$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa File: 3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa (raw, json) Hash identifier: 6y3/X4OutL5Fd7vraXouKjxDchpe6jrW9OjZyDHByJE= Subject key identifier: 6E:B7:68:BF:AD:82:E0:2D:0F:24:0D:A9:FB:50:D7:6B:90:CD:42:1D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1E9CEEA41FA8B11F5FC08 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397224 IP address blocks: 156.154.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:e9:ce:ea:41:fa:8b:11:f5:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=dc37875b-8ba7-47d6-aca0-4843b83a227c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:7c:db:0c:56:e5:07:51:fe:63:06:36:f0: 36:81:a8:ee:98:ac:85:d9:c3:05:97:cc:cb:9a:11: 12:53:99:6e:b0:55:55:71:a0:9c:85:af:f8:e2:d5: d9:13:51:bb:2d:dd:4e:2c:09:82:21:21:7f:10:9b: e6:ec:29:26:82:4f:21:f1:8d:19:80:95:8f:62:36: 78:f1:5f:7d:a8:f0:e0:41:ac:8d:06:b6:b8:fb:2f: d6:40:8f:d0:71:1b:ba:ff:3d:40:23:ca:a8:54:f1: 1c:9f:9c:f3:9e:40:9f:9d:da:7a:66:fa:76:1e:7b: 92:5c:38:c5:d4:34:b4:df:3c:cb:c3:76:75:d9:0a: b0:6f:82:ff:4d:51:4b:8c:98:c6:3c:6c:4d:14:1a: 76:19:fe:65:bc:bc:5c:cd:09:6e:6a:3c:75:27:9c: 48:13:34:5f:24:69:07:97:c7:bc:ba:74:9c:a6:7e: 9d:0f:a2:38:69:c9:74:96:8a:c1:ee:99:e7:4e:3c: df:92:84:bf:70:a1:80:c6:ef:f4:0f:bc:f1:af:d9: 00:9a:4d:22:6a:60:b9:74:98:83:b9:25:72:c9:ba: e7:b8:dc:83:40:54:99:63:29:0c:93:fc:10:64:ca: 16:e1:70:27:8f:35:a0:39:89:98:f4:50:44:be:39: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:68:BF:AD:82:E0:2D:0F:24:0D:A9:FB:50:D7:6B:90:CD:42:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3f8ff3f9-5134-3f3b-b70f-5c8f5aa1c663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:87:62:b3:30:2f:2d:eb:2c:78:6b:b1:6e:4c:e0:69:e8:c3: bd:c9:e0:95:9e:8e:50:2d:da:77:67:fb:ec:c9:6a:d7:0c:95: bf:4f:1d:65:05:93:8f:4b:83:bf:85:14:8d:8d:7b:4d:0e:2b: 99:18:10:a6:75:9a:8a:f7:d0:cc:dd:44:29:82:a8:2f:17:ad: d9:09:8d:e5:0f:56:87:d2:53:04:ae:29:2f:88:b0:f3:46:af: df:f8:0a:ad:72:78:75:d3:28:2a:4d:6f:c9:5d:1c:d5:bf:1d: ec:d7:e1:86:b3:e2:bb:ed:8f:0e:3b:db:8d:ce:66:3c:11:a5: 68:5b:27:fa:f5:5c:2e:40:18:46:2b:88:a2:66:a9:06:6a:f0: c3:4c:a8:be:71:db:05:3f:e2:ad:ae:8b:98:58:e5:01:67:4d: 3a:dd:89:0f:86:73:47:95:9e:06:e4:31:e3:4e:aa:95:6d:5d: c8:d9:f3:18:69:d3:62:fb:23:76:a6:00:2e:14:6e:bb:f3:b3: 0f:72:d0:36:b6:70:70:2b:87:83:02:c5:03:97:10:57:8c:5a: 5d:2d:92:bc:73:93:b8:8a:45:41:05:e3:56:82:0a:d9:48:73: 56:38:93:71:c7:ac:01:5a:8a:8b:35:0d:03:ef:db:dc:e9:dd: bb:20:13:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4enO6kH6ixH1/AgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGMzNzg3NWItOGJhNy00N2Q2LWFjYTAtNDg0M2I4M2EyMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmet82wxW5QdR/mMGNvA2gajumKyF2cMFl8zL mhESU5lusFVVcaCcha/44tXZE1G7Ld1OLAmCISF/EJvm7Ckmgk8h8Y0ZgJWPYjZ4 8V99qPDgQayNBra4+y/WQI/QcRu6/z1AI8qoVPEcn5zznkCfndp6Zvp2HnuSXDjF 1DS03zzLw3Z12Qqwb4L/TVFLjJjGPGxNFBp2Gf5lvLxczQluajx1J5xIEzRfJGkH l8e8unScpn6dD6I4acl0lorB7pnnTjzfkoS/cKGAxu/0D7zxr9kAmk0iamC5dJiD uSVyybrnuNyDQFSZYykMk/wQZMoW4XAnjzWgOYmY9FBEvjmL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG63aL+tguAtDyQNqftQ12uQzUIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Y4ZmYzZjktNTEzNC0z ZjNiLWI3MGYtNWM4ZjVhYTFjNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaHYrMwLy3rLHhrsW5M4Gnow73J4JWejlAt2ndn++zJatcMlb9PHWUF k49Lg7+FFI2Ne00OK5kYEKZ1mor30MzdRCmCqC8XrdkJjeUPVofSUwSuKS+IsPNG r9/4Cq1yeHXTKCpNb8ldHNW/HezX4Yaz4rvtjw47243OZjwRpWhbJ/r1XC5AGEYr iKJmqQZq8MNMqL5x2wU/4q2ui5hY5QFnTTrdiQ+Gc0eVngbkMeNOqpVtXcjZ8xhp 02L7I3amAC4Ubrvzsw9y0Da2cHArh4MCxQOXEFeMWl0tkrxzk7iKRUEF41aCCtlI c1Y4k3HHrAFaios1DQPv29zp3bsgE54= -----END CERTIFICATE-----Generated at Mon Nov 3 10:14:26 2025 by rpki-client