$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa File: 43de9b74-3c3f-3a75-89ea-550e31a772e0.roa (raw, json) Hash identifier: VTEnhkBmLagjLuOEKGbhJfhXPIQB/wxgkOO49ONrTOg= Subject key identifier: 11:D5:9E:7E:DE:B3:4C:13:2E:20:98:8C:FE:B5:69:DA:11:4F:1A:87 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C80880E6BDF07EAE644B8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397242 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:80:88:0e:6b:df:07:ea:e6:44:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=bd4c7391-d620-40ee-bf7c-1e819f5a21b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:09:e1:a6:f1:d3:2a:d1:de:87:8d:d6:1f:38: 41:aa:69:30:aa:fa:38:d3:d7:1a:1b:53:9d:12:79: 9f:9f:22:6c:33:25:88:b8:5e:c6:65:87:70:21:6a: cf:78:a7:2f:ce:67:91:07:60:e3:a4:ce:03:2e:cf: b9:4c:53:84:24:7e:4c:b9:0c:1c:d7:1b:97:c4:03: a4:fa:c4:13:51:72:49:0f:7f:24:bd:a2:54:77:93: 8f:d1:91:06:f9:6a:41:50:be:14:ee:a5:59:f1:dc: 6e:e5:85:0f:bc:6a:0a:07:e5:ba:03:0e:58:33:05: 67:de:3d:28:a3:6b:40:6e:1c:9f:cd:e8:55:d7:59: 30:0a:1e:3b:a8:18:f8:89:e5:06:8f:b1:89:33:b0: 8d:7c:ca:50:6c:ac:57:6e:5b:82:ac:66:db:d5:ba: 8d:92:94:b1:90:81:f8:3a:59:1e:af:24:85:76:45: 08:81:e1:6b:a1:69:5c:74:a5:6f:dc:22:e7:6a:7e: 5b:67:58:ff:b3:02:52:ff:3c:64:35:9e:21:8c:af: ef:75:79:a2:43:4e:48:91:9e:d3:73:b2:51:e6:1c: c3:5f:57:27:6d:59:c9:a8:c1:ea:34:af:66:ce:86: ec:8d:5d:ac:ba:46:e0:15:f4:02:44:7f:a3:83:c9: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:9E:7E:DE:B3:4C:13:2E:20:98:8C:FE:B5:69:DA:11:4F:1A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de9b74-3c3f-3a75-89ea-550e31a772e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:09:30:ef:0a:ad:97:cc:3f:38:a8:a1:cf:7b:8e:39:e3:c6: 3c:aa:64:43:a4:0e:54:08:df:5c:9e:f1:08:ae:e9:5a:3d:23: 27:6d:2a:d2:64:c3:ee:f1:a1:24:c6:80:ea:f0:2d:1d:06:62: 1d:53:f5:a7:2b:59:61:ee:73:d8:ef:de:cf:52:ca:42:51:f4: c5:22:ef:91:6f:b9:57:5e:1a:2d:f1:89:76:d1:64:b7:80:1c: d8:6e:12:18:c0:36:51:96:e4:03:57:4b:0b:c9:08:f5:da:be: 43:45:71:08:b0:40:6c:10:27:05:bb:11:93:60:0d:61:74:71: fa:1b:1a:19:6f:1a:4f:07:81:64:49:4e:56:64:de:e7:65:32: 4a:45:5e:fb:51:63:86:b2:6e:04:21:c5:24:8c:a9:9a:d1:f9: e8:ae:54:34:da:29:5d:b6:e9:67:b4:40:60:c1:28:59:a8:1e: 52:b6:52:c6:f9:fc:ca:77:29:fb:78:2b:cf:fc:f5:25:fb:6c: f5:8e:74:3d:0e:c3:56:a3:fc:2b:d2:38:99:f7:cc:f6:4e:93: 04:4d:65:ba:97:9c:ee:19:17:2d:9a:d8:6a:ff:8d:bd:38:6b: 6f:09:c1:a0:a7:c8:43:98:2b:02:99:4d:85:e8:48:fa:35:3b: ec:9a:f9:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbICIDmvfB+rmRLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YmQ0YzczOTEtZDYyMC00MGVlLWJmN2MtMWU4MTlmNWEyMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQnhpvHTKtHeh43WHzhBqmkwqvo409caG1Od EnmfnyJsMyWIuF7GZYdwIWrPeKcvzmeRB2DjpM4DLs+5TFOEJH5MuQwc1xuXxAOk +sQTUXJJD38kvaJUd5OP0ZEG+WpBUL4U7qVZ8dxu5YUPvGoKB+W6Aw5YMwVn3j0o o2tAbhyfzehV11kwCh47qBj4ieUGj7GJM7CNfMpQbKxXbluCrGbb1bqNkpSxkIH4 OlkerySFdkUIgeFroWlcdKVv3CLnan5bZ1j/swJS/zxkNZ4hjK/vdXmiQ05IkZ7T c7JR5hzDX1cnbVnJqMHqNK9mzobsjV2sukbgFfQCRH+jg8nbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHVnn7es0wTLiCYjP61adoRTxqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNkZTliNzQtM2MzZi0z YTc1LTg5ZWEtNTUwZTMxYTc3MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQJMO8KrZfMPziooc97jjnjxjyqZEOkDlQI31ye8Qiu6Vo9IydtKtJk w+7xoSTGgOrwLR0GYh1T9acrWWHuc9jv3s9SykJR9MUi75FvuVdeGi3xiXbRZLeA HNhuEhjANlGW5ANXSwvJCPXavkNFcQiwQGwQJwW7EZNgDWF0cfobGhlvGk8HgWRJ TlZk3udlMkpFXvtRY4aybgQhxSSMqZrR+eiuVDTaKV226We0QGDBKFmoHlK2Usb5 /Mp3Kft4K8/89SX7bPWOdD0Ow1aj/CvSOJn3zPZOkwRNZbqXnO4ZFy2a2Gr/jb04 a28JwaCnyEOYKwKZTYXoSPo1O+ya+a0= -----END CERTIFICATE-----Generated at Mon Nov 3 03:18:21 2025 by rpki-client