$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa File: 12df2d77-daed-3a22-ac0a-b806dcc414d8.roa (raw, json) Hash identifier: Vr6VF2+YcYUAUFWKr7UdgTFhqh0dJZ+ciXd9QRkdQd8= Subject key identifier: D8:C8:74:91:36:25:E8:91:75:11:6B:01:B8:11:B9:4E:E6:FF:36:26 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E596930123C687570480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397214 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e5:96:93:01:23:c6:87:57:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=75aa01c3-267b-4c38-8ab2-5b871c469736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:e1:9b:42:57:e9:4b:4d:b5:e8:d2:77:10: 0e:76:51:cc:91:d1:0b:a2:6c:6d:15:a7:e5:25:8a: 90:63:d7:54:00:36:2b:2c:07:86:13:82:62:ba:f2: 11:92:18:4c:b8:59:69:b8:77:f2:23:97:29:b5:fd: 35:6a:d4:0d:cb:f2:b6:5a:60:80:dc:91:48:08:e0: 8a:97:c6:15:e4:64:6e:22:01:cb:21:54:b5:ed:06: 17:9a:1f:0f:8f:cd:eb:de:20:32:86:40:94:3b:12: 56:7a:64:c0:a6:17:bb:99:40:ef:20:cf:2d:a2:a7: 76:a1:d0:0f:7e:71:c9:49:43:80:2d:af:69:d5:50: 77:24:ab:ac:66:c6:d6:30:c4:76:1d:96:d0:c1:7a: 00:19:cb:02:6b:fc:85:05:bb:d1:fb:23:2a:39:5d: 42:83:38:64:74:15:d5:2e:95:13:7e:94:6a:99:dc: 79:3a:c0:3a:bc:5f:df:5c:3a:c9:14:aa:c0:d9:05: 49:d4:e0:1a:7a:be:5d:15:d6:fe:7a:51:50:af:1d: 9a:ea:e6:1d:2c:fa:76:8d:99:b8:73:be:70:f6:63: a5:94:eb:ed:04:85:30:45:25:5e:01:19:24:0d:be: c2:d4:b1:9f:22:70:20:f9:a6:ce:5f:65:bf:35:25: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C8:74:91:36:25:E8:91:75:11:6B:01:B8:11:B9:4E:E6:FF:36:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12df2d77-daed-3a22-ac0a-b806dcc414d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2f:61:bb:ae:1f:68:ea:dd:4f:ab:05:f3:f5:30:a0:e2:39: df:7c:09:73:f8:81:b9:51:09:a1:b3:83:04:23:b6:62:62:13: 29:bb:24:13:25:a8:40:a7:a8:90:de:53:b2:ea:3c:69:ee:e6: 94:64:f8:ae:30:0a:ce:c9:e6:58:d9:12:97:ce:4a:e2:3b:87: 68:e4:2d:83:88:13:9f:a7:03:f4:c9:55:5c:32:e3:a7:ef:c7: 6e:25:b3:6b:a6:92:65:7c:06:a6:d6:cf:42:fe:85:f5:2d:fd: 48:5f:c2:4a:e3:cd:4f:9f:43:34:a7:5d:f9:2e:61:3f:50:95: 9e:75:13:f9:f9:b3:06:2c:9e:1b:86:d2:3b:7c:34:1e:27:7f: d9:8c:8f:99:d2:82:72:e9:a6:73:1d:75:da:46:a7:c4:9b:ac: 3d:b6:d9:2b:d7:ea:78:24:b4:53:7e:c5:77:bb:69:b7:78:df: 70:38:02:2a:76:b6:ff:38:c5:c8:33:ba:c1:ac:59:52:a4:bb: e3:05:de:19:01:e3:b6:3b:4c:d0:7a:a2:6f:4c:9b:bc:9a:7a: b0:e6:5d:a9:15:ad:6e:78:83:1d:92:f0:96:0a:78:96:55:91: 7e:86:03:88:8c:f3:14:6f:49:fc:41:00:5f:15:91:08:e6:05: 83:ea:61:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+WWkwEjxodXBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzVhYTAxYzMtMjY3Yi00YzM4LThhYjItNWI4NzFjNDY5NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw7hm0JX6UtNtejSdxAOdlHMkdELomxtFafl JYqQY9dUADYrLAeGE4JiuvIRkhhMuFlpuHfyI5cptf01atQNy/K2WmCA3JFICOCK l8YV5GRuIgHLIVS17QYXmh8Pj83r3iAyhkCUOxJWemTAphe7mUDvIM8toqd2odAP fnHJSUOALa9p1VB3JKusZsbWMMR2HZbQwXoAGcsCa/yFBbvR+yMqOV1CgzhkdBXV LpUTfpRqmdx5OsA6vF/fXDrJFKrA2QVJ1OAaer5dFdb+elFQrx2a6uYdLPp2jZm4 c75w9mOllOvtBIUwRSVeARkkDb7C1LGfInAg+abOX2W/NSXLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjIdJE2JeiRdRFrAbgRuU7m/zYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTJkZjJkNzctZGFlZC0z YTIyLWFjMGEtYjgwNmRjYzQxNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFovYbuuH2jq3U+rBfP1MKDiOd98CXP4gblRCaGzgwQjtmJiEym7JBMl qECnqJDeU7LqPGnu5pRk+K4wCs7J5ljZEpfOSuI7h2jkLYOIE5+nA/TJVVwy46fv x24ls2umkmV8BqbWz0L+hfUt/UhfwkrjzU+fQzSnXfkuYT9QlZ51E/n5swYsnhuG 0jt8NB4nf9mMj5nSgnLppnMdddpGp8SbrD222SvX6ngktFN+xXe7abd433A4Aip2 tv84xcgzusGsWVKku+MF3hkB47Y7TNB6om9Mm7yaerDmXakVrW54gx2S8JYKeJZV kX6GA4iM8xRvSfxBAF8VkQjmBYPqYSA= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:11 2025 by rpki-client