$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa File: 148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa (raw, json) Hash identifier: sXXtC927vC2FCBk/gpyRc19+HeSmCrfzL0oU/hED6/w= Subject key identifier: A1:E3:36:AE:76:1E:30:46:7E:A4:DD:55:BA:00:CB:A7:BE:5F:F6:93 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FA3DAD0C14CE42EE2CC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397214 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:fa:3d:ad:0c:14:ce:42:ee:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f8a03110-e32a-4fbf-90fa-5b1f7453cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:c3:4c:09:d7:a0:85:30:97:52:fe:e9:dc: da:f8:51:55:79:e2:a3:ad:c9:87:ef:13:2f:29:24: dd:f9:5f:00:69:50:b4:50:91:9e:c7:ec:67:a6:2c: 78:4a:ec:ee:b3:06:1a:43:5b:5b:69:a6:35:9b:1e: 79:72:eb:27:ab:47:f4:2f:e6:53:aa:ae:9d:66:6d: d2:ab:ed:c8:5d:bc:39:0c:3a:68:65:29:72:eb:ce: e3:ee:14:0f:6f:44:fa:a0:25:4b:b4:66:6f:35:f8: 43:1f:9e:6f:41:1c:94:de:28:8f:16:67:f6:d2:6e: ee:a8:06:e1:0f:b5:60:e1:9a:d2:c6:8f:6b:2d:e2: 10:a7:dd:8d:7e:1f:c4:01:18:2a:6d:7d:18:11:ba: d6:99:99:2b:05:e7:f0:94:b3:2b:92:15:ed:23:38: 0b:b6:d5:04:a9:54:5a:2f:63:25:2e:cb:f9:68:3b: 18:60:b5:ee:eb:12:4e:ad:c0:25:7d:89:c1:c2:35: 8e:26:03:9c:29:13:a2:7c:01:e1:c3:a6:d7:89:60: a0:3d:12:f2:c9:ce:32:1c:24:1d:c4:bd:08:c9:05: 6f:5f:f2:b5:1a:37:92:29:8a:bc:8d:69:49:b2:51: 80:f1:6c:01:b8:2b:59:18:22:3e:d9:ba:67:81:4a: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:36:AE:76:1E:30:46:7E:A4:DD:55:BA:00:CB:A7:BE:5F:F6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/148d3b72-54ec-3d60-b3dd-44a6cbf7cef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:81:3d:eb:51:55:97:02:cb:63:81:45:0e:27:26:14:8c:f8: 8f:85:df:ea:b6:5e:92:84:42:ad:b3:65:a2:c3:5d:49:d0:71: a9:20:15:da:ab:31:6c:4c:08:f5:64:58:01:b6:30:84:c1:6a: a0:72:41:b6:1d:76:d6:bf:90:26:47:7f:35:d0:54:e4:7f:6e: c6:36:7c:e5:e6:f7:3f:1b:d3:38:9b:12:27:4d:56:83:f4:04: 97:e1:bf:c1:05:ea:03:05:ce:5b:3a:49:9b:2a:bd:3f:14:d9: b8:d3:eb:7c:37:9e:88:4e:d9:da:42:8b:e7:ba:c3:a8:f8:62: 3f:ed:82:d5:ca:61:04:78:fa:75:18:e9:74:eb:f4:01:97:9c: fa:2f:be:c4:6d:f6:29:80:ee:43:8f:4a:75:35:e0:b8:79:f9: f7:55:5e:fa:dc:ba:74:9c:ff:d2:71:0a:eb:d8:c9:a4:f3:e7: bc:ff:e9:a3:98:38:79:52:e8:43:66:b7:fe:52:e2:07:b8:ae: 5f:10:80:bb:3d:ef:54:5d:3f:15:53:22:33:fe:65:ad:02:67: 55:cd:0f:db:91:3f:58:9c:db:2e:5b:8b:e9:08:8a:96:b2:18: 29:18:4d:d4:7d:78:95:5d:cb:b4:8d:9f:49:5a:ef:2a:99:74: 32:cd:14:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/o9rQwUzkLuLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjhhMDMxMTAtZTMyYS00ZmJmLTkwZmEtNWIxZjc0NTNjZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2XDTAnXoIUwl1L+6dza+FFVeeKjrcmH7xMv KSTd+V8AaVC0UJGex+xnpix4SuzuswYaQ1tbaaY1mx55cusnq0f0L+ZTqq6dZm3S q+3IXbw5DDpoZSly687j7hQPb0T6oCVLtGZvNfhDH55vQRyU3iiPFmf20m7uqAbh D7Vg4ZrSxo9rLeIQp92Nfh/EARgqbX0YEbrWmZkrBefwlLMrkhXtIzgLttUEqVRa L2MlLsv5aDsYYLXu6xJOrcAlfYnBwjWOJgOcKROifAHhw6bXiWCgPRLyyc4yHCQd xL0IyQVvX/K1GjeSKYq8jWlJslGA8WwBuCtZGCI+2bpngUoTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHjNq52HjBGfqTdVboAy6e+X/aTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTQ4ZDNiNzItNTRlYy0z ZDYwLWIzZGQtNDRhNmNiZjdjZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyBPetRVZcCy2OBRQ4nJhSM+I+F3+q2XpKEQq2zZaLDXUnQcakgFdqr MWxMCPVkWAG2MITBaqByQbYddta/kCZHfzXQVOR/bsY2fOXm9z8b0zibEidNVoP0 BJfhv8EF6gMFzls6SZsqvT8U2bjT63w3nohO2dpCi+e6w6j4Yj/tgtXKYQR4+nUY 6XTr9AGXnPovvsRt9imA7kOPSnU14Lh5+fdVXvrcunSc/9JxCuvYyaTz57z/6aOY OHlS6ENmt/5S4ge4rl8QgLs971RdPxVTIjP+Za0CZ1XND9uRP1ic2y5bi+kIipay GCkYTdR9eJVdy7SNn0la7yqZdDLNFDQ= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:41 2025 by rpki-client