$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa File: add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa (raw, json) Hash identifier: Q7eUH4XYkb6Y3ZEoCiPPUQJkhcfTFbJwIL+42c4BMPs= Subject key identifier: 7A:77:2B:EE:78:62:71:5D:D8:98:04:7A:30:75:4B:71:43:AD:7D:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FEB72B084933833AB180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397217 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:fe:b7:2b:08:49:33:83:3a:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d3042c58-f475-4583-8271-cd28d885730f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:0c:8f:4f:83:1a:ab:7b:bd:5a:38:8a:b1: ff:b7:9c:ed:47:d1:de:61:81:69:3c:c1:2c:6a:a3: 4a:48:6c:63:df:85:6c:e2:20:9c:f7:09:b3:6f:b5: e7:9a:cc:aa:e3:80:e0:17:11:66:fd:d9:4e:5e:45: c7:47:fd:1a:4b:05:04:ae:ac:64:94:c5:0a:64:17: f2:f3:aa:a3:65:dd:64:3a:dd:64:7e:a8:32:d3:29: 75:b6:09:36:e0:f4:8f:7d:bb:f0:f1:2e:36:5b:7e: 67:df:a0:0b:5d:cd:de:82:b1:c3:88:77:77:3b:f6: 4f:b9:a0:e4:60:f7:7f:18:3c:9d:90:d8:9c:f8:29: ae:71:f2:6e:b8:34:55:de:5f:8e:5d:e4:ad:df:c8: d4:e8:0f:3b:41:22:8d:19:b9:cd:1e:b9:82:5a:3f: 89:19:c9:9c:9c:5d:33:ec:12:19:bc:2d:98:fc:03: 22:96:f3:11:47:41:5e:e1:2a:3d:56:e6:b1:b1:26: 54:c4:d8:61:36:65:92:7c:c7:c1:c5:ab:32:01:98: 34:a3:3e:57:87:ae:e2:e2:3b:c3:56:ac:5e:50:86: a2:04:27:74:ba:68:20:d9:87:3e:78:54:c7:43:cf: 6a:b6:c6:65:55:ff:fe:cf:a7:d9:e8:ac:a5:76:d4: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:77:2B:EE:78:62:71:5D:D8:98:04:7A:30:75:4B:71:43:AD:7D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/add70b3d-0b91-3d0f-9a7c-4e4274e5c820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fb:26:eb:ce:cb:a3:bc:ec:7e:e5:4a:46:c9:fa:73:1c:81: 98:61:37:3d:86:9f:c6:85:f3:2b:8e:27:93:c8:9b:5b:41:6a: 49:d3:01:84:ad:e8:15:6f:42:f3:e2:d6:b9:92:a7:22:c6:bc: d6:00:a6:1d:f5:27:41:60:cd:bc:6a:4a:d8:14:e9:d5:aa:81: cf:a8:a1:32:0d:69:19:a8:b0:e2:a8:44:23:5c:3a:82:59:a4: bd:e1:b0:34:08:9c:c1:cb:61:42:fa:30:85:91:3a:97:08:c1: 5a:64:6c:9e:e8:9e:bc:32:86:96:65:c5:31:b2:89:c5:a6:6e: 9a:c1:ab:d8:8d:53:3a:98:bd:66:ab:ea:49:ac:9e:e1:3a:91: d3:48:08:72:30:fa:d6:4b:32:d3:7e:4b:1e:9e:0b:12:17:02: 6d:0b:0a:ff:fe:ad:53:fa:6b:a8:11:65:2a:49:6b:a5:f7:5a: e2:1e:54:14:31:d0:a1:49:a5:8e:2c:73:f5:29:db:f0:db:1e: d4:dd:bd:e7:b1:c2:13:5f:7d:a5:40:40:a2:83:99:0f:0c:06: b8:33:d6:e8:28:71:81:a0:b2:4c:fb:41:c7:e2:d7:fd:1e:0f: a6:6f:ff:6b:e6:c4:ef:80:47:41:86:a7:8a:eb:a3:59:b9:55: da:48:d2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/63KwhJM4M6sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDMwNDJjNTgtZjQ3NS00NTgzLTgyNzEtY2QyOGQ4ODU3MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqawMj0+DGqt7vVo4irH/t5ztR9HeYYFpPMEs aqNKSGxj34Vs4iCc9wmzb7Xnmsyq44DgFxFm/dlOXkXHR/0aSwUErqxklMUKZBfy 86qjZd1kOt1kfqgy0yl1tgk24PSPfbvw8S42W35n36ALXc3egrHDiHd3O/ZPuaDk YPd/GDydkNic+CmucfJuuDRV3l+OXeSt38jU6A87QSKNGbnNHrmCWj+JGcmcnF0z 7BIZvC2Y/AMilvMRR0Fe4So9VuaxsSZUxNhhNmWSfMfBxasyAZg0oz5Xh67i4jvD VqxeUIaiBCd0umgg2Yc+eFTHQ89qtsZlVf/+z6fZ6KyldtT2swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp3K+54YnFd2JgEejB1S3FDrX1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWRkNzBiM2QtMGI5MS0z ZDBmLTlhN2MtNGU0Mjc0ZTVjODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT7JuvOy6O87H7lSkbJ+nMcgZhhNz2Gn8aF8yuOJ5PIm1tBaknTAYSt 6BVvQvPi1rmSpyLGvNYAph31J0FgzbxqStgU6dWqgc+ooTINaRmosOKoRCNcOoJZ pL3hsDQInMHLYUL6MIWROpcIwVpkbJ7onrwyhpZlxTGyicWmbprBq9iNUzqYvWar 6kmsnuE6kdNICHIw+tZLMtN+Sx6eCxIXAm0LCv/+rVP6a6gRZSpJa6X3WuIeVBQx 0KFJpY4sc/Up2/DbHtTdveexwhNffaVAQKKDmQ8MBrgz1ugocYGgskz7Qcfi1/0e D6Zv/2vmxO+AR0GGp4rro1m5VdpI0no= -----END CERTIFICATE-----Generated at Mon Nov 3 10:12:15 2025 by rpki-client