$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/acb6ffe1-d7f1-3ce8-b287-c29d264cdf6e.roa File: acb6ffe1-d7f1-3ce8-b287-c29d264cdf6e.roa (raw, json) Hash identifier: OOcNSBDbF/SX9n/R8iMyt+1NGMvhB6mFxcSepGKNDX4= Subject key identifier: 92:12:6C:4C:C4:33:46:CE:5C:ED:11:05:77:AB:CF:28:15:78:D7:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1F308E047E38B2B459F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/acb6ffe1-d7f1-3ce8-b287-c29d264cdf6e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:f3:08:e0:47:e3:8b:2b:45:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7720b7e2-e862-43d1-996b-5bf37cccf3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:46:6d:23:cf:42:c7:db:a3:b5:b9:dc:3e:53: 95:d3:42:f2:13:3c:30:c6:9c:49:dc:c4:90:47:6f: 9e:84:68:ca:ef:7f:63:59:e0:a9:57:a2:58:5c:c4: 2b:99:ac:90:e6:b8:2c:26:48:b6:1d:26:0e:70:df: 17:ba:a6:69:54:d8:43:b2:ed:35:99:59:6e:2a:98: 05:d4:81:40:5f:43:bf:e8:3e:1a:82:6f:4a:ff:e3: 80:80:1c:fc:40:8b:a8:13:dd:c0:10:ff:8c:94:22: c8:65:49:b0:67:9d:fb:b2:72:bd:58:1f:4b:00:3c: ac:6c:9f:a8:b6:7a:05:b4:80:ca:09:8d:0d:c6:c6: bf:af:34:5a:0a:4a:ae:82:2b:36:af:01:ec:be:43: 5a:c4:f3:a7:61:df:b7:83:35:e8:3c:48:7a:ea:c2: 77:25:74:a5:0d:47:79:3d:22:c0:e3:2d:54:e6:8b: 15:d1:87:78:1a:b0:cc:01:40:e5:0a:3d:50:eb:49: f6:6d:b8:ec:a4:c7:e3:1a:5f:de:b9:5c:3c:55:3d: 0c:dd:28:5a:aa:e4:63:c7:82:8f:91:2d:bf:11:66: 41:f9:5e:29:d6:4f:ac:91:f9:f9:17:a3:96:f4:1b: a4:01:51:9a:87:e4:ff:1e:50:2b:6f:71:e9:44:fc: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:12:6C:4C:C4:33:46:CE:5C:ED:11:05:77:AB:CF:28:15:78:D7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/acb6ffe1-d7f1-3ce8-b287-c29d264cdf6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:33:b4:d5:4a:66:84:0e:57:e8:ea:53:95:4f:9e:47:4b:bd: 0b:ce:2a:bc:79:b1:62:8b:28:29:74:64:38:32:e8:5f:36:42: b4:a6:60:e7:96:31:7a:1b:25:26:1b:9f:64:50:f9:26:3d:9b: b6:d2:dd:58:bc:68:d5:9f:90:da:bb:a2:20:69:bf:10:87:58: ca:2c:dc:4d:53:b4:87:3d:9a:7d:ee:f2:fa:c4:e9:66:c9:a0: 2b:f6:0d:63:89:9a:85:0c:ac:04:c6:b4:a9:fc:6b:e4:e2:ca: ae:18:70:a1:46:28:ff:cd:3f:b8:a7:e7:07:94:45:39:5a:8e: 21:49:a9:69:cd:30:19:8b:75:33:9b:8c:ab:c1:80:c2:53:cc: 3b:ee:7e:2e:f1:65:94:ae:9f:a2:62:e5:41:eb:06:c0:c4:10: f0:20:e9:2f:2c:19:62:25:16:b6:81:5f:f7:64:d6:f1:04:b5: 89:a7:57:c9:53:c9:b6:03:d3:bf:c6:d3:8b:5f:c9:67:8c:df: 3b:6e:09:e3:9d:3b:a0:89:c7:40:8d:9c:50:84:1e:a1:f7:ca: 6f:26:08:47:74:b1:c1:d0:32:91:02:01:18:1a:20:a2:c7:5e: b6:8d:23:ce:dd:15:41:3f:3a:5a:74:02:74:b6:e0:f8:6d:d7: 32:52:fe:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4fMI4EfjiytFn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzcyMGI3ZTItZTg2Mi00M2QxLTk5NmItNWJmMzdjY2NmM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkZtI89Cx9ujtbncPlOV00LyEzwwxpxJ3MSQ R2+ehGjK739jWeCpV6JYXMQrmayQ5rgsJki2HSYOcN8XuqZpVNhDsu01mVluKpgF 1IFAX0O/6D4agm9K/+OAgBz8QIuoE93AEP+MlCLIZUmwZ537snK9WB9LADysbJ+o tnoFtIDKCY0Nxsa/rzRaCkqugis2rwHsvkNaxPOnYd+3gzXoPEh66sJ3JXSlDUd5 PSLA4y1U5osV0Yd4GrDMAUDlCj1Q60n2bbjspMfjGl/euVw8VT0M3ShaquRjx4KP kS2/EWZB+V4p1k+skfn5F6OW9BukAVGah+T/HlArb3HpRPzFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJISbEzEM0bOXO0RBXerzygVeNe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWNiNmZmZTEtZDdmMS0z Y2U4LWIyODctYzI5ZDI2NGNkZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYztNVKZoQOV+jqU5VPnkdLvQvOKrx5sWKLKCl0ZDgy6F82QrSmYOeW MXobJSYbn2RQ+SY9m7bS3Vi8aNWfkNq7oiBpvxCHWMos3E1TtIc9mn3u8vrE6WbJ oCv2DWOJmoUMrATGtKn8a+Tiyq4YcKFGKP/NP7in5weURTlajiFJqWnNMBmLdTOb jKvBgMJTzDvufi7xZZSun6Ji5UHrBsDEEPAg6S8sGWIlFraBX/dk1vEEtYmnV8lT ybYD07/G04tfyWeM3ztuCeOdO6CJx0CNnFCEHqH3ym8mCEd0scHQMpECARgaIKLH XraNI87dFUE/Olp0AnS24Pht1zJS/m8= -----END CERTIFICATE-----Generated at Mon Oct 27 08:26:37 2025 by rpki-client