$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f48013f-fd93-36af-bd58-ae0bff835751.roa File: 3f48013f-fd93-36af-bd58-ae0bff835751.roa (raw, json) Hash identifier: 2m2TB0SjXgb6Agioa+HhdrX6bQl8a5YDdMJZtKWa78M= Subject key identifier: 3D:0F:2B:5A:1B:C5:85:4B:CD:A9:7F:F3:86:28:23:FA:3C:CD:70:10 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D63E72D5442A533A6FA0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f48013f-fd93-36af-bd58-ae0bff835751.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d6:3e:72:d5:44:2a:53:3a:6f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=ccdf900b-0c4d-4226-9d44-da714ad5746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:29:c8:f1:6e:c2:09:21:cb:eb:b6:b2:ed: a1:32:63:66:be:d8:82:2b:d1:16:d5:ef:62:d9:f4: 4c:43:0c:f4:f2:c3:53:c2:07:a8:8f:e7:dd:1d:37: 56:45:74:f3:09:2b:2d:1a:ef:d9:d5:3d:45:2d:51: f2:79:d6:0a:9a:4e:5d:5f:a4:b0:c2:84:34:80:ff: 40:b7:60:5d:5e:3a:6f:ee:24:8c:c8:7d:37:fb:15: 59:09:c8:9f:55:93:41:14:a0:60:7d:9e:b6:9a:1e: a1:16:c4:be:e7:3a:1a:96:f2:e0:0a:39:f8:34:1b: f6:a4:36:93:69:fd:dd:71:6d:26:db:7d:8e:44:41: 74:6c:44:a0:fd:8b:92:83:d7:31:0e:a6:b6:23:0c: 20:02:6f:ee:fb:a9:c6:f4:d6:a1:51:35:6d:c9:02: f0:24:c4:31:52:92:ad:c6:f8:c1:7c:f2:e4:0e:4c: 72:11:e6:7a:8e:ca:5e:bf:59:c8:4b:74:ee:3f:01: c9:8b:4e:15:26:e5:bd:64:56:fa:50:b3:97:14:f3: 91:2f:5a:85:94:6f:73:cb:8e:0a:62:f2:f1:0f:f6: d8:2e:b5:0c:91:4d:f2:2e:84:d0:26:c0:bc:37:83: 3a:79:62:c5:f3:e4:ce:92:5f:83:75:9c:be:df:91: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0F:2B:5A:1B:C5:85:4B:CD:A9:7F:F3:86:28:23:FA:3C:CD:70:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f48013f-fd93-36af-bd58-ae0bff835751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:38:6d:4d:cd:72:63:7d:b5:32:77:44:21:d6:a6:ff:84:79: 44:bd:ad:3e:19:97:eb:97:3b:e5:69:52:be:c9:70:22:40:dd: 54:a8:34:bc:08:08:2b:38:a7:fd:38:17:1b:32:5b:6d:63:ff: 74:d0:b6:ff:f9:fc:3d:ff:f9:e2:cf:05:9a:3a:72:cc:8f:b3: da:87:3d:04:41:50:70:da:25:df:7b:73:cc:89:94:5f:76:3f: 87:7c:3a:c5:e2:5d:b5:16:c0:1c:49:08:b0:01:d2:f8:bc:db: b6:3f:55:23:7c:59:ce:c9:49:22:de:68:34:fb:d1:fd:60:72: f5:65:56:ef:ba:a4:7f:76:8c:e5:e5:04:cb:35:2a:45:8e:6b: 8c:42:27:83:2e:51:d0:35:91:c3:0e:03:bb:d9:d4:f0:87:39: 4f:fe:17:0c:70:ce:2f:45:1d:3b:75:ff:d7:6e:7c:91:26:14: 67:35:eb:3b:7e:e8:93:40:d6:82:b3:1f:3d:fb:93:cc:21:ea: 9e:db:b4:d4:ec:6b:5c:24:9d:02:85:4c:50:c2:fc:14:60:84: e9:14:41:02:72:67:e8:a4:cd:33:5e:cc:d6:72:6c:1b:c8:0d: 29:32:b1:d2:26:f5:94:16:31:5f:a1:c0:e8:13:d8:a1:6e:4b: 08:d8:e7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dY+ctVEKlM6b6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2NkZjkwMGItMGM0ZC00MjI2LTlkNDQtZGE3MTRhZDU3NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEIpyPFuwgkhy+u2su2hMmNmvtiCK9EW1e9i 2fRMQwz08sNTwgeoj+fdHTdWRXTzCSstGu/Z1T1FLVHyedYKmk5dX6SwwoQ0gP9A t2BdXjpv7iSMyH03+xVZCcifVZNBFKBgfZ62mh6hFsS+5zoalvLgCjn4NBv2pDaT af3dcW0m232OREF0bESg/YuSg9cxDqa2IwwgAm/u+6nG9NahUTVtyQLwJMQxUpKt xvjBfPLkDkxyEeZ6jspev1nIS3TuPwHJi04VJuW9ZFb6ULOXFPORL1qFlG9zy44K YvLxD/bYLrUMkU3yLoTQJsC8N4M6eWLF8+TOkl+DdZy+35Hr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0PK1obxYVLzal/84YoI/o8zXAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y0ODAxM2YtZmQ5My0z NmFmLWJkNTgtYWUwYmZmODM1NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA44bU3NcmN9tTJ3RCHWpv+EeUS9rT4Zl+uXO+VpUr7JcCJA3VSoNLwI CCs4p/04FxsyW21j/3TQtv/5/D3/+eLPBZo6csyPs9qHPQRBUHDaJd97c8yJlF92 P4d8OsXiXbUWwBxJCLAB0vi827Y/VSN8Wc7JSSLeaDT70f1gcvVlVu+6pH92jOXl BMs1KkWOa4xCJ4MuUdA1kcMOA7vZ1PCHOU/+Fwxwzi9FHTt1/9dufJEmFGc16zt+ 6JNA1oKzHz37k8wh6p7btNTsa1wknQKFTFDC/BRghOkUQQJyZ+ikzTNezNZybBvI DSkysdIm9ZQWMV+hwOgT2KFuSwjY550= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:33 2025 by rpki-client