$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa File: 89361e25-b928-3290-a7dd-e7b676ca8c69.roa (raw, json) Hash identifier: DquNzrWUTW/6wBdkG6+GtAWvh1q1CRmh8YamjlzD304= Subject key identifier: 58:87:AA:D1:89:04:7B:2C:28:25:A1:4B:9F:C9:49:C6:DF:B8:9F:0A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F9571CB73CFA5330EE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f9:57:1c:b7:3c:fa:53:30:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=65bfc0ae-a2e9-44f0-a61f-754529e630d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:d3:a2:51:09:5a:0d:eb:22:04:75:cb:91: 58:b9:f7:29:51:17:bf:82:00:05:04:a0:3f:40:7d: 23:65:4c:30:73:4c:3d:1a:7b:94:13:88:ab:14:13: 8a:8d:75:14:05:97:59:0e:0e:8a:4a:7e:97:a9:72: 8e:1c:4a:a9:51:52:fb:c4:9b:9c:c2:86:72:95:fe: 46:47:36:e8:64:15:72:d0:65:c3:09:21:22:17:2d: 43:2a:80:fd:b6:9e:c3:09:4e:eb:82:f2:83:16:90: 75:37:ee:b3:50:5e:b2:db:73:16:e1:52:c5:2e:e4: 4f:ed:0f:c3:20:b2:c1:cf:76:93:67:9d:ac:11:eb: 24:68:31:32:51:f5:e9:c5:b2:9e:1c:28:43:94:86: 84:94:80:7f:18:6c:a1:a7:08:26:de:1e:66:cb:d2: b3:26:2f:3c:c6:23:69:2d:43:9f:45:67:84:3d:0e: f2:3d:4d:a8:7e:7b:44:10:60:be:73:68:5c:1f:ac: 36:45:03:c6:37:b0:68:f2:d1:c2:c9:85:06:43:76: 84:1a:7e:e6:f4:5b:65:42:1a:1b:58:dd:f1:59:a0: f9:02:c8:1f:92:da:fe:48:11:d7:e6:f8:8b:a2:0c: 52:82:37:ad:b5:2e:0b:70:42:03:57:6f:11:c1:ce: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:87:AA:D1:89:04:7B:2C:28:25:A1:4B:9F:C9:49:C6:DF:B8:9F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/89361e25-b928-3290-a7dd-e7b676ca8c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:63:c2:1b:ac:74:16:2f:72:93:30:02:e9:c1:31:75:66: c8:35:91:be:48:0b:2d:81:a8:e4:7d:de:9b:c2:0d:cb:fa:76: b7:62:0d:a4:9f:33:52:d5:fc:f5:46:12:1d:a1:0c:3b:61:4e: fa:6d:d1:ea:4b:ed:02:02:21:79:59:ab:90:89:05:f3:44:f9: 24:4e:71:ff:4f:24:15:8f:06:b8:82:75:de:b9:46:b5:87:c4: 5c:4d:14:5c:a4:4c:4a:49:c4:54:76:8a:1f:f3:93:8a:f3:2f: 3e:2c:a9:9a:74:77:59:2d:a0:c0:f1:42:fe:f7:3b:cb:2c:03: 85:97:51:30:2b:b2:fd:7f:64:ec:d2:00:45:5f:a0:5d:f2:ca: 1f:67:72:83:97:f3:4f:b1:a1:31:5c:db:ed:e0:57:0f:e1:e1: 60:47:30:4e:a1:52:a3:9b:a3:d8:22:8f:62:aa:17:50:06:b2: b7:4b:cf:4f:7d:34:f2:7d:d4:8e:96:8d:38:07:8a:46:6f:27: a4:29:4b:1b:63:8a:68:89:b3:96:1b:3d:58:74:e1:c0:2c:da: b8:2e:4c:89:23:d7:dd:de:7e:e1:b3:e4:c0:e8:29:67:66:07: 85:35:83:0c:cc:08:12:ad:1b:75:4c:3b:e8:1f:36:9d:ab:37: 02:14:33:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvlXHLc8+lMw7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjViZmMwYWUtYTJlOS00NGYwLWE2MWYtNzU0NTI5ZTYzMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDvTolEJWg3rIgR1y5FYufcpURe/ggAFBKA/ QH0jZUwwc0w9GnuUE4irFBOKjXUUBZdZDg6KSn6XqXKOHEqpUVL7xJucwoZylf5G RzboZBVy0GXDCSEiFy1DKoD9tp7DCU7rgvKDFpB1N+6zUF6y23MW4VLFLuRP7Q/D ILLBz3aTZ52sEeskaDEyUfXpxbKeHChDlIaElIB/GGyhpwgm3h5my9KzJi88xiNp LUOfRWeEPQ7yPU2ofntEEGC+c2hcH6w2RQPGN7Bo8tHCyYUGQ3aEGn7m9FtlQhob WN3xWaD5Asgfktr+SBHX5viLogxSgjettS4LcEIDV28Rwc4lOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiHqtGJBHssKCWhS5/JScbfuJ8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkzNjFlMjUtYjkyOC0z MjkwLWE3ZGQtZTdiNjc2Y2E4YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRHY8IbrHQWL3KTMALpwTF1Zsg1kb5ICy2BqOR93pvCDcv6drdiDaSf M1LV/PVGEh2hDDthTvpt0epL7QICIXlZq5CJBfNE+SROcf9PJBWPBriCdd65RrWH xFxNFFykTEpJxFR2ih/zk4rzLz4sqZp0d1ktoMDxQv73O8ssA4WXUTArsv1/ZOzS AEVfoF3yyh9ncoOX80+xoTFc2+3gVw/h4WBHME6hUqObo9gij2KqF1AGsrdLz099 NPJ91I6WjTgHikZvJ6QpSxtjimiJs5YbPVh04cAs2rguTIkj193efuGz5MDoKWdm B4U1gwzMCBKtG3VMO+gfNp2rNwIUM0U= -----END CERTIFICATE-----Generated at Thu Oct 30 15:19:34 2025 by rpki-client