$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa File: 891c77a2-ebff-3189-8b9a-5e5effe9b536.roa (raw, json) Hash identifier: F6swXBCqDt+Amd2nZyq6uC0dwn6wtUjKwOXMM641vGc= Subject key identifier: 55:99:B9:75:D5:FB:86:84:03:7A:B7:A1:C8:53:D3:84:D1:E7:45:53 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EACD35BCE19A5FE6F920 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397233 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ea:cd:35:bc:e1:9a:5f:e6:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=f297a083-a88e-49c6-8978-bd377d392a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:17:cf:aa:c4:17:f1:0f:cb:76:29:74:4b: f0:63:10:6d:d3:f8:5c:ec:ad:ff:26:6e:29:6c:ea: c2:1d:43:29:f8:7c:2f:1c:cc:29:e0:c1:77:a0:d9: 8f:e1:fc:f6:a9:5f:37:7c:7f:cd:2c:ca:9d:e6:87: fb:ac:16:b2:18:5c:b1:32:c6:99:5f:71:d9:54:d0: 24:b5:40:69:a7:bf:e4:44:f8:13:a8:05:b7:e6:6d: 69:3e:14:9e:55:21:15:a1:9b:3c:e5:2b:de:13:a3: ba:c2:5c:32:48:ca:5a:9c:6f:fe:e5:dd:12:95:5a: 1d:4c:c9:d5:6e:0d:f7:71:f6:7c:84:ba:6e:70:79: 8b:29:b2:5a:e8:87:fb:44:e2:9a:09:28:2b:ea:52: 81:fc:8a:16:08:18:9a:99:d7:52:6c:ce:1f:aa:d1: 5c:f6:1a:42:0d:d9:7e:86:c9:6f:a4:95:48:22:35: 02:d0:e3:b7:97:6d:1a:1d:d8:59:14:f0:dc:67:5b: d8:36:d4:6d:d4:ff:10:fe:a3:42:a5:40:87:f8:51: 4e:e5:4f:4f:80:70:c8:1b:90:58:40:96:9c:fe:f7: e3:b0:f4:08:bb:a5:fb:2e:af:3b:52:83:17:f8:4a: e8:e4:5f:73:9c:7d:28:16:28:db:4c:dd:a0:16:e6: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:B9:75:D5:FB:86:84:03:7A:B7:A1:C8:53:D3:84:D1:E7:45:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0e:80:51:5b:bb:77:0d:b1:36:31:14:63:5c:02:cf:eb:20: 54:d2:af:26:9b:40:c8:f5:0f:56:e1:64:f7:78:8f:a9:35:4d: 21:a6:36:b4:b2:a1:d0:0d:a2:f2:63:08:8e:40:61:54:6f:a8: 18:70:aa:89:01:0e:8e:8b:8b:3a:d1:1d:d8:bc:52:98:21:24: 13:f5:8a:b0:27:22:14:f7:0f:6c:52:a9:16:9d:b6:eb:93:6c: 75:02:91:0c:20:81:17:8c:85:85:7a:54:9d:29:17:ef:e2:c3: 38:f2:a8:37:8c:eb:f8:82:6d:85:fb:00:d0:02:19:07:01:75: e8:ba:d1:b0:43:09:e8:2c:0a:51:41:75:0c:0e:ce:b4:5d:df: ea:9d:7b:38:36:2d:d2:d8:28:9e:87:f5:79:c4:94:af:ec:31: 83:ad:01:51:c4:24:f7:16:b8:29:c4:7d:4a:5c:23:1f:54:71: 3b:9b:d4:60:ea:aa:a2:96:64:3b:c1:7c:f7:85:4c:f9:1e:7b: 1a:3d:3a:9e:64:fc:f7:c3:d1:72:4d:4f:0a:a3:f9:9a:05:2f: 00:7a:54:f5:72:4d:ba:d7:b8:5a:8f:db:3e:0f:5f:40:19:d5: 1a:53:4e:89:d4:55:1b:a4:2c:b6:49:06:7b:27:a0:c8:e1:91: 23:a3:e5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+rNNbzhml/m+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjI5N2EwODMtYTg4ZS00OWM2LTg5NzgtYmQzNzdkMzkyYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsIXz6rEF/EPy3YpdEvwYxBt0/hc7K3/Jm4p bOrCHUMp+HwvHMwp4MF3oNmP4fz2qV83fH/NLMqd5of7rBayGFyxMsaZX3HZVNAk tUBpp7/kRPgTqAW35m1pPhSeVSEVoZs85SveE6O6wlwySMpanG/+5d0SlVodTMnV bg33cfZ8hLpucHmLKbJa6If7ROKaCSgr6lKB/IoWCBiamddSbM4fqtFc9hpCDdl+ hslvpJVIIjUC0OO3l20aHdhZFPDcZ1vYNtRt1P8Q/qNCpUCH+FFO5U9PgHDIG5BY QJac/vfjsPQIu6X7Lq87UoMX+Ero5F9znH0oFijbTN2gFua6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWZuXXV+4aEA3q3ochT04TR50VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkxYzc3YTItZWJmZi0z MTg5LThiOWEtNWU1ZWZmZTliNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwOgFFbu3cNsTYxFGNcAs/rIFTSryabQMj1D1bhZPd4j6k1TSGmNrSy odANovJjCI5AYVRvqBhwqokBDo6LizrRHdi8UpghJBP1irAnIhT3D2xSqRadtuuT bHUCkQwggReMhYV6VJ0pF+/iwzjyqDeM6/iCbYX7ANACGQcBdei60bBDCegsClFB dQwOzrRd3+qdezg2LdLYKJ6H9XnElK/sMYOtAVHEJPcWuCnEfUpcIx9UcTub1GDq qqKWZDvBfPeFTPkeexo9Op5k/PfD0XJNTwqj+ZoFLwB6VPVyTbrXuFqP2z4PX0AZ 1RpTTonUVRukLLZJBnsnoMjhkSOj5XE= -----END CERTIFICATE-----Generated at Mon Nov 3 10:16:06 2025 by rpki-client