$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa File: 0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa (raw, json) Hash identifier: LPwvZs0xCT5Y6h+jaPJn5KdZkVgnB1hWqA5kX/PZHtM= Subject key identifier: 74:ED:7E:B5:35:59:7C:B9:BC:C0:FB:EB:AF:33:B0:73:75:14:E0:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C7EED3090091FA5942B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397222 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7e:ed:30:90:09:1f:a5:94:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=64f4042c-556b-4292-827d-7d92c100a358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:63:38:7a:17:5d:c1:14:bd:93:51:73:c3:ee: 48:11:23:e6:92:86:1e:c2:01:32:11:68:08:5b:83: 0f:4b:19:97:ad:dd:2b:ba:58:1c:bb:d8:64:73:21: 32:e4:aa:92:db:fd:20:cd:0a:ee:83:e4:cf:b4:de: 10:b1:37:60:4b:5b:5e:7f:d8:bc:11:65:11:ae:65: cd:5d:59:9c:26:bc:de:20:0d:65:3d:cb:78:bb:6c: c5:9c:62:72:ba:51:67:b6:2e:8c:24:01:6a:dd:fb: be:79:ad:18:54:df:06:25:70:da:af:6b:5b:45:7e: 95:b0:61:09:91:68:a6:26:6c:1a:57:7d:16:30:f3: 59:fc:87:22:34:aa:3e:0c:fe:81:97:be:7a:d4:13: b4:de:70:b6:55:3c:fa:2f:1a:8a:68:08:f6:55:5c: d9:ba:ef:e8:9e:0a:fb:ac:18:fb:f3:38:4b:00:84: 26:b5:9f:f7:ca:36:c6:95:4a:ce:9d:9f:14:73:82: b3:4b:8c:24:c4:89:ae:2c:25:92:56:9f:6f:fd:c9: 98:f0:24:e9:0a:74:a0:94:c2:f7:88:f6:93:d7:d4: e7:e1:e8:26:fc:31:e0:60:fa:aa:ff:57:3a:39:ac: 19:e1:1b:9e:36:9f:3e:a7:83:23:9e:f3:54:fb:52: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:7E:B5:35:59:7C:B9:BC:C0:FB:EB:AF:33:B0:73:75:14:E0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c3:83:5b:d2:b2:d1:48:e3:a1:47:5e:43:6f:a7:d6:43:d2: 2c:41:97:a3:10:72:d5:0b:2e:0b:14:49:0d:51:4a:d3:3f:90: 2e:37:13:3c:3d:bb:21:e3:28:89:20:b4:fb:3d:a8:2b:12:28: f0:f6:34:6a:eb:d4:74:e0:10:ff:1c:08:75:46:c1:99:b2:5b: b2:64:b3:0c:7c:45:c0:a3:08:a5:87:f5:9e:52:67:39:80:53: 80:68:5c:0d:cd:16:d6:03:ff:ac:59:43:73:10:b8:66:41:91: bf:5a:53:e7:b7:41:48:76:fd:64:dd:3d:19:04:1b:d6:b4:6e: 12:6b:03:9b:83:ac:6c:d9:44:f6:4d:f6:9a:de:ab:ef:f5:14: 55:2a:7e:60:85:e7:75:b3:99:87:3f:26:9d:e2:6c:6c:6b:8d: 4e:af:3e:1e:56:ac:c8:95:cd:88:5f:22:11:4e:2a:51:11:cc: b7:53:d4:6d:3a:01:fb:2c:24:47:1d:ea:04:f7:6b:d5:10:34: f5:4c:87:96:6e:6d:e2:96:02:08:84:9f:d3:d5:41:4c:e4:ed: 69:0e:45:98:fb:c4:be:0b:da:12:87:63:4a:f8:db:82:c3:49: 08:4a:3c:c5:9d:89:0b:d6:15:b0:a0:68:1e:12:a4:42:83:53: 3a:e7:83:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbH7tMJAJH6WUKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjRmNDA0MmMtNTU2Yi00MjkyLTgyN2QtN2Q5MmMxMDBhMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGM4ehddwRS9k1Fzw+5IESPmkoYewgEyEWgI W4MPSxmXrd0rulgcu9hkcyEy5KqS2/0gzQrug+TPtN4QsTdgS1tef9i8EWURrmXN XVmcJrzeIA1lPct4u2zFnGJyulFnti6MJAFq3fu+ea0YVN8GJXDar2tbRX6VsGEJ kWimJmwaV30WMPNZ/IciNKo+DP6Bl7561BO03nC2VTz6LxqKaAj2VVzZuu/ongr7 rBj78zhLAIQmtZ/3yjbGlUrOnZ8Uc4KzS4wkxImuLCWSVp9v/cmY8CTpCnSglML3 iPaT19Tn4egm/DHgYPqq/1c6OawZ4RueNp8+p4MjnvNU+1KjQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTtfrU1WXy5vMD7668zsHN1FODzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDMyM2I1ZjQtOGZmZS0z OThiLWI2YTMtNDUwZjJmNDNhNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7Dg1vSstFI46FHXkNvp9ZD0ixBl6MQctULLgsUSQ1RStM/kC43Ezw9 uyHjKIkgtPs9qCsSKPD2NGrr1HTgEP8cCHVGwZmyW7Jkswx8RcCjCKWH9Z5SZzmA U4BoXA3NFtYD/6xZQ3MQuGZBkb9aU+e3QUh2/WTdPRkEG9a0bhJrA5uDrGzZRPZN 9preq+/1FFUqfmCF53WzmYc/Jp3ibGxrjU6vPh5WrMiVzYhfIhFOKlERzLdT1G06 AfssJEcd6gT3a9UQNPVMh5ZubeKWAgiEn9PVQUzk7WkORZj7xL4L2hKHY0r424LD SQhKPMWdiQvWFbCgaB4SpEKDUzrngzY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:14 2025 by rpki-client