$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfb06d63-f11b-34f6-b903-6c803347fa38.roa File: bfb06d63-f11b-34f6-b903-6c803347fa38.roa (raw, json) Hash identifier: L4uGyknPxill2TTVtsql6a535lq2zIJsSjrZdAte7ak= Subject key identifier: 1D:A2:16:3D:E3:A5:7E:4C:46:A0:88:3F:1C:AA:38:22:11:21:37:0F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C9860A88D224D3B2E7338 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfb06d63-f11b-34f6-b903-6c803347fa38.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397235 IP address blocks: 156.154.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:98:60:a8:8d:22:4d:3b:2e:73:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=3feabb76-9c8c-4fe9-9ced-c1c80fd0e454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:6e:5d:7a:87:f8:ca:9c:3f:9d:6c:1b:3b: d7:8a:60:ca:a3:a2:42:11:76:ab:7b:4b:91:4b:2b: 80:01:2c:db:ec:ed:94:a4:31:50:fe:90:78:8b:14: 81:2b:c4:a6:80:ff:49:1e:3b:76:3d:55:f5:3a:93: fb:65:54:2e:05:d5:2f:71:e8:30:18:73:02:92:91: 0d:b8:01:62:f3:8b:84:4e:b2:7e:10:79:3d:d9:99: b8:f8:22:e9:7f:c8:a0:6d:e3:23:e4:00:95:a4:84: 02:9e:d9:2f:83:0c:6d:77:81:ff:40:a2:80:0e:4f: 00:fa:9d:05:3c:c5:92:bc:9b:02:ab:67:20:8c:9b: b3:0b:24:6b:b8:81:d9:c7:02:cb:e8:1f:8a:1a:74: bd:0b:ff:dc:cc:1c:d0:e3:45:e3:92:68:69:21:f4: d2:73:17:e4:db:84:14:f8:cc:d6:b3:24:2f:be:e0: 4a:8a:7b:0b:87:56:41:5b:9f:a4:07:e7:39:88:20: 97:ff:7b:1c:3c:b6:08:fe:9d:e5:0c:3c:9b:cf:9d: da:4f:46:17:25:bd:86:c6:80:df:a5:14:e0:71:42: 6f:a9:f8:1a:02:19:d4:7a:65:ce:8e:b9:dd:af:35: 2b:f3:a8:3b:5a:f2:52:43:6e:6f:e6:e1:74:60:5b: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A2:16:3D:E3:A5:7E:4C:46:A0:88:3F:1C:AA:38:22:11:21:37:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bfb06d63-f11b-34f6-b903-6c803347fa38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f9:60:0b:c0:a9:6a:0d:4f:b2:45:4e:37:7c:b2:04:b1:00: fe:d1:41:45:71:af:6a:96:0b:6c:30:dc:f2:32:c5:a7:ba:ae: 8c:f6:31:95:25:31:db:12:24:fc:2d:80:67:ff:34:13:d0:5d: 1d:2f:0e:1e:58:d8:69:b0:c7:ab:42:e4:89:0e:b2:84:81:5f: cb:49:61:7c:89:d2:c5:55:e9:dd:ac:8f:b2:52:9a:c7:61:97: d3:b4:e1:9a:2b:cc:99:3b:8f:c7:de:e8:cc:3c:65:c0:bd:c1: 2c:43:fd:94:e7:2c:20:b7:87:0d:1c:47:3f:3b:8b:23:dc:e5: a1:83:72:3d:40:72:3e:bf:f4:e7:2b:bd:99:c2:dd:34:2e:c6: 43:74:50:98:c0:ca:98:ac:a4:63:87:ac:7e:6b:45:16:28:3f: f8:74:0a:f5:88:fb:3c:2d:24:8a:46:34:df:2b:63:6e:b4:b5: 62:98:47:b4:40:00:9d:5e:98:22:e0:24:d3:61:57:66:45:22: b5:03:ee:e3:72:13:97:d0:84:4c:8d:d0:82:2e:f7:9b:72:0e: 82:38:9c:6e:6d:1c:92:ca:3d:64:2a:3d:ad:a7:02:44:d6:04: 5f:3f:f0:7e:f2:1e:77:31:88:9f:d1:28:9f:4f:fc:89:28:73: c8:ce:24:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbJhgqI0iTTsuczgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk M2ZlYWJiNzYtOWM4Yy00ZmU5LTljZWQtYzFjODBmZDBlNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXduXXqH+MqcP51sGzvXimDKo6JCEXare0uR SyuAASzb7O2UpDFQ/pB4ixSBK8SmgP9JHjt2PVX1OpP7ZVQuBdUvcegwGHMCkpEN uAFi84uETrJ+EHk92Zm4+CLpf8igbeMj5ACVpIQCntkvgwxtd4H/QKKADk8A+p0F PMWSvJsCq2cgjJuzCyRruIHZxwLL6B+KGnS9C//czBzQ40XjkmhpIfTScxfk24QU +MzWsyQvvuBKinsLh1ZBW5+kB+c5iCCX/3scPLYI/p3lDDybz53aT0YXJb2GxoDf pRTgcUJvqfgaAhnUemXOjrndrzUr86g7WvJSQ25v5uF0YFsKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2iFj3jpX5MRqCIPxyqOCIRITcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmZiMDZkNjMtZjExYi0z NGY2LWI5MDMtNmM4MDMzNDdmYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf5YAvAqWoNT7JFTjd8sgSxAP7RQUVxr2qWC2ww3PIyxae6roz2MZUl MdsSJPwtgGf/NBPQXR0vDh5Y2Gmwx6tC5IkOsoSBX8tJYXyJ0sVV6d2sj7JSmsdh l9O04ZorzJk7j8fe6Mw8ZcC9wSxD/ZTnLCC3hw0cRz87iyPc5aGDcj1Acj6/9Ocr vZnC3TQuxkN0UJjAypispGOHrH5rRRYoP/h0CvWI+zwtJIpGNN8rY260tWKYR7RA AJ1emCLgJNNhV2ZFIrUD7uNyE5fQhEyN0IIu95tyDoI4nG5tHJLKPWQqPa2nAkTW BF8/8H7yHncxiJ/RKJ9P/Ikoc8jOJEg= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:36 2025 by rpki-client