$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa File: e0a41d6a-fe27-377f-8ad1-2b2709489314.roa (raw, json) Hash identifier: 5Oe6mhUyj6aqxe8zBeT20gO6EMpZLJhSY+gfiNweBkI= Subject key identifier: A6:E1:91:E3:60:B6:6B:1A:62:FA:F0:E9:38:F8:1F:E0:AD:03:38:80 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1FAC75AC104EB5D92BB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:fa:c7:5a:c1:04:eb:5d:92:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=efd55cda-70e0-4f79-a2ae-d7fade538dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:62:c9:f0:7c:15:23:23:4d:79:f5:f4:33: 1c:6b:f7:b9:29:4c:23:9a:15:d6:99:31:97:2f:6f: c9:7f:d7:85:dc:b9:1e:3f:97:02:33:1f:b7:90:a7: 16:bc:c0:bc:e8:b1:fa:90:28:73:c2:73:5b:62:e1: 5d:4b:2c:2a:77:ff:65:e1:38:47:77:cf:3c:a4:e1: 14:3b:e2:f0:a6:35:53:75:f4:40:79:76:2d:f1:dc: 92:e8:0d:12:57:b0:5e:26:13:83:90:12:1d:85:ba: 30:d8:52:ba:78:1d:32:6a:68:74:a0:9a:a9:37:cb: 0c:79:8f:1c:b5:5b:34:78:5b:44:db:24:12:35:04: c0:b5:8c:03:9e:17:e4:62:56:79:5f:32:19:2f:67: 1a:95:76:93:13:88:e1:06:34:3f:e9:ca:e4:4e:af: c7:cb:af:2a:bf:45:57:df:2b:11:3c:85:e9:06:d9: 63:d2:c5:73:14:f4:12:f8:43:c0:bb:c8:75:38:e3: d3:eb:f5:5c:2c:94:5c:fa:03:b1:79:79:35:63:a2: 2c:18:64:3f:4b:2b:63:d4:73:db:9b:cd:57:75:59: dd:08:77:6c:6d:ae:a8:78:f1:11:24:96:88:05:59: c4:e6:6d:f2:53:be:ae:6e:fd:6f:e0:2f:f5:d2:74: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:91:E3:60:B6:6B:1A:62:FA:F0:E9:38:F8:1F:E0:AD:03:38:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f9:b2:98:c7:d5:fd:90:dc:42:81:c2:f3:f9:38:36:e1:1f: 52:dd:b5:32:85:97:62:62:6d:8b:26:42:d8:17:b8:89:64:c9: 63:f4:08:86:83:21:1c:27:a7:c6:02:42:c3:8c:7b:a4:12:d2: 2a:2d:d3:02:e1:51:88:f6:48:f4:9d:54:74:6c:98:ba:5a:d8: 15:f6:51:0d:5c:c2:fd:56:18:bc:9f:7e:d3:bc:8c:31:a5:a9: 4e:53:0f:23:53:17:ec:b4:1c:08:37:1f:89:52:dc:cf:57:30: 1a:80:19:89:ea:9b:17:01:00:59:7b:6c:af:77:e1:b8:84:d9: 5c:2f:b7:48:45:5f:fa:7b:dc:11:20:9f:e2:c2:70:65:39:b2: 35:28:0b:de:92:01:36:c2:83:ce:c0:43:0d:3b:51:9c:8d:b7: 2b:1e:01:9f:ff:e4:70:73:ae:a8:3d:00:0f:c9:25:61:20:dd: 2b:7a:62:dc:1b:67:7f:69:b9:13:98:9a:73:a0:22:15:eb:2e: 38:54:ae:d6:ac:a7:55:6a:fa:da:9d:7d:62:08:43:47:d9:ac: ad:5a:fb:ce:80:89:d8:0d:9a:f1:c5:e9:fe:0f:6e:17:db:eb: 21:57:17:63:f9:50:f4:87:5d:56:67:30:0e:e5:1f:e1:55:ff: c7:3c:97:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4frHWsEE612SuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWZkNTVjZGEtNzBlMC00Zjc5LWEyYWUtZDdmYWRlNTM4ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkABiyfB8FSMjTXn19DMca/e5KUwjmhXWmTGX L2/Jf9eF3LkeP5cCMx+3kKcWvMC86LH6kChzwnNbYuFdSywqd/9l4ThHd888pOEU O+LwpjVTdfRAeXYt8dyS6A0SV7BeJhODkBIdhbow2FK6eB0yamh0oJqpN8sMeY8c tVs0eFtE2yQSNQTAtYwDnhfkYlZ5XzIZL2calXaTE4jhBjQ/6crkTq/Hy68qv0VX 3ysRPIXpBtlj0sVzFPQS+EPAu8h1OOPT6/VcLJRc+gOxeXk1Y6IsGGQ/Sytj1HPb m81XdVndCHdsba6oePERJJaIBVnE5m3yU76ubv1v4C/10nQE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbhkeNgtmsaYvrw6Tj4H+CtAziAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTBhNDFkNmEtZmUyNy0z NzdmLThhZDEtMmIyNzA5NDg5MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv5spjH1f2Q3EKBwvP5ODbhH1LdtTKFl2JibYsmQtgXuIlkyWP0CIaD IRwnp8YCQsOMe6QS0iot0wLhUYj2SPSdVHRsmLpa2BX2UQ1cwv1WGLyfftO8jDGl qU5TDyNTF+y0HAg3H4lS3M9XMBqAGYnqmxcBAFl7bK934biE2Vwvt0hFX/p73BEg n+LCcGU5sjUoC96SATbCg87AQw07UZyNtyseAZ//5HBzrqg9AA/JJWEg3St6Ytwb Z39puROYmnOgIhXrLjhUrtasp1Vq+tqdfWIIQ0fZrK1a+86AidgNmvHF6f4Pbhfb 6yFXF2P5UPSHXVZnMA7lH+FV/8c8l5M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:59 2025 by rpki-client