$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa File: b0098994-e091-3b88-b400-059fea6aa184.roa (raw, json) Hash identifier: SNOPxeLNisQHZvav0Z8JuzkN1rnDSdsAvAExUqvgPBU= Subject key identifier: 2B:AF:3D:46:A1:C9:8B:65:02:CC:50:DA:F2:31:5A:8B:71:AE:7D:5A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F8021ABB1ACE64B735E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397215 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f8:02:1a:bb:1a:ce:64:b7:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0f6cef1f-2b15-4ac9-bfb8-5dcbac5bd547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:50:3c:e3:47:8f:59:55:9e:6d:83:4d:29: c8:da:54:c6:72:11:1c:1d:66:17:b4:e8:a7:7e:ac: 82:23:5c:de:32:f3:72:6b:65:05:58:8a:fd:b2:f8: 6c:d6:a2:d8:9a:21:17:59:53:3b:0c:43:31:66:78: a7:1a:c0:e4:92:e8:72:68:90:41:e4:c3:fd:3b:35: 2a:2c:f5:3e:cf:7b:29:b6:96:6c:6c:57:06:bc:61: aa:c8:cb:ed:10:78:6e:b9:66:49:06:e0:b2:50:e0: c6:c0:96:c9:05:09:fe:9c:3e:ae:96:a3:71:f8:27: 8e:c2:4f:c3:49:97:f6:c9:06:73:db:61:97:0a:01: 54:fb:fb:ce:85:23:f2:88:ec:bc:ee:9a:76:d3:13: aa:08:26:45:bc:1e:ae:91:24:92:10:1a:fe:f8:2f: bf:c2:7e:f7:c5:0f:48:62:ad:a4:df:94:c0:89:df: 9a:c7:ba:f8:66:85:24:89:41:ea:86:e6:cb:f5:08: cc:ce:23:9f:7f:03:13:5e:94:61:47:2a:04:8a:50: 44:d5:38:8f:6f:20:db:48:9f:9d:1b:28:5f:98:34: 35:e2:31:4d:99:45:64:42:6d:ef:9a:a8:f3:f5:93: 59:78:41:52:90:bf:75:f5:a8:28:19:cf:80:73:7b: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AF:3D:46:A1:C9:8B:65:02:CC:50:DA:F2:31:5A:8B:71:AE:7D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b0098994-e091-3b88-b400-059fea6aa184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:46:f7:3d:0a:a1:ed:26:f5:29:28:e1:41:58:35:4d:41:de: 11:c3:ef:b1:ba:67:40:d2:01:c7:59:25:68:0e:13:ea:67:18: f5:8d:6f:73:14:c4:1d:66:a0:5a:f8:0d:1d:75:6e:57:9a:b5: 9a:03:8b:77:30:16:2f:ff:60:e6:bc:27:52:c0:1d:35:46:2f: e1:f4:ed:7c:93:50:30:c5:16:d9:18:ba:53:92:54:84:6b:db: 8d:50:1a:64:80:4c:62:c6:4a:ab:b5:68:3d:40:04:74:11:22: b0:c2:6f:c0:c5:d9:f4:7d:59:b7:5e:eb:49:60:48:ba:15:58: 79:78:71:12:a2:a5:04:30:b9:1e:92:40:c1:15:3e:4b:f7:9a: 14:72:c4:db:d0:ea:f8:7d:00:db:7b:8e:29:09:6a:bd:2f:1f: c0:7e:6d:56:a9:c8:2c:c0:28:03:60:76:87:a4:65:ee:95:6b: 9f:1c:7e:14:04:3f:fd:b9:36:2e:e0:99:ab:8b:b5:95:9d:d6: d3:f9:7d:86:b8:d2:87:5f:47:a9:cf:68:ac:5d:af:81:14:a7: 9c:38:62:0d:63:6b:c5:c5:53:54:77:a8:79:e4:65:59:66:a3: 8f:ae:96:21:73:60:24:ea:44:97:86:c6:27:02:e4:cb:b4:08: b5:7f:cf:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvgCGrsazmS3NeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGY2Y2VmMWYtMmIxNS00YWM5LWJmYjgtNWRjYmFjNWJkNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjtQPONHj1lVnm2DTSnI2lTGchEcHWYXtOin fqyCI1zeMvNya2UFWIr9svhs1qLYmiEXWVM7DEMxZninGsDkkuhyaJBB5MP9OzUq LPU+z3sptpZsbFcGvGGqyMvtEHhuuWZJBuCyUODGwJbJBQn+nD6ulqNx+CeOwk/D SZf2yQZz22GXCgFU+/vOhSPyiOy87pp20xOqCCZFvB6ukSSSEBr++C+/wn73xQ9I Yq2k35TAid+ax7r4ZoUkiUHqhubL9QjMziOffwMTXpRhRyoEilBE1TiPbyDbSJ+d GyhfmDQ14jFNmUVkQm3vmqjz9ZNZeEFSkL919agoGc+Ac3sKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuvPUahyYtlAsxQ2vIxWotxrn1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjAwOTg5OTQtZTA5MS0z Yjg4LWI0MDAtMDU5ZmVhNmFhMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNG9z0Koe0m9Sko4UFYNU1B3hHD77G6Z0DSAcdZJWgOE+pnGPWNb3MU xB1moFr4DR11bleatZoDi3cwFi//YOa8J1LAHTVGL+H07XyTUDDFFtkYulOSVIRr 241QGmSATGLGSqu1aD1ABHQRIrDCb8DF2fR9Wbde60lgSLoVWHl4cRKipQQwuR6S QMEVPkv3mhRyxNvQ6vh9ANt7jikJar0vH8B+bVapyCzAKANgdoekZe6Va58cfhQE P/25Ni7gmauLtZWd1tP5fYa40odfR6nPaKxdr4EUp5w4Yg1ja8XFU1R3qHnkZVlm o4+uliFzYCTqRJeGxicC5Mu0CLV/zxA= -----END CERTIFICATE-----Generated at Thu Oct 30 15:49:44 2025 by rpki-client