$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa File: d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa (raw, json) Hash identifier: 9R2+K3cChsxqSfYOGL4/inPS0C/+uwiYFT5MOiIbjEc= Subject key identifier: E4:90:E9:1A:20:BD:0A:3E:C2:E2:A7:C3:3C:3C:8B:05:3D:86:C4:AB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E9D46C73BCC318778880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397217 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e9:d4:6c:73:bc:c3:18:77:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=7e6394f3-e0e2-4154-9b5d-bce15ef90ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:c4:f9:3f:97:9d:ce:cf:ae:a3:e1:80:99: 2d:3e:c1:6b:9b:b6:8e:09:c1:79:1b:f1:b1:67:99: 8b:1e:a2:c7:04:5b:b1:5b:92:ab:52:4c:49:34:d4: 3e:44:6a:08:c4:36:79:6a:86:89:52:e0:ca:17:36: ef:3d:3c:36:58:a7:6a:31:38:6b:a5:f2:49:b8:f6: 49:a5:af:d2:f4:b6:2f:66:57:d6:d0:aa:fd:bb:04: ce:1f:96:83:f6:c3:07:bc:8f:1e:87:fa:6a:06:de: 67:c9:d5:ba:8c:a5:63:1f:d9:f0:c1:e4:39:6b:0d: e9:3b:7e:3e:fc:64:97:e1:ad:47:0b:1b:46:4b:f2: 30:2b:67:ea:82:2e:0f:a0:bb:36:1b:5e:f3:34:ce: 14:d1:49:96:4b:f7:02:d9:95:79:2c:13:3b:3f:d4: 4e:cc:f7:79:f0:b3:84:21:6c:a7:bc:98:42:7f:98: 34:b1:60:b3:84:85:97:49:36:12:11:15:4a:35:8c: 15:8e:61:3c:11:a3:82:75:e1:7f:67:e9:f3:2d:5f: 87:6a:17:61:0f:ba:ca:5a:ab:4c:a8:67:7e:30:dd: f1:79:d8:35:f3:68:3e:cb:94:c3:a2:91:d3:b9:2a: 9c:9b:f5:f4:36:23:d1:2d:59:f1:db:38:51:30:18: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:90:E9:1A:20:BD:0A:3E:C2:E2:A7:C3:3C:3C:8B:05:3D:86:C4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:21:3f:ff:77:e3:bf:ba:bd:1a:0f:d3:d5:df:45:96:e9: d3:62:48:3b:41:9d:fc:69:40:ab:1c:31:0f:89:88:bf:c8:cd: 09:03:31:9c:db:80:2a:fc:84:27:6e:e9:2f:1b:32:ff:3a:c0: 6b:a7:41:92:5c:1a:f2:d0:5e:65:fd:de:c9:3b:9f:cb:93:f9: a7:6b:6f:e7:1b:92:3d:eb:b5:af:db:4c:eb:f5:3f:0c:6b:1a: 0f:c5:66:c4:4d:28:4c:8c:1f:86:d0:63:be:94:14:bc:a8:79: a5:7d:e0:a2:7a:4b:7e:57:03:39:b1:a6:f7:a9:f1:c5:6c:49: 6a:99:5a:dc:1d:89:79:0d:f2:4b:82:1c:50:fe:8f:18:53:20: 47:a0:5d:df:81:eb:10:e8:1e:bd:f9:1c:7f:46:bc:7c:7d:d5: 55:9a:ae:4d:75:b1:78:bb:b6:94:01:ba:ce:76:0d:a8:e0:ce: c0:3b:20:b9:ed:7f:5b:e7:79:fb:8c:28:cb:96:e4:b2:a4:e4: ad:cb:31:1e:0f:75:af:07:31:68:2d:8c:79:7d:35:39:92:eb: a4:a7:6e:14:75:2d:53:98:7f:30:0e:fa:3f:bd:7e:95:f2:d9: 56:70:ac:8f:49:d9:7e:90:c1:c9:d2:bb:6f:49:de:a0:17:73: 17:47:28:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+nUbHO8wxh3iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk N2U2Mzk0ZjMtZTBlMi00MTU0LTliNWQtYmNlMTVlZjkwZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7E+T+Xnc7PrqPhgJktPsFrm7aOCcF5G/Gx Z5mLHqLHBFuxW5KrUkxJNNQ+RGoIxDZ5aoaJUuDKFzbvPTw2WKdqMThrpfJJuPZJ pa/S9LYvZlfW0Kr9uwTOH5aD9sMHvI8eh/pqBt5nydW6jKVjH9nwweQ5aw3pO34+ /GSX4a1HCxtGS/IwK2fqgi4PoLs2G17zNM4U0UmWS/cC2ZV5LBM7P9ROzPd58LOE IWynvJhCf5g0sWCzhIWXSTYSERVKNYwVjmE8EaOCdeF/Z+nzLV+HahdhD7rKWqtM qGd+MN3xedg182g+y5TDopHTuSqcm/X0NiPRLVnx2zhRMBg9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSQ6RogvQo+wuKnwzw8iwU9hsSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDVjYjdmNzQtNTIzYi0z ZWMzLThlY2MtZDYyNTQ0Y2ZhNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUqIT//d+O/ur0aD9PV30WW6dNiSDtBnfxpQKscMQ+JiL/IzQkDMZzb gCr8hCdu6S8bMv86wGunQZJcGvLQXmX93sk7n8uT+adrb+cbkj3rta/bTOv1Pwxr Gg/FZsRNKEyMH4bQY76UFLyoeaV94KJ6S35XAzmxpvep8cVsSWqZWtwdiXkN8kuC HFD+jxhTIEegXd+B6xDoHr35HH9GvHx91VWark11sXi7tpQBus52DajgzsA7ILnt f1vnefuMKMuW5LKk5K3LMR4Pda8HMWgtjHl9NTmS66SnbhR1LVOYfzAO+j+9fpXy 2VZwrI9J2X6QwcnSu29J3qAXcxdHKLs= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:40 2025 by rpki-client