$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa File: 3f8984fc-3da7-3396-baa3-109af56e8af5.roa (raw, json) Hash identifier: tU/h2g7tlsZD/8hdaGqCXj+Wb4FVRGB9M1qcn+g+PZ4= Subject key identifier: 9B:03:9C:DB:CC:51:6E:92:A4:35:A6:CA:4B:40:CA:7C:83:1E:C1:4B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E9AAA56C2B9685BCF7D0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397214 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e9:aa:a5:6c:2b:96:85:bc:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=c1b7e651-ff97-476a-b296-9d7c346c2846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:bb:f8:04:e4:73:ec:e3:90:7e:74:01:5b: 2d:c4:ce:4b:d1:a4:0f:4f:f7:1e:ac:1c:b2:c8:8d: ec:e2:7c:c0:10:bb:b1:65:a6:f2:90:2e:d9:c6:99: 69:9e:5e:47:79:1d:5c:c4:01:64:c2:63:a6:f9:42: fd:e1:9a:8e:48:4d:5f:bd:01:fb:1f:0e:62:40:71: 7d:d6:8e:9b:9c:d5:59:d5:d6:50:dc:74:a8:ce:84: 46:21:f6:30:22:6b:e3:9b:54:e5:2f:e6:36:f1:44: 69:a9:7a:99:a3:53:99:39:20:66:1b:43:88:e1:78: 0f:1f:0f:9b:60:fe:75:31:6d:ab:89:8c:bf:37:9a: 74:78:ff:e6:ac:f6:dc:bb:67:56:27:a3:7b:74:3a: ba:29:c5:5c:9d:d9:e7:05:bf:10:2e:4d:12:4b:02: 7c:c4:57:55:dd:96:64:b3:4e:3f:17:29:21:be:47: 24:7c:c2:de:12:01:5b:59:97:10:ca:be:00:5b:13: 0d:e1:68:a2:7f:86:11:fc:ff:93:55:a0:df:4a:7a: 1f:c8:59:be:d1:d4:7c:95:85:db:e7:7f:f5:a3:3d: 3f:5e:a2:85:3c:0b:b8:07:f9:11:91:45:59:4d:a2: 37:7c:23:40:f8:6b:78:7e:de:c5:47:4c:11:a6:9d: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:9C:DB:CC:51:6E:92:A4:35:A6:CA:4B:40:CA:7C:83:1E:C1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8984fc-3da7-3396-baa3-109af56e8af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c1:b2:ca:75:8a:01:69:38:8a:44:f1:9b:3f:31:df:84:e3: 0e:26:df:47:2e:8c:8e:f4:23:b5:ed:ce:2e:c1:1e:45:30:d8: 57:97:ce:88:3b:ea:cd:56:13:9f:40:d7:4c:82:c7:de:01:f7: 73:07:92:94:c5:cd:8a:97:14:fc:89:18:b1:a6:89:74:e5:6a: 83:6f:8a:4d:46:ab:ae:06:2f:29:58:25:83:c2:24:7b:d5:af: 4c:8b:c6:dd:a0:f6:7e:2c:04:0d:d0:ce:75:e5:ed:98:20:a7: 4f:23:d0:62:b8:c0:d4:d9:65:62:ca:b6:5d:4f:75:e5:22:44: a1:8e:1e:8c:c1:65:23:a5:22:8f:41:cf:b1:2a:17:6a:4a:7e: 73:ec:ee:7f:a4:17:98:ad:d9:c5:7d:c3:2d:d9:c7:cd:02:8f: cd:5a:45:84:41:1b:b7:ff:ef:53:80:08:79:a8:92:f4:ec:94: 64:ae:de:61:4c:6f:f4:c5:8a:30:b9:e7:18:b9:1f:70:dd:84: 4b:82:af:c6:d9:24:0a:28:15:4b:50:d6:84:75:36:cc:9a:26: fe:1f:c8:66:ae:7a:03:94:78:d5:81:16:96:38:ce:66:af:15: dd:0c:9e:fb:03:65:54:4f:28:8b:54:b5:a4:10:0e:46:69:3a: 97:57:00:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+mqpWwrloW899AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YzFiN2U2NTEtZmY5Ny00NzZhLWIyOTYtOWQ3YzM0NmMyODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFu7+ATkc+zjkH50AVstxM5L0aQPT/cerByy yI3s4nzAELuxZabykC7Zxplpnl5HeR1cxAFkwmOm+UL94ZqOSE1fvQH7Hw5iQHF9 1o6bnNVZ1dZQ3HSozoRGIfYwImvjm1TlL+Y28URpqXqZo1OZOSBmG0OI4XgPHw+b YP51MW2riYy/N5p0eP/mrPbcu2dWJ6N7dDq6KcVcndnnBb8QLk0SSwJ8xFdV3ZZk s04/FykhvkckfMLeEgFbWZcQyr4AWxMN4Wiif4YR/P+TVaDfSnofyFm+0dR8lYXb 53/1oz0/XqKFPAu4B/kRkUVZTaI3fCNA+Gt4ft7FR0wRpp0sVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsDnNvMUW6SpDWmyktAynyDHsFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y4OTg0ZmMtM2RhNy0z Mzk2LWJhYTMtMTA5YWY1NmU4YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7Bssp1igFpOIpE8Zs/Md+E4w4m30cujI70I7Xtzi7BHkUw2FeXzog7 6s1WE59A10yCx94B93MHkpTFzYqXFPyJGLGmiXTlaoNvik1Gq64GLylYJYPCJHvV r0yLxt2g9n4sBA3QznXl7Zggp08j0GK4wNTZZWLKtl1PdeUiRKGOHozBZSOlIo9B z7EqF2pKfnPs7n+kF5it2cV9wy3Zx80Cj81aRYRBG7f/71OACHmokvTslGSu3mFM b/TFijC55xi5H3DdhEuCr8bZJAooFUtQ1oR1NsyaJv4fyGauegOUeNWBFpY4zmav Fd0MnvsDZVRPKItUtaQQDkZpOpdXAPE= -----END CERTIFICATE-----Generated at Mon Nov 3 03:16:05 2025 by rpki-client