$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/855f8d4e-2277-3c64-8456-e6f068100296.roa File: 855f8d4e-2277-3c64-8456-e6f068100296.roa (raw, json) Hash identifier: 0H4VIWfMSIpBce9xABpElpoAsCcrDWmf/bWFv61XvMQ= Subject key identifier: CD:BB:37:91:71:35:03:8C:7B:A5:90:76:F6:FD:8A:71:30:F8:D7:BB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F6E0DC7202A627E30500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/855f8d4e-2277-3c64-8456-e6f068100296.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397223 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f6:e0:dc:72:02:a6:27:e3:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=25d4e004-d4eb-4d57-9124-417aa46ac3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:48:69:2a:a3:89:d0:6f:b5:e3:a7:5e:5e: 4a:b0:e5:46:44:35:16:13:88:f3:17:bd:37:39:4d: b3:21:5e:e8:99:e1:1f:e5:1a:fa:0a:93:ce:c5:55: 39:e8:31:55:ec:30:f8:41:c9:e7:98:bb:85:45:c9: c9:46:d0:47:b5:c9:50:31:56:ce:0e:11:7c:28:2b: 5f:59:a8:b3:15:b1:31:4f:93:5b:6d:1c:5b:39:9c: 3c:11:d5:93:3c:ce:77:97:d3:0e:84:8f:af:5d:81: 53:a9:ea:6f:60:b0:c6:9c:73:1a:2a:de:00:97:fd: 31:f9:f3:91:69:d9:83:98:83:29:7e:c2:96:cf:a2: f1:a9:8b:8b:df:e9:5a:9e:12:6e:2d:ce:1c:5e:4d: f3:69:f2:b8:bf:52:f0:d6:59:b8:9f:d1:e2:39:71: 66:da:66:26:f1:1e:d7:b5:86:0b:2c:fc:30:8b:91: 50:4a:f6:b7:a6:36:99:10:f1:b0:ab:3a:1b:bc:bc: 0f:18:e1:ed:fc:80:77:81:69:02:95:1a:04:15:2e: b7:7a:9f:ea:92:f5:ad:6f:ab:4f:f2:73:2c:c7:e6: 3e:1b:e1:db:78:e1:f9:1d:e4:9a:96:4e:cf:98:85: 02:79:cf:d6:da:2a:60:05:a1:2e:ac:35:28:1d:7f: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BB:37:91:71:35:03:8C:7B:A5:90:76:F6:FD:8A:71:30:F8:D7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/855f8d4e-2277-3c64-8456-e6f068100296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0b:ba:b7:62:a3:a1:d4:15:ca:d8:99:5b:a2:0d:fa:b5:75: 42:1e:76:d1:74:96:19:c0:01:c4:b5:4e:3e:3e:d7:7f:f1:5c: da:45:dc:f5:60:1d:13:9c:08:2b:d5:38:b5:99:e7:7c:62:5c: 97:01:f3:57:2a:38:0c:b7:f1:48:9f:05:db:e8:59:5b:83:cb: 40:37:58:86:13:c4:f4:72:cf:e0:2b:3b:12:d2:0d:68:8f:4a: ca:88:b1:18:c0:56:5b:0a:50:d7:94:0c:04:7d:4b:89:4d:13: 9a:11:f0:a2:f9:8e:b2:ba:52:9a:c2:25:df:59:e3:e7:84:82: 23:74:33:64:d3:b8:e7:8a:15:cd:b8:bc:47:77:4b:5b:f8:99: b3:a7:0a:0c:be:22:fe:82:10:83:ec:4b:d7:c1:b0:4b:55:f7: fb:97:e0:25:e9:cd:51:4c:36:bc:e5:c0:a8:f7:39:e8:41:91: 78:22:cf:db:28:8e:b7:41:20:9c:19:24:49:78:7b:42:97:56: 7f:2e:59:1f:2a:cb:fb:f2:c5:b1:6a:9d:d1:4f:87:9c:ba:c2: 5b:0d:49:0e:a0:6e:3b:a2:aa:8f:06:43:91:c0:e9:b2:c7:e8: f1:34:6d:25:27:5a:25:f5:49:f2:51:f4:a8:fe:0e:2e:60:8f: 99:6b:7f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/bg3HICpifjBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjVkNGUwMDQtZDRlYi00ZDU3LTkxMjQtNDE3YWE0NmFjM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjRIaSqjidBvteOnXl5KsOVGRDUWE4jzF703 OU2zIV7omeEf5Rr6CpPOxVU56DFV7DD4QcnnmLuFRcnJRtBHtclQMVbODhF8KCtf WaizFbExT5NbbRxbOZw8EdWTPM53l9MOhI+vXYFTqepvYLDGnHMaKt4Al/0x+fOR admDmIMpfsKWz6LxqYuL3+lanhJuLc4cXk3zafK4v1Lw1lm4n9HiOXFm2mYm8R7X tYYLLPwwi5FQSva3pjaZEPGwqzobvLwPGOHt/IB3gWkClRoEFS63ep/qkvWtb6tP 8nMsx+Y+G+HbeOH5HeSalk7PmIUCec/W2ipgBaEurDUoHX/o7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM27N5FxNQOMe6WQdvb9inEw+Ne7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODU1ZjhkNGUtMjI3Ny0z YzY0LTg0NTYtZTZmMDY4MTAwMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIELurdio6HUFcrYmVuiDfq1dUIedtF0lhnAAcS1Tj4+13/xXNpF3PVg HROcCCvVOLWZ53xiXJcB81cqOAy38UifBdvoWVuDy0A3WIYTxPRyz+ArOxLSDWiP SsqIsRjAVlsKUNeUDAR9S4lNE5oR8KL5jrK6UprCJd9Z4+eEgiN0M2TTuOeKFc24 vEd3S1v4mbOnCgy+Iv6CEIPsS9fBsEtV9/uX4CXpzVFMNrzlwKj3OehBkXgiz9so jrdBIJwZJEl4e0KXVn8uWR8qy/vyxbFqndFPh5y6wlsNSQ6gbjuiqo8GQ5HA6bLH 6PE0bSUnWiX1SfJR9Kj+Di5gj5lrf+w= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:45 2025 by rpki-client