$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa File: cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa (raw, json) Hash identifier: dOKhrqx0jFIYwzxWSAGH3P7TDA1p8cHx2leVNZho5I8= Subject key identifier: 79:22:95:B7:1D:81:8A:AE:8F:57:0F:F7:0D:4F:2D:5B:31:1D:8C:99 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1ECA44BF52232CC10F100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397234 IP address blocks: 156.154.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ec:a4:4b:f5:22:32:cc:10:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3046cb98-0804-4152-93ae-fc6f414ccada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:1c:1f:d0:4b:79:b5:6a:ae:58:b9:32:3d: c9:d1:1d:2d:d3:32:62:f5:f2:62:5b:34:a9:33:fb: 33:fe:28:03:c3:d3:dd:8a:a8:10:c8:4d:d5:85:2e: d6:e7:46:e9:27:4b:bf:6c:b0:94:e2:54:88:17:bb: 25:37:45:c8:1c:7a:70:94:62:66:65:5e:62:e4:66: eb:4c:6f:2c:b9:55:07:93:6f:db:6a:79:05:32:f1: c2:c7:cf:47:df:8f:5f:63:21:ed:5a:8a:d4:c3:72: d6:2f:38:e2:b3:79:e9:f3:33:f1:b8:db:fe:12:e5: 65:7f:dc:e3:cd:75:1c:07:4c:6c:ed:66:c9:e4:c3: a8:42:66:4e:b7:b1:3e:f5:ae:d5:7d:5c:4d:25:fd: d7:6b:ef:f6:9c:f8:d4:45:22:b0:80:0e:92:1b:be: 01:e5:ea:2a:2c:5b:5c:63:61:ba:78:2c:03:51:7a: d2:35:3f:31:71:90:3b:95:1a:55:38:c0:10:f7:1a: 9d:98:fa:6f:b9:5a:f9:2f:c4:42:46:97:45:56:f2: e9:30:f1:f9:a1:05:f4:32:b0:37:72:4e:4e:55:be: 45:df:bc:8f:b8:15:70:e7:38:4a:de:0b:27:c8:bc: e2:64:7d:49:1a:b0:b2:fd:b8:9c:b0:1b:2d:d7:46: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:95:B7:1D:81:8A:AE:8F:57:0F:F7:0D:4F:2D:5B:31:1D:8C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfd3a61d-8828-3dd0-92eb-99bbed32fb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:81:25:98:13:a7:48:bd:6c:c2:ba:54:0f:97:cf:b1:21:84: 67:62:60:0d:58:dd:29:56:4a:52:e2:20:2d:80:e5:3f:b0:7d: e6:02:9f:a8:0f:43:eb:0f:aa:2e:3d:87:19:10:b7:01:67:11: fc:b5:29:cd:9d:d5:42:ce:82:73:91:11:2e:6a:1f:0e:d5:34: d3:67:66:82:6e:7c:dc:ea:26:ea:79:1a:28:18:80:fa:be:07: 51:86:42:12:e4:7e:ed:cb:ab:0c:0a:bb:f2:7f:56:f1:59:39: 37:7a:29:10:bd:c1:7e:65:80:f7:70:a3:52:6f:62:93:3b:d6: 4f:6e:4b:9d:96:60:ef:b6:4d:a9:90:ed:8d:0a:5e:1d:41:63: 51:f2:95:c1:d6:9c:0c:89:4e:51:4e:d0:fe:d7:17:51:f4:96: d8:50:24:3e:2c:ad:62:43:73:0a:92:c3:bf:08:87:25:c6:75: b6:8e:e0:7c:c2:1d:b9:46:a3:a4:7f:19:fd:2b:46:6b:f7:fd: 11:a0:37:b7:4b:44:e7:79:6b:a4:d1:32:0a:ab:e0:b5:20:9d: f9:41:4c:c0:7a:48:d3:e3:74:29:1c:2e:c5:2e:06:5f:1b:01: 8e:d8:da:21:e8:70:61:38:75:ca:b4:66:c6:c6:20:e3:ff:3a: c3:b7:11:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4eykS/UiMswQ8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzA0NmNiOTgtMDgwNC00MTUyLTkzYWUtZmM2ZjQxNGNjYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5YcH9BLebVqrli5Mj3J0R0t0zJi9fJiWzSp M/sz/igDw9PdiqgQyE3VhS7W50bpJ0u/bLCU4lSIF7slN0XIHHpwlGJmZV5i5Gbr TG8suVUHk2/bankFMvHCx89H349fYyHtWorUw3LWLzjis3np8zPxuNv+EuVlf9zj zXUcB0xs7WbJ5MOoQmZOt7E+9a7VfVxNJf3Xa+/2nPjURSKwgA6SG74B5eoqLFtc Y2G6eCwDUXrSNT8xcZA7lRpVOMAQ9xqdmPpvuVr5L8RCRpdFVvLpMPH5oQX0MrA3 ck5OVb5F37yPuBVw5zhK3gsnyLziZH1JGrCy/bicsBst10ZbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkilbcdgYquj1cP9w1PLVsxHYyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2ZkM2E2MWQtODgyOC0z ZGQwLTkyZWItOTliYmVkMzJmYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+BJZgTp0i9bMK6VA+Xz7EhhGdiYA1Y3SlWSlLiIC2A5T+wfeYCn6gP Q+sPqi49hxkQtwFnEfy1Kc2d1ULOgnORES5qHw7VNNNnZoJufNzqJup5GigYgPq+ B1GGQhLkfu3LqwwKu/J/VvFZOTd6KRC9wX5lgPdwo1JvYpM71k9uS52WYO+2TamQ 7Y0KXh1BY1HylcHWnAyJTlFO0P7XF1H0lthQJD4srWJDcwqSw78IhyXGdbaO4HzC HblGo6R/Gf0rRmv3/RGgN7dLROd5a6TRMgqr4LUgnflBTMB6SNPjdCkcLsUuBl8b AY7Y2iHocGE4dcq0ZsbGIOP/OsO3EUg= -----END CERTIFICATE-----Generated at Thu Oct 30 15:13:17 2025 by rpki-client