$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa File: fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa (raw, json) Hash identifier: w8jIn3ia4DEiQmZxbBXytZ8jmbXC9S02702zumgSdwM= Subject key identifier: 99:56:76:1B:46:39:78:7E:C3:C4:31:71:7B:00:EE:13:1B:EA:9C:A7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E8C320250A5459EBA8A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e8:c3:20:25:0a:54:59:eb:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8b2656a5-f0cd-4cad-9e23-31623cf4d38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ac:b7:ac:af:ef:e4:28:84:03:cd:fd:81:46: 15:bd:69:32:47:d8:7b:4f:8e:27:2d:34:94:8e:dd: 4a:43:71:42:ec:b1:0e:50:a2:2c:18:09:32:54:e3: 28:cd:1d:6a:bf:95:41:30:da:f3:88:8b:e3:d9:5e: 99:29:7f:d7:8f:c8:08:bc:7a:52:7b:95:5f:dd:f4: 6f:91:fb:a9:98:99:24:fd:44:35:f7:47:11:22:de: 38:c6:d5:7a:df:10:51:0c:74:c7:d7:5b:f3:35:ef: 8c:13:7a:cf:fd:81:9d:1a:28:c0:df:60:13:21:6d: 1f:df:49:68:20:2d:5a:af:4e:ff:ff:72:1d:15:25: b1:d8:4d:81:65:49:b4:25:cf:a5:f1:9a:e7:1d:b5: d5:ba:d2:95:e3:e2:35:f0:78:d8:d9:50:85:5d:a2: cb:e1:78:9a:ab:a5:bc:cc:e3:85:f0:5b:0e:24:88: eb:69:aa:e5:5f:d6:69:b8:47:c4:4e:e5:c4:4a:02: d9:b5:69:2d:99:bd:fd:fa:45:13:03:55:5c:20:8a: 03:37:08:f3:84:44:1d:16:f3:d8:0d:53:42:13:82: fb:11:c6:8f:78:4b:d7:ef:99:28:17:65:a4:67:f7: 18:e4:32:0f:e3:c8:71:82:58:2d:33:37:af:ae:df: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:76:1B:46:39:78:7E:C3:C4:31:71:7B:00:EE:13:1B:EA:9C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa0a6780-dbbc-358d-9bad-d800df7a85f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:42:29:6d:1e:9d:e1:89:75:b3:7a:68:12:89:4b:9a:fb:8c: ac:f6:cb:de:ae:e7:28:50:6a:a9:09:ff:f5:84:f4:12:76:1a: 94:b5:14:f2:46:f5:68:6d:24:72:ad:4f:d3:25:0a:ac:1a:0e: 3e:4c:3a:5f:ff:5b:19:04:c4:36:b1:3f:ed:03:c4:08:1b:7f: 5a:8f:a9:ed:53:f8:ac:db:52:e4:94:58:a4:3e:e3:51:47:95: ff:24:08:ef:79:e4:ba:f3:2b:fd:91:2d:ae:ff:87:34:fb:9b: 44:b8:57:d1:57:c3:9e:d9:f5:ea:e2:d4:0f:3c:c0:4d:1e:cb: 3a:87:ee:ec:5b:f0:79:1d:be:e7:15:24:81:89:5c:df:05:25: 8f:f9:44:a6:83:67:ea:77:d7:0d:5d:08:ca:90:59:9a:67:4d: 64:0e:03:01:56:77:2c:e8:bb:90:86:25:61:64:e6:28:06:26: 1f:01:7d:82:25:66:12:f9:24:28:33:1c:86:fd:2b:27:ec:2d: 64:40:c5:58:b3:21:91:9b:1d:af:ee:9d:94:43:66:f5:d0:d3: eb:4a:0d:64:cf:12:e4:2a:c7:53:5f:51:56:62:3e:50:42:fc: 64:33:58:59:5e:77:3c:dd:7d:0a:96:d7:91:03:80:d6:7e:be: a3:93:0a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ejDICUKVFnrqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGIyNjU2YTUtZjBjZC00Y2FkLTllMjMtMzE2MjNjZjRkMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlay3rK/v5CiEA839gUYVvWkyR9h7T44nLTSU jt1KQ3FC7LEOUKIsGAkyVOMozR1qv5VBMNrziIvj2V6ZKX/Xj8gIvHpSe5Vf3fRv kfupmJkk/UQ190cRIt44xtV63xBRDHTH11vzNe+ME3rP/YGdGijA32ATIW0f30lo IC1ar07//3IdFSWx2E2BZUm0Jc+l8ZrnHbXVutKV4+I18HjY2VCFXaLL4Xiaq6W8 zOOF8FsOJIjraarlX9ZpuEfETuXESgLZtWktmb39+kUTA1VcIIoDNwjzhEQdFvPY DVNCE4L7EcaPeEvX75koF2WkZ/cY5DIP48hxglgtMzevrt/q/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlWdhtGOXh+w8QxcXsA7hMb6pynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmEwYTY3ODAtZGJiYy0z NThkLTliYWQtZDgwMGRmN2E4NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtCKW0eneGJdbN6aBKJS5r7jKz2y96u5yhQaqkJ//WE9BJ2GpS1FPJG 9WhtJHKtT9MlCqwaDj5MOl//WxkExDaxP+0DxAgbf1qPqe1T+KzbUuSUWKQ+41FH lf8kCO955LrzK/2RLa7/hzT7m0S4V9FXw57Z9eri1A88wE0eyzqH7uxb8HkdvucV JIGJXN8FJY/5RKaDZ+p31w1dCMqQWZpnTWQOAwFWdyzou5CGJWFk5igGJh8BfYIl ZhL5JCgzHIb9KyfsLWRAxVizIZGbHa/unZRDZvXQ0+tKDWTPEuQqx1NfUVZiPlBC /GQzWFledzzdfQqW15EDgNZ+vqOTCg0= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:34 2025 by rpki-client