$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa File: df6727da-fd25-3bc0-a428-19aa6a820332.roa (raw, json) Hash identifier: 1XQu/M3cCNGAUWPNbdvaQ3pslfHdNm9NQXqUtiujldY= Subject key identifier: 4E:BD:4F:2D:84:C0:CF:D4:07:61:A8:84:60:85:E6:30:DE:C8:58:3A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FF170A6D671EEB0F8C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ff:17:0a:6d:67:1e:eb:0f:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7b359ba4-d7d7-4fca-be50-e6235d213084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:c1:d0:38:c2:70:21:2b:f1:44:11:0f:68: d5:fa:86:8a:01:64:db:a5:0b:f4:59:45:d6:28:78: e8:95:24:bd:a0:4a:86:59:dd:6f:57:0e:5e:37:2d: 95:be:d1:f9:97:35:d1:d0:37:1f:4c:25:c4:55:e7: 21:ad:a8:72:7f:22:62:0c:9b:88:f1:c0:c1:de:91: 75:c4:38:83:81:f7:fe:ed:7c:50:6c:96:56:60:33: e1:3e:5f:67:a0:f9:15:d5:74:15:9c:14:b3:50:39: a5:18:2e:ef:62:fd:19:a5:cd:82:b5:20:15:1a:16: 17:21:52:6b:f4:38:5c:29:34:55:42:a9:1a:08:b4: b8:33:ec:ce:6e:4b:c9:7a:56:6b:b3:a5:8e:c7:94: 14:60:7c:c8:8b:93:60:ab:04:2b:00:2b:42:30:a4: 06:d6:fb:40:66:4d:d8:bc:35:59:e3:c0:f7:bf:72: fd:cf:7d:04:b1:39:bc:a9:a3:dc:8d:4b:10:a0:a4: d2:eb:6a:47:3b:1a:9f:1b:4a:f8:72:31:15:c8:eb: 4e:b2:c6:84:e6:26:3a:f8:b3:71:38:29:6c:8a:57: aa:54:58:80:df:80:60:fc:ca:31:14:44:07:8e:e3: c0:7a:be:42:63:8c:97:9e:56:69:31:13:63:df:cf: 17:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BD:4F:2D:84:C0:CF:D4:07:61:A8:84:60:85:E6:30:DE:C8:58:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df6727da-fd25-3bc0-a428-19aa6a820332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a9:f8:78:5d:49:81:01:25:b8:1b:5f:b1:54:da:81:03:05: 77:51:0d:f8:c5:be:01:7d:70:83:8d:de:f4:83:26:0c:83:09: 4b:c9:29:29:59:67:eb:2d:07:13:5f:4f:3a:4d:ed:75:44:7a: d9:6f:d4:0f:1c:57:59:d0:c9:61:bd:d4:0c:14:c9:8d:dd:69: 08:0f:51:12:2f:36:2c:cb:a0:00:cc:64:43:5f:07:11:e2:3d: fb:3c:cb:3e:d8:9e:9b:07:d6:88:90:95:a8:12:5b:6e:16:56: 8c:7d:a2:55:87:21:41:f2:c5:f1:cb:86:84:ab:38:c6:e0:96: b0:09:86:40:3e:c8:58:79:08:10:f9:48:a3:52:89:76:93:6a: e4:b9:68:0a:2e:69:18:79:73:74:d4:a3:44:fc:95:b3:a5:8c: 5b:87:58:45:6e:8a:65:91:cf:2d:a1:72:5d:28:6b:3c:67:ba: 64:88:37:90:38:bc:2a:7c:52:b9:f3:16:fa:48:28:a6:64:ab: 6d:10:97:39:e5:12:81:df:e0:27:f7:f2:0a:14:fd:14:70:b0: 33:11:1f:4f:06:80:65:c9:a2:66:ca:43:95:c8:55:4e:0c:c1: 81:4e:19:fc:48:84:36:6d:96:3a:2d:5f:ac:0c:02:50:2b:e2: 9c:41:3b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4f8XCm1nHusPjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2IzNTliYTQtZDdkNy00ZmNhLWJlNTAtZTYyMzVkMjEzMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjXB0DjCcCEr8UQRD2jV+oaKAWTbpQv0WUXW KHjolSS9oEqGWd1vVw5eNy2VvtH5lzXR0DcfTCXEVechrahyfyJiDJuI8cDB3pF1 xDiDgff+7XxQbJZWYDPhPl9noPkV1XQVnBSzUDmlGC7vYv0Zpc2CtSAVGhYXIVJr 9DhcKTRVQqkaCLS4M+zObkvJelZrs6WOx5QUYHzIi5NgqwQrACtCMKQG1vtAZk3Y vDVZ48D3v3L9z30EsTm8qaPcjUsQoKTS62pHOxqfG0r4cjEVyOtOssaE5iY6+LNx OClsileqVFiA34Bg/MoxFEQHjuPAer5CY4yXnlZpMRNj388X1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE69Ty2EwM/UB2GohGCF5jDeyFg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY2NzI3ZGEtZmQyNS0z YmMwLWE0MjgtMTlhYTZhODIwMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHup+HhdSYEBJbgbX7FU2oEDBXdRDfjFvgF9cION3vSDJgyDCUvJKSlZ Z+stBxNfTzpN7XVEetlv1A8cV1nQyWG91AwUyY3daQgPURIvNizLoADMZENfBxHi Pfs8yz7YnpsH1oiQlagSW24WVox9olWHIUHyxfHLhoSrOMbglrAJhkA+yFh5CBD5 SKNSiXaTauS5aAouaRh5c3TUo0T8lbOljFuHWEVuimWRzy2hcl0oazxnumSIN5A4 vCp8UrnzFvpIKKZkq20QlznlEoHf4Cf38goU/RRwsDMRH08GgGXJombKQ5XIVU4M wYFOGfxIhDZtljotX6wMAlAr4pxBO5g= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:04 2025 by rpki-client