$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/947ddee0-97d9-337f-816a-50cbc5924100.roa File: 947ddee0-97d9-337f-816a-50cbc5924100.roa (raw, json) Hash identifier: 4NDwoH+d0AY8+u4I7vNmQQ165LkEIQwEkU5tKI6JhaA= Subject key identifier: C1:34:28:FA:0F:99:46:A6:91:29:66:35:E8:53:34:F7:6E:6F:6F:C5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E96E7C1157B35B0CB6C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/947ddee0-97d9-337f-816a-50cbc5924100.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397243 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e9:6e:7c:11:57:b3:5b:0c:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=5a9ecd51-cb43-4bc2-a552-45c5de655e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:1b:72:0d:dd:0b:df:71:e0:09:66:ba:15: 99:25:ca:8b:54:23:01:c1:72:00:8f:3e:ce:e9:43: 06:d5:2b:18:e0:eb:d5:fd:dc:c7:d1:1e:1f:2a:b3: 34:11:f1:36:41:7c:3c:db:0a:bf:c7:90:ad:7a:07: b5:de:13:d4:04:d0:02:13:d4:e9:82:11:f0:c9:8d: c5:ba:a6:6f:c9:40:42:c3:36:2b:27:50:22:cc:5d: 3f:b9:41:e8:23:e3:31:bb:e9:f5:46:9d:85:25:82: c6:f6:23:41:04:f7:3a:fc:b5:ee:26:66:d9:fc:43: 49:96:cd:91:c5:c1:00:ce:ee:51:b4:e3:34:8e:d2: 50:4a:90:01:2e:d4:ce:81:79:4b:f5:8c:77:40:25: c3:1a:27:8e:65:e3:a2:c2:ee:5b:ca:e2:96:95:e1: b3:64:b8:cc:c1:9c:8c:28:22:b7:44:20:db:f9:47: e1:10:bb:b4:26:34:fd:a5:6a:b1:de:44:7a:6c:e5: 57:f1:49:ea:46:ce:a4:d9:ad:bc:87:0d:3f:15:9d: 4c:15:e7:c7:d9:75:6f:dd:85:17:43:74:d6:87:12: 87:81:87:63:73:27:6e:53:bd:dc:86:7c:23:a1:a7: d9:77:07:2e:58:b5:00:f9:1f:3a:7b:f1:de:6a:94: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:28:FA:0F:99:46:A6:91:29:66:35:E8:53:34:F7:6E:6F:6F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/947ddee0-97d9-337f-816a-50cbc5924100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b4:45:1a:e6:d2:47:47:26:d6:3f:17:d1:0a:3d:84:ed:0b: 5d:3d:02:d7:e3:77:b6:5b:ba:1c:49:74:bc:89:4b:7c:e2:bf: 85:0c:ea:da:7e:03:ff:a3:b2:8a:b7:1e:41:3d:4b:38:cb:7d: 1f:bf:4f:9e:3f:2e:ac:9c:1a:28:4b:6c:aa:07:59:ce:9d:f6: 1e:aa:b0:82:65:10:e3:45:d7:62:7d:ba:11:e8:c1:7d:2b:8e: d2:14:22:b9:87:37:76:b1:5f:06:08:0d:37:13:88:7d:7d:c9: 87:0c:3a:5d:33:83:fd:c7:a8:c5:54:84:ad:ef:34:21:5a:46: c9:24:e8:45:49:15:44:17:53:5a:42:37:11:01:0c:92:95:95: be:30:c8:11:6a:23:71:e4:01:0a:5e:b3:7f:dc:bf:f3:af:13: 98:f6:78:b1:2c:9d:92:cf:5d:18:8e:99:96:bb:c3:01:7f:30: 8e:fd:0d:55:1b:1c:55:79:77:13:fc:60:87:f3:8b:3c:ee:8b: d0:76:4a:8d:5f:95:88:73:57:08:9e:c4:f2:61:3f:be:37:ff: 1b:70:bb:86:f5:c1:64:62:03:4c:02:02:37:47:d5:ad:a6:46: 8b:bf:37:dc:06:04:8d:e8:8c:23:b6:25:b3:8f:3b:44:8f:ec: 02:b6:75:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+lufBFXs1sMtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NWE5ZWNkNTEtY2I0My00YmMyLWE1NTItNDVjNWRlNjU1ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxMbcg3dC99x4AlmuhWZJcqLVCMBwXIAjz7O 6UMG1SsY4OvV/dzH0R4fKrM0EfE2QXw82wq/x5Ctege13hPUBNACE9TpghHwyY3F uqZvyUBCwzYrJ1AizF0/uUHoI+Mxu+n1Rp2FJYLG9iNBBPc6/LXuJmbZ/ENJls2R xcEAzu5RtOM0jtJQSpABLtTOgXlL9Yx3QCXDGieOZeOiwu5byuKWleGzZLjMwZyM KCK3RCDb+UfhELu0JjT9pWqx3kR6bOVX8UnqRs6k2a28hw0/FZ1MFefH2XVv3YUX Q3TWhxKHgYdjcyduU73chnwjoafZdwcuWLUA+R86e/HeapQ7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME0KPoPmUamkSlmNehTNPdub2/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTQ3ZGRlZTAtOTdkOS0z MzdmLTgxNmEtNTBjYmM1OTI0MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe0RRrm0kdHJtY/F9EKPYTtC109Atfjd7ZbuhxJdLyJS3ziv4UM6tp+ A/+jsoq3HkE9SzjLfR+/T54/LqycGihLbKoHWc6d9h6qsIJlEONF12J9uhHowX0r jtIUIrmHN3axXwYIDTcTiH19yYcMOl0zg/3HqMVUhK3vNCFaRskk6EVJFUQXU1pC NxEBDJKVlb4wyBFqI3HkAQpes3/cv/OvE5j2eLEsnZLPXRiOmZa7wwF/MI79DVUb HFV5dxP8YIfzizzui9B2So1flYhzVwiexPJhP743/xtwu4b1wWRiA0wCAjdH1a2m Rou/N9wGBI3ojCO2JbOPO0SP7AK2dZw= -----END CERTIFICATE-----Generated at Sun Nov 2 14:49:04 2025 by rpki-client