$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa File: 57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa (raw, json) Hash identifier: cfes+WCEvJXPOpglRqseCwEtXC4BxZW/lAhtA2xDXGk= Subject key identifier: C6:1B:C9:FD:AD:8D:0A:67:AC:82:A1:8C:43:80:7A:42:44:C2:3E:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A8B87BF2BDA146BAC900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a8:b8:7b:f2:bd:a1:46:ba:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=a2c4e18d-444a-4f48-b5ef-d9789e5ca7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:8c:d5:ac:cb:9f:71:fc:c6:d1:2e:4d:fa: 0a:9c:2b:c2:6d:15:d2:a4:f3:dd:cd:cb:44:e7:79: 80:e2:4f:b2:d8:4b:21:a0:5a:7b:6e:f7:dc:a6:9a: 1d:0e:9a:65:29:e4:4d:61:11:79:78:95:fb:81:f0: 92:b9:75:53:98:37:c2:fb:d3:c1:d0:73:8c:99:12: dd:8e:2d:3c:eb:a7:32:5b:d4:99:ba:2c:6f:8f:6c: d6:16:a0:94:2b:64:b9:80:48:c2:92:b3:7f:b3:03: c3:42:88:0a:ee:87:7b:ea:ef:b1:e0:73:83:19:92: de:3d:bc:c7:e2:59:9d:58:2b:8a:b0:41:c8:97:c9: 53:ed:e4:f8:90:6a:81:9a:e3:8c:cf:f3:41:3e:c8: 03:d6:75:e8:51:eb:ad:ef:f6:00:fb:2c:dd:7f:11: 0c:47:3b:d1:11:73:f8:c9:ec:99:25:b3:7c:f3:58: 97:6c:2b:03:00:74:35:09:9b:89:83:b2:99:8e:fb: c5:32:0b:ea:5b:a8:d6:46:ff:ee:f3:6d:9a:d8:44: 65:ff:bd:a7:a0:9c:b6:a3:5e:7b:10:af:45:28:86: 62:e5:e6:19:ae:c9:bb:65:bf:8d:9e:4e:1d:0a:ae: 58:08:f7:57:ec:38:9c:5a:bd:14:13:3c:f3:c1:c0: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:C9:FD:AD:8D:0A:67:AC:82:A1:8C:43:80:7A:42:44:C2:3E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57de7fb6-5f37-3b25-a08b-72c1f3ad5455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:13:b8:b3:3b:b0:6a:cc:e9:9a:26:06:c8:83:9b:8c:d5:c5: 7a:8d:49:7c:a5:59:e6:7d:1a:85:0e:6a:79:e9:d4:c9:c6:3a: 85:1b:23:3f:f2:c6:4e:a5:39:cf:8e:3c:45:b8:f2:ba:f5:4a: 93:5f:b5:a0:ae:ae:e0:a5:e7:41:ae:fd:46:35:78:3f:45:80: 16:79:ac:aa:3d:24:e3:7b:ae:f9:b3:41:fd:06:7d:5a:aa:6b: 90:37:c1:42:71:fe:d9:6c:e9:e6:fb:3d:93:bd:14:5b:3f:4d: 3b:27:dd:15:e3:07:57:0f:31:8c:ae:88:47:1b:10:21:cc:f7: ed:0c:bd:fd:17:6b:ca:0d:cc:39:f8:ac:27:f6:bf:90:84:8a: bf:c2:5f:9c:d4:b2:be:0c:99:f2:5f:8c:14:27:c7:36:84:9b: 41:42:37:50:e9:d8:5c:56:a4:14:4e:e1:a1:fd:65:eb:ae:4d: 5f:da:e1:4c:ee:96:28:89:d3:f8:90:02:3f:fd:e0:dd:a1:64: a4:e7:0c:51:3e:a2:28:0c:8d:33:fc:75:00:68:c3:e4:6d:88: e4:2f:50:c5:67:ac:c8:d8:d3:55:4b:76:99:2d:6f:71:5f:1c: 16:4b:34:b3:15:de:4f:c7:01:84:b9:a3:c7:48:21:2e:62:55: 43:fc:78:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwai4e/K9oUa6yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YTJjNGUxOGQtNDQ0YS00ZjQ4LWI1ZWYtZDk3ODllNWNhN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhOM1azLn3H8xtEuTfoKnCvCbRXSpPPdzctE 53mA4k+y2EshoFp7bvfcppodDpplKeRNYRF5eJX7gfCSuXVTmDfC+9PB0HOMmRLd ji0866cyW9SZuixvj2zWFqCUK2S5gEjCkrN/swPDQogK7od76u+x4HODGZLePbzH 4lmdWCuKsEHIl8lT7eT4kGqBmuOMz/NBPsgD1nXoUeut7/YA+yzdfxEMRzvREXP4 yeyZJbN881iXbCsDAHQ1CZuJg7KZjvvFMgvqW6jWRv/u822a2ERl/72noJy2o157 EK9FKIZi5eYZrsm7Zb+Nnk4dCq5YCPdX7DicWr0UEzzzwcDclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYbyf2tjQpnrIKhjEOAekJEwj6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTdkZTdmYjYtNWYzNy0z YjI1LWEwOGItNzJjMWYzYWQ1NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIITuLM7sGrM6ZomBsiDm4zVxXqNSXylWeZ9GoUOannp1MnGOoUbIz/y xk6lOc+OPEW48rr1SpNftaCuruCl50Gu/UY1eD9FgBZ5rKo9JON7rvmzQf0GfVqq a5A3wUJx/tls6eb7PZO9FFs/TTsn3RXjB1cPMYyuiEcbECHM9+0Mvf0Xa8oNzDn4 rCf2v5CEir/CX5zUsr4MmfJfjBQnxzaEm0FCN1Dp2FxWpBRO4aH9ZeuuTV/a4Uzu liiJ0/iQAj/94N2hZKTnDFE+oigMjTP8dQBow+RtiOQvUMVnrMjY01VLdpktb3Ff HBZLNLMV3k/HAYS5o8dIIS5iVUP8eH4= -----END CERTIFICATE-----Generated at Mon Nov 3 10:11:31 2025 by rpki-client