$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa File: 2db7e0a5-95c8-3e91-8098-7099383c5d60.roa (raw, json) Hash identifier: 7rOTjqB9jlPeTAqvNN3I9B/8iduFP0XR51JZP12iifA= Subject key identifier: 07:6B:8B:16:2C:FA:5B:79:D1:D2:D8:12:51:EC:2F:C8:EC:F3:B5:A2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F35192F23915E0C02880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397235 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f3:51:92:f2:39:15:e0:c0:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=faa84104-275f-47d2-a9fe-1e8f890f4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:8a:94:cd:34:6b:38:0a:b1:cc:bf:47:81: 76:76:96:7a:cf:f8:b8:b1:b6:d3:31:9f:82:bf:ae: 92:4c:a5:bc:30:b3:c4:61:d3:2e:4c:d5:04:ce:6c: 89:fc:88:50:40:99:bf:97:41:33:37:0c:09:20:c6: 93:90:54:6e:db:24:2d:c1:73:0e:92:ca:66:cd:58: 8c:c0:1a:29:5c:3a:1c:e9:05:a9:d6:d4:8c:3f:6b: 1d:4a:1f:2a:5c:50:c4:cb:a2:64:68:e7:55:67:43: d6:b6:0e:b2:84:7c:a2:71:b3:55:62:b5:2d:14:89: 20:7e:57:14:58:25:fd:89:ab:33:17:db:44:a6:d5: 3c:e6:70:62:37:21:ee:3f:67:95:5b:74:63:15:6d: 64:94:35:83:d1:2e:b1:bb:1a:4d:bf:a1:ae:1a:78: 52:99:82:b6:8e:24:b2:b6:a8:31:a1:09:3d:f2:16: fe:4a:39:a5:59:96:50:21:64:04:b4:92:08:6b:58: 1a:22:03:cc:f8:59:46:dd:a2:03:8d:c6:52:6a:5b: 7f:ce:ac:3b:81:42:63:89:db:5c:47:ce:ff:8e:d5: dd:64:59:da:b3:70:db:e3:52:92:76:80:c1:76:8d: 61:4f:e2:bb:38:cc:d7:b2:06:2b:b2:ce:27:ce:8b: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6B:8B:16:2C:FA:5B:79:D1:D2:D8:12:51:EC:2F:C8:EC:F3:B5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2db7e0a5-95c8-3e91-8098-7099383c5d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8e:c8:7d:62:e2:53:83:ce:4f:29:9b:61:a6:65:a9:b1:8e: 4b:81:69:ef:6d:54:63:0a:06:ff:87:b7:6a:c8:2a:ba:35:39: 6a:b0:bc:fc:81:05:a6:59:8a:1f:5a:cc:a2:04:30:26:f3:3a: e1:6e:6b:a5:f7:f6:7a:e7:c2:e0:17:bd:3a:e7:fd:b6:6a:eb: c8:f1:7a:1b:98:e9:c1:24:ca:f1:79:67:92:cc:0f:b1:b5:96: cb:ac:68:c6:79:a8:ec:50:91:9e:19:bb:55:e7:3f:a8:27:3f: e0:a5:c3:c1:71:54:68:5b:3e:fa:04:3f:01:0b:6e:11:77:1b: 68:bd:15:6c:49:e9:cd:4b:61:5d:fb:e0:87:11:55:2a:e7:af: d6:33:09:eb:c1:35:34:1c:0f:57:48:51:07:86:5e:8d:63:54: cb:84:d5:9e:b8:9e:01:ac:4b:0a:86:a7:4a:59:e8:23:11:49: 68:c7:93:de:1b:65:fd:e1:12:c3:1a:da:11:be:8d:db:f7:14: e7:ae:60:53:02:9d:5e:b7:e5:cf:2f:fa:4f:2c:36:4d:32:38: b6:fa:28:62:ac:7a:61:7d:4b:22:14:9e:09:63:2c:0f:39:77: 53:62:d3:15:e6:ad:c8:34:86:70:ce:ee:ab:11:1b:64:ab:bc: a7:6c:8e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/NRkvI5FeDAKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmFhODQxMDQtMjc1Zi00N2QyLWE5ZmUtMWU4Zjg5MGY0MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhriKlM00azgKscy/R4F2dpZ6z/i4sbbTMZ+C v66STKW8MLPEYdMuTNUEzmyJ/IhQQJm/l0EzNwwJIMaTkFRu2yQtwXMOkspmzViM wBopXDoc6QWp1tSMP2sdSh8qXFDEy6JkaOdVZ0PWtg6yhHyicbNVYrUtFIkgflcU WCX9iaszF9tEptU85nBiNyHuP2eVW3RjFW1klDWD0S6xuxpNv6GuGnhSmYK2jiSy tqgxoQk98hb+SjmlWZZQIWQEtJIIa1gaIgPM+FlG3aIDjcZSalt/zqw7gUJjidtc R87/jtXdZFnas3Db41KSdoDBdo1hT+K7OMzXsgYrss4nzotPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdrixYs+lt50dLYElHsL8js87WiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmRiN2UwYTUtOTVjOC0z ZTkxLTgwOTgtNzA5OTM4M2M1ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+OyH1i4lODzk8pm2GmZamxjkuBae9tVGMKBv+Ht2rIKro1OWqwvPyB BaZZih9azKIEMCbzOuFua6X39nrnwuAXvTrn/bZq68jxehuY6cEkyvF5Z5LMD7G1 lsusaMZ5qOxQkZ4Zu1XnP6gnP+Clw8FxVGhbPvoEPwELbhF3G2i9FWxJ6c1LYV37 4IcRVSrnr9YzCevBNTQcD1dIUQeGXo1jVMuE1Z64ngGsSwqGp0pZ6CMRSWjHk94b Zf3hEsMa2hG+jdv3FOeuYFMCnV635c8v+k8sNk0yOLb6KGKsemF9SyIUngljLA85 d1Ni0xXmrcg0hnDO7qsRG2SrvKdsjq8= -----END CERTIFICATE-----Generated at Mon Nov 3 03:19:08 2025 by rpki-client