$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8e654e30-2421-31e5-adcf-95f3f7406738.roa File: 8e654e30-2421-31e5-adcf-95f3f7406738.roa (raw, json) Hash identifier: K4pkIaT1tfGMm2n4z9ofVUS06KZwld82u4p9wCFmiqY= Subject key identifier: B4:6A:0E:8D:CE:87:59:29:63:9E:53:D0:74:BF:47:86:A5:66:CE:0E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F9A7DE22A0F017A6CC00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8e654e30-2421-31e5-adcf-95f3f7406738.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397238 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f9:a7:de:22:a0:f0:17:a6:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=85b27358-9a94-4bec-81db-2b9a8a3b6e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:2f:ad:03:f1:7b:83:df:67:b0:77:85:aa: 83:28:2d:7b:25:ba:1d:f7:96:d4:5e:b7:7d:d7:81: a4:93:74:bd:4d:0a:05:68:15:7e:e2:08:e1:63:65: dc:d7:19:a8:c2:01:c2:27:84:5d:f3:36:b6:ec:21: 06:77:18:0f:33:27:f0:42:6b:d2:8b:af:91:d1:c7: 96:0d:b6:ae:d8:15:dc:c0:6d:f6:8e:bf:af:3e:c0: 57:6f:60:eb:3a:4b:53:62:e3:60:8e:7b:74:67:67: 35:fa:e4:28:11:4a:97:0b:42:e1:0d:23:04:fa:f9: 57:2b:d8:d1:02:f5:04:73:4e:87:a8:e9:62:eb:d7: 01:61:6a:ab:d4:91:1c:83:e3:af:ba:a2:5f:69:b1: 34:7e:da:59:25:62:b5:fd:3e:da:70:4e:10:f6:b3: 91:22:e5:3a:9c:a0:99:96:48:ba:61:12:48:c7:56: f6:8a:c9:93:50:c5:c1:c1:68:53:51:bd:a4:b2:c9: 94:12:9d:74:57:25:30:7a:51:75:5a:ef:97:e0:52: 6d:be:2f:17:5e:f2:c7:0c:14:6b:74:1d:10:f5:ef: d1:42:e7:83:49:02:82:14:4e:66:d0:6c:05:d3:1d: fe:c3:ad:1b:5d:32:dd:e2:53:71:ff:96:b1:39:83: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6A:0E:8D:CE:87:59:29:63:9E:53:D0:74:BF:47:86:A5:66:CE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8e654e30-2421-31e5-adcf-95f3f7406738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7b:c6:94:9b:2c:29:e3:cf:75:55:4e:a3:0e:5e:df:c8:50: 5c:ea:8d:9f:a7:a2:d1:ef:22:25:b9:67:2a:b4:d1:6a:fa:01: 3d:a1:68:c9:30:4f:1b:49:66:69:ac:47:54:2d:02:cd:72:64: 04:5f:c0:ee:02:33:d1:c0:39:d3:61:b4:1d:a2:e5:cc:45:17: a6:5b:cc:da:fe:7f:49:f2:c5:c2:1e:2e:b3:51:ce:1a:d4:ff: e7:c9:75:87:c7:58:c6:9e:d0:f5:eb:f4:ce:b2:77:63:4a:7a: 05:2b:da:b5:c0:37:75:42:ac:fd:b0:6c:a5:b0:3a:8d:50:56: 81:00:fd:bd:c8:d8:ff:c8:4f:94:dd:64:e4:4d:06:10:05:52: 93:aa:de:04:3a:55:f5:9c:4b:63:66:15:fe:6f:ff:9a:c0:b5: c7:43:03:95:a6:3b:05:35:73:65:55:34:a2:ea:9e:3a:20:be: 0a:a8:2d:62:1a:eb:18:8d:06:76:de:25:48:e0:8c:07:31:25: f4:a1:16:07:51:98:c8:87:43:5d:d5:48:91:6d:c1:f4:66:c8: f6:d4:49:5e:be:ea:02:2f:77:a0:76:5a:40:99:fb:cf:bd:68: ae:f3:7e:9d:71:86:61:3b:d1:f9:24:f4:a1:a4:0a:c2:be:71: 09:28:42:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvmn3iKg8BemzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODViMjczNTgtOWE5NC00YmVjLTgxZGItMmI5YThhM2I2ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGgvrQPxe4PfZ7B3haqDKC17Jbod95bUXrd9 14Gkk3S9TQoFaBV+4gjhY2Xc1xmowgHCJ4Rd8za27CEGdxgPMyfwQmvSi6+R0ceW Dbau2BXcwG32jr+vPsBXb2DrOktTYuNgjnt0Z2c1+uQoEUqXC0LhDSME+vlXK9jR AvUEc06HqOli69cBYWqr1JEcg+OvuqJfabE0ftpZJWK1/T7acE4Q9rORIuU6nKCZ lki6YRJIx1b2ismTUMXBwWhTUb2kssmUEp10VyUwelF1Wu+X4FJtvi8XXvLHDBRr dB0Q9e/RQueDSQKCFE5m0GwF0x3+w60bXTLd4lNx/5axOYM7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRqDo3Oh1kpY55T0HS/R4alZs4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGU2NTRlMzAtMjQyMS0z MWU1LWFkY2YtOTVmM2Y3NDA2NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp7xpSbLCnjz3VVTqMOXt/IUFzqjZ+notHvIiW5Zyq00Wr6AT2haMkw TxtJZmmsR1QtAs1yZARfwO4CM9HAOdNhtB2i5cxFF6ZbzNr+f0nyxcIeLrNRzhrU /+fJdYfHWMae0PXr9M6yd2NKegUr2rXAN3VCrP2wbKWwOo1QVoEA/b3I2P/IT5Td ZORNBhAFUpOq3gQ6VfWcS2NmFf5v/5rAtcdDA5WmOwU1c2VVNKLqnjogvgqoLWIa 6xiNBnbeJUjgjAcxJfShFgdRmMiHQ13VSJFtwfRmyPbUSV6+6gIvd6B2WkCZ+8+9 aK7zfp1xhmE70fkk9KGkCsK+cQkoQrE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:31 2025 by rpki-client