf:c9:15:73:72:6e:e7:82: 8d:fe:81:36:7f:90:14:da:a6:82:1f:a1:2c:34:a7:e5:02:47: 69:e5:59:05:1a:78:3b:99:f8:05:2b:ea:0f:50:0f:58:3b:11: 92:04:39:b1:e5:32:5c:a0:12:c7:b6:65:e5:40:68:b0:63:17: 81:30:c3:04:c9:88:d3:d6:81:c2:82:2a:6c:e0:e3:10:c1:b9: c9:17:7e:7d:2a:4d:46:51:c4:3a:7a:20:c4:a1:2c:5c:c0:eb: 1e:cb:5e:b7:85:b9:e3:aa:8e:02:c4:f0:e0:2d:24:c1:a8:90: 6f:29:41:52:b6:fc:ae:0d:05:d9:03:83:72:26:c3:bd:6b:65: d2:95:4c:aa:56:d5:11:3d:58:b9:f6:56:88:7b:43:5e:57:52: fd:a9:25:5d:e2:88:e5:b5:7f:b5:17:5e:e5:98:e1:e9:91:f4: ab:ac:76:01:57:8f:12:18:f1:f9:ca:25:fa:88:93:24:c8:b3: 3f:3a:7c:18:85:2e:66:f2:b0:28:e6:eb:43:de:ec:6c:85:0e: fb:b1:2b:b5:2f:b7:f4:48:d0:43:e7:96:bb:ba:d0:0e:6f:04: 52:1f:13:b1:f3:5b:84:9b:04:be:d0:1e:bf:34:b3:6d:2b:57: f0:1c:d5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIQpP+F9geNfSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OGIxZDcwNmYtYjg4ZC00YjFhLTg3ODMtMTU4NjE2ZTNhOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9jYX6W6rSvFtt/1FKrx33FXKechaUMVCuur L5cd1MkY0P67NpqHslRIJd1yTOGFyHtsXptMantwFFFkNEsLKuU8yHMGOgooe7fl kupEo6jXeotHjYY7JZ1DmzL9VfR1EFCyW6mjACvwI++f6GtTXxWVuV3S/7xAOeK2 dvmduBwlGvwC4aVhQyHJZJjoeu1QFRFRv/PNUKJ1l7fBaEzWifoj+gh7AuFa+ozu Z5sJxS4feapA7HISt9pZlaJAQGHrjGcnXinMaXHrB72KnETcQcRtDdd8Xygyt+0o RIUR9eZnWob+EEg/sIL96aIdLjF71gDVTpn5lH4kKVgZiQjDIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFdbhXvZeqbe4lLaYwWnuu8iTYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWY0MDA0YzItYjczZC0z MmUxLTllNmMtMmE5MTk5MDNkZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC+oC8K0UUOfnHPyRVzcm7ngo3+gTZ/kBTapoIfoSw0p+UCR2nlWQUa eDuZ+AUr6g9QD1g7EZIEObHlMlygEse2ZeVAaLBjF4EwwwTJiNPWgcKCKmzg4xDB uckXfn0qTUZRxDp6IMShLFzA6x7LXreFueOqjgLE8OAtJMGokG8pQVK2/K4NBdkD g3Imw71rZdKVTKpW1RE9WLn2Voh7Q15XUv2pJV3iiOW1f7UXXuWY4emR9KusdgFX jxIY8fnKJfqIkyTIsz86fBiFLmbysCjm60Pe7GyFDvuxK7Uvt/RI0EPnlru60A5v BFIfE7HzW4SbBL7QHr80s20rV/Ac1e8= -----END CERTIFICATE-----Generated at Mon Nov 3 10:14:25 2025 by rpki-client