$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa File: 7c8c7fde-4524-3c14-85af-3a61f46e100e.roa (raw, json) Hash identifier: /D+yg5fZX6TtYE8Mf+Pndxrp5jtqBDFPF3xZdqE3fNo= Subject key identifier: 8A:3B:25:57:CD:E5:D8:C8:D7:54:93:3B:8E:2E:BD:0C:B3:E3:2C:49 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F9016D7790E214CD1820 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f9:01:6d:77:90:e2:14:cd:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=9a9180d5-d0b8-4255-b357-f42e08bdccc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:6d:59:ab:5d:ad:db:e2:c0:ad:da:dd:f5: 64:b6:d1:b1:85:9e:a4:73:e7:11:fa:ce:02:ad:76: 22:b1:64:65:ab:46:61:26:b1:f1:c1:08:e1:1b:94: 81:87:63:a9:d9:01:cd:b4:5e:bb:64:06:87:43:29: bb:50:87:30:f8:eb:67:4b:c8:78:f2:fd:9c:75:7a: 3c:63:08:0a:77:54:74:df:f8:94:f5:45:b3:da:fa: e3:b2:6a:6c:08:9a:12:20:eb:ff:eb:97:98:e7:b0: 8f:61:04:d2:2f:10:d2:13:fb:6f:94:ab:da:c0:63: de:bd:95:4f:ad:84:92:2d:f3:c8:c3:f9:52:5f:b0: 7f:1c:8a:4a:58:47:4d:03:7e:c1:3c:95:0c:3f:e4: a7:90:6e:5f:91:6e:50:11:8f:b0:f0:12:6c:93:21: 94:d1:96:8f:ec:a6:ab:42:c0:42:ca:22:1e:65:5b: ff:6a:b8:2e:81:e0:87:4e:07:05:90:d4:be:38:4f: ae:10:96:ea:c4:8c:cc:2b:b0:80:c9:f3:49:02:49: 66:6c:21:36:4b:e3:d0:35:8b:1e:67:ed:98:92:60: 21:17:ad:84:0f:c4:40:33:23:f9:5a:7b:22:da:e7: 17:71:b9:2a:ff:59:cf:e4:c0:58:e7:b3:af:6e:d1: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:25:57:CD:E5:D8:C8:D7:54:93:3B:8E:2E:BD:0C:B3:E3:2C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7c8c7fde-4524-3c14-85af-3a61f46e100e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fc:c3:56:d2:2f:2c:1e:d4:ee:dd:27:a1:09:02:28:9f:25: 8c:a9:78:8a:d2:87:e8:61:6a:61:42:77:94:ba:6b:ab:8d:1f: f7:27:a0:fc:4a:46:65:15:96:f8:3e:da:e2:bf:23:0a:2f:71: f3:a6:1e:fa:b0:bb:2b:7f:7d:9d:78:cd:3e:6d:16:75:35:02: 57:17:0a:ae:12:a1:82:38:2a:96:6a:9f:4c:07:08:65:c9:a7: e7:0e:84:51:d7:18:a8:8e:0b:32:9f:05:6b:7e:93:34:d3:fd: 70:43:d9:c9:43:1d:83:98:3f:53:e7:be:d5:40:33:2d:90:61: 95:01:d8:c0:c8:4c:bb:29:26:a2:1c:3e:49:6a:47:60:45:32: d8:53:83:7b:d1:22:df:20:1c:97:4d:50:0c:11:87:db:3d:54: 0d:f8:14:b6:92:ba:0c:9e:2f:e1:db:26:fa:7f:17:5e:d1:2d: 97:5f:73:36:0b:44:67:f0:cd:61:86:75:cf:b1:d2:96:ae:f2: 73:ea:dd:73:39:56:27:99:2d:bf:b4:bc:76:46:0d:85:e1:bc: 9e:da:25:dd:a1:f8:65:ad:12:0d:cc:a6:43:4a:7f:42:43:6c: 2f:64:35:e7:8d:82:3e:08:c0:26:27:d7:77:b3:d8:02:a7:4c: 8c:33:03:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvkBbXeQ4hTNGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OWE5MTgwZDUtZDBiOC00MjU1LWIzNTctZjQyZTA4YmRjY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlttWatdrdviwK3a3fVkttGxhZ6kc+cR+s4C rXYisWRlq0ZhJrHxwQjhG5SBh2Op2QHNtF67ZAaHQym7UIcw+OtnS8h48v2cdXo8 YwgKd1R03/iU9UWz2vrjsmpsCJoSIOv/65eY57CPYQTSLxDSE/tvlKvawGPevZVP rYSSLfPIw/lSX7B/HIpKWEdNA37BPJUMP+SnkG5fkW5QEY+w8BJskyGU0ZaP7Kar QsBCyiIeZVv/argugeCHTgcFkNS+OE+uEJbqxIzMK7CAyfNJAklmbCE2S+PQNYse Z+2YkmAhF62ED8RAMyP5Wnsi2ucXcbkq/1nP5MBY57OvbtHbxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo7JVfN5djI11STO44uvQyz4yxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2M4YzdmZGUtNDUyNC0z YzE0LTg1YWYtM2E2MWY0NmUxMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr8w1bSLywe1O7dJ6EJAiifJYypeIrSh+hhamFCd5S6a6uNH/cnoPxK RmUVlvg+2uK/IwovcfOmHvqwuyt/fZ14zT5tFnU1AlcXCq4SoYI4KpZqn0wHCGXJ p+cOhFHXGKiOCzKfBWt+kzTT/XBD2clDHYOYP1PnvtVAMy2QYZUB2MDITLspJqIc PklqR2BFMthTg3vRIt8gHJdNUAwRh9s9VA34FLaSugyeL+HbJvp/F17RLZdfczYL RGfwzWGGdc+x0pau8nPq3XM5VieZLb+0vHZGDYXhvJ7aJd2h+GWtEg3MpkNKf0JD bC9kNeeNgj4IwCYn13ez2AKnTIwzA3s= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:30 2025 by rpki-client