$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd905a4c-621b-3a3f-9593-fea2c477787e.roa File: fd905a4c-621b-3a3f-9593-fea2c477787e.roa (raw, json) Hash identifier: u68GBDQFtl1tmdUBlK00+vp5hN1QJy3hgj2kEQOTxmQ= Subject key identifier: 90:0A:19:2F:1C:99:6A:9D:2D:38:AE:C3:A4:BB:CD:16:6B:1B:B5:11 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B004C24B00963D014066D2495 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd905a4c-621b-3a3f-9593-fea2c477787e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 397224 IP address blocks: 156.154.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:24:b0:09:63:d0:14:06:6d:24:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=621d48ed-128b-417b-9894-df9d4cd9117d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:c6:c3:16:e4:bc:36:5a:3e:5e:c7:e7:92: a1:01:06:5b:e2:e4:63:65:d2:6b:c3:ef:4a:4f:12: e6:c1:fc:0b:d0:61:7d:66:ef:94:67:65:cb:02:a4: 28:ea:73:50:9d:5a:18:d4:ee:97:b2:f0:fe:9f:5d: 97:9e:3b:fb:c6:61:8e:a8:f6:cf:24:36:7d:f5:ab: f5:3c:75:39:b6:30:9d:f3:61:31:21:9b:2f:b0:db: 8f:e3:46:b7:93:19:2c:3e:aa:e0:89:5e:6c:52:eb: 32:4a:db:7e:73:10:39:e8:df:a8:69:7a:2d:1d:08: b3:6c:68:99:ed:a1:ec:b8:6f:0d:ff:1c:d7:ec:65: c7:a5:76:26:42:23:e8:73:0f:b0:3e:9d:45:66:44: f8:3e:ca:f7:27:ea:94:8a:6c:15:f2:be:8f:e3:c5: aa:f7:3c:51:f6:78:fa:22:ae:ae:f4:5c:9b:6d:4e: fe:0d:27:51:bd:e8:98:19:70:a0:98:21:eb:37:e0: d6:d8:af:21:c3:fc:ff:f6:ef:ab:5b:6d:6d:33:06: aa:d6:8f:2a:43:9a:51:d2:fb:cf:1a:a5:02:48:0b: 23:b3:1b:ea:5b:0e:1b:95:96:72:d1:0c:b0:50:ac: 27:3a:ac:cd:b1:40:d6:98:13:c7:fc:45:51:3b:43: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0A:19:2F:1C:99:6A:9D:2D:38:AE:C3:A4:BB:CD:16:6B:1B:B5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd905a4c-621b-3a3f-9593-fea2c477787e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9c:69:a0:b8:24:cc:c9:77:00:d9:1e:92:e9:b0:80:0f:20: 4e:4f:33:4b:f7:99:64:c8:cc:b3:93:f1:76:d6:7b:a5:0a:48: 0f:e8:dc:43:04:be:d4:f2:fa:79:44:8e:08:63:5f:cd:82:7d: 01:d9:f2:cb:44:4f:16:23:39:05:5d:b4:96:a8:68:20:c1:1b: 6c:79:65:9a:ec:85:53:4e:8f:f5:2b:7d:10:2f:37:7d:0d:9d: f7:6f:c2:5c:e7:36:cb:07:4e:b6:bc:7e:5c:66:6c:6e:ba:51: e1:d5:52:15:53:62:ec:b0:0e:a4:a7:71:51:d0:fa:23:48:35: ba:51:0a:6f:21:d6:d4:41:cf:ad:55:75:89:9c:95:71:79:fd: bf:f2:d8:58:52:ab:af:b2:7c:31:d2:2a:1d:eb:9a:b7:a1:86: 93:32:2b:be:33:e7:a2:68:d1:90:e5:50:b9:d6:1d:26:d1:70: 38:3e:8a:bd:32:a0:cc:66:1d:a7:8e:53:46:ed:ee:7e:02:13: 45:7d:d9:a4:cc:29:3d:5d:3b:f3:ec:72:92:5b:41:ed:3c:ec: 31:fa:1c:7e:f3:7f:49:8d:ef:5f:5e:48:fb:c4:63:16:b4:2b: 72:4e:23:de:43:2d:5c:c9:28:58:d7:25:5f:63:7b:52:7c:10: 22:65:35:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATCSwCWPQFAZtJJUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NjIxZDQ4ZWQtMTI4Yi00MTdiLTk4OTQtZGY5ZDRjZDkxMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTzGwxbkvDZaPl7H55KhAQZb4uRjZdJrw+9K TxLmwfwL0GF9Zu+UZ2XLAqQo6nNQnVoY1O6XsvD+n12Xnjv7xmGOqPbPJDZ99av1 PHU5tjCd82ExIZsvsNuP40a3kxksPqrgiV5sUusyStt+cxA56N+oaXotHQizbGiZ 7aHsuG8N/xzX7GXHpXYmQiPocw+wPp1FZkT4Psr3J+qUimwV8r6P48Wq9zxR9nj6 Iq6u9FybbU7+DSdRveiYGXCgmCHrN+DW2K8hw/z/9u+rW21tMwaq1o8qQ5pR0vvP GqUCSAsjsxvqWw4blZZy0QywUKwnOqzNsUDWmBPH/EVRO0MUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAKGS8cmWqdLTiuw6S7zRZrG7URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQ5MDVhNGMtNjIxYi0z YTNmLTk1OTMtZmVhMmM0Nzc3ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOcaaC4JMzJdwDZHpLpsIAPIE5PM0v3mWTIzLOT8XbWe6UKSA/o3EME vtTy+nlEjghjX82CfQHZ8stETxYjOQVdtJaoaCDBG2x5ZZrshVNOj/UrfRAvN30N nfdvwlznNssHTra8flxmbG66UeHVUhVTYuywDqSncVHQ+iNINbpRCm8h1tRBz61V dYmclXF5/b/y2FhSq6+yfDHSKh3rmrehhpMyK74z56Jo0ZDlULnWHSbRcDg+ir0y oMxmHaeOU0bt7n4CE0V92aTMKT1dO/PscpJbQe087DH6HH7zf0mN719eSPvEYxa0 K3JOI95DLVzJKFjXJV9je1J8ECJlNdU= -----END CERTIFICATE-----Generated at Thu Sep 18 00:15:22 2025 by rpki-client