$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa File: 43b56133-f5e5-3e4f-9019-2f81eabec217.roa (raw, json) Hash identifier: 1xnO4naYwaFtznwYhWbB1/GkDtBawiCYbYq18tlvnkM= Subject key identifier: 2F:E4:BE:2E:E6:EC:8E:9F:98:59:37:5C:5B:3C:7D:3E:96:83:DC:B1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EA2CC0D4C83A7FEB0900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397223 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ea:2c:c0:d4:c8:3a:7f:eb:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=e2b2f806-6095-42b2-95aa-933d112ff24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:bd:06:37:62:30:ff:d1:d0:d8:6c:42:65: 51:d9:9d:36:5e:ee:52:73:9c:4d:ea:6d:28:1e:1a: 4f:fb:7a:7c:cf:37:28:b4:5b:ce:77:12:8c:f2:31: 2d:83:44:27:e9:39:75:16:67:0c:22:60:12:73:0c: 4e:43:8b:e2:84:6e:ab:fd:1a:e6:6f:30:90:55:28: 12:26:35:fd:84:05:c6:7e:8e:08:fb:10:0f:30:ff: c6:00:2c:a6:7f:87:e7:9b:f4:e5:25:67:06:cf:43: e4:26:dd:88:91:2b:e4:27:36:43:9f:03:c9:cc:10: 36:c6:3e:d8:f0:28:92:26:bb:98:07:55:04:21:a2: f5:3d:c1:8e:aa:d2:00:2d:ff:b1:f6:0c:95:67:34: a7:19:44:8f:41:57:15:a0:bf:f1:32:1e:fb:0e:f3: fb:99:8c:9a:11:32:fe:da:f8:90:92:4b:fc:d2:9f: 86:32:8e:f6:25:34:6e:52:a8:21:2c:63:87:a6:ce: 70:bd:9d:5a:45:87:52:3f:31:2f:c8:dc:ab:45:31: 3c:33:f7:bf:0f:19:6a:10:f1:f1:0b:c1:c8:c1:e7: 09:f0:f1:62:3c:b6:83:71:d7:4e:1f:d3:bd:38:d8: 6a:7a:7b:67:a9:70:72:df:97:90:65:14:4c:83:0a: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E4:BE:2E:E6:EC:8E:9F:98:59:37:5C:5B:3C:7D:3E:96:83:DC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f5:31:04:a0:ed:60:cf:82:51:24:c4:e4:a1:31:26:80:db: f2:84:fe:c0:3d:ac:1b:c4:cb:e6:05:7b:52:97:16:61:0b:a4: 1d:c9:cb:07:7e:5d:a7:2c:bb:54:3d:2a:59:8c:e6:b2:29:19: fc:9a:6e:e1:b5:97:7e:ec:43:94:67:96:7c:36:3e:dc:b7:17: 58:ef:e8:b6:9e:76:f8:f2:ea:13:e8:40:33:c2:72:11:b5:47: 5b:db:4a:4a:3f:22:85:c8:56:ca:4f:f3:3b:e1:f8:09:8d:4f: 93:64:f7:e4:16:43:0e:40:cd:ba:90:51:70:ed:fc:3c:0e:fa: 25:9f:f4:e5:9e:66:d6:f0:55:a6:01:73:94:39:8e:ba:82:58: 0a:67:bb:b5:26:ad:be:b1:63:49:cd:49:0e:14:06:84:0e:7b: 11:3b:90:ad:15:a5:d9:98:f4:8c:4e:9d:24:fc:b4:99:6e:d2: a4:25:89:0a:6a:39:a8:32:58:ca:39:56:fb:35:23:ae:e1:ef: 01:f5:bd:50:24:c3:fd:39:e2:86:33:a9:7c:b7:4f:56:ec:fb: 8b:ea:30:75:a0:1f:de:f6:ab:d4:e9:85:b9:10:6d:11:00:05: 80:20:a5:53:98:73:ca:f1:eb:fa:09:fa:59:cf:ed:84:0a:57: f4:57:f7:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+oswNTIOn/rCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTJiMmY4MDYtNjA5NS00MmIyLTk1YWEtOTMzZDExMmZmMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzra9BjdiMP/R0NhsQmVR2Z02Xu5Sc5xN6m0o HhpP+3p8zzcotFvOdxKM8jEtg0Qn6Tl1FmcMImAScwxOQ4vihG6r/RrmbzCQVSgS JjX9hAXGfo4I+xAPMP/GACymf4fnm/TlJWcGz0PkJt2IkSvkJzZDnwPJzBA2xj7Y 8CiSJruYB1UEIaL1PcGOqtIALf+x9gyVZzSnGUSPQVcVoL/xMh77DvP7mYyaETL+ 2viQkkv80p+GMo72JTRuUqghLGOHps5wvZ1aRYdSPzEvyNyrRTE8M/e/DxlqEPHx C8HIwecJ8PFiPLaDcddOH9O9ONhqentnqXBy35eQZRRMgwpzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/kvi7m7I6fmFk3XFs8fT6Wg9yxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNiNTYxMzMtZjVlNS0z ZTRmLTkwMTktMmY4MWVhYmVjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX1MQSg7WDPglEkxOShMSaA2/KE/sA9rBvEy+YFe1KXFmELpB3Jywd+ Xacsu1Q9KlmM5rIpGfyabuG1l37sQ5Rnlnw2Pty3F1jv6Laedvjy6hPoQDPCchG1 R1vbSko/IoXIVspP8zvh+AmNT5Nk9+QWQw5AzbqQUXDt/DwO+iWf9OWeZtbwVaYB c5Q5jrqCWApnu7Umrb6xY0nNSQ4UBoQOexE7kK0VpdmY9IxOnST8tJlu0qQliQpq OagyWMo5Vvs1I67h7wH1vVAkw/054oYzqXy3T1bs+4vqMHWgH972q9TphbkQbREA BYAgpVOYc8rx6/oJ+lnP7YQKV/RX9zU= -----END CERTIFICATE-----Generated at Mon Nov 3 03:18:21 2025 by rpki-client