$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa File: dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa (raw, json) Hash identifier: jSxh11X83WMP9zdYzAccKazD4DYRYL0oxqblylL7AmM= Subject key identifier: BD:A6:92:CA:4D:45:C1:73:44:BB:09:80:E7:F8:8F:5F:B2:D5:05:D9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E7A72712D80489A46D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397213 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e7:a7:27:12:d8:04:89:a4:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=2de97742-e65c-4c67-aba6-f2d9f4bf915f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:88:ab:42:13:31:a9:5d:64:8c:c2:c8:8a: 3d:08:67:a6:84:af:d5:7c:7f:79:82:5b:e9:e4:cf: 47:b5:f8:98:5b:37:57:26:8f:76:f4:b4:05:e9:0b: 12:57:08:73:4e:7c:60:2c:97:0c:ca:0b:9a:e6:ec: 94:f6:d9:05:57:7a:7b:ac:41:e5:d1:ed:04:fb:df: 11:45:8f:15:d6:50:0f:3f:8a:85:5f:11:b3:de:1f: 8e:6e:ce:91:78:a2:c8:41:30:96:24:50:00:95:0a: 19:28:95:44:a8:4b:9c:da:30:19:87:98:2d:21:b0: 6b:a5:16:99:7d:f9:4e:74:4c:82:7a:69:25:6b:12: bd:ff:0f:10:91:49:77:8b:cb:f2:88:1b:44:36:fa: 76:4b:79:fb:d4:ac:db:51:18:02:50:9f:89:47:28: 1e:79:1c:95:3f:9e:6d:a5:90:57:b7:38:19:4f:21: 10:ad:59:53:5e:eb:2c:5a:5e:c3:fd:c6:10:c0:4d: df:a2:a8:29:7c:85:b6:1c:fe:64:33:48:eb:66:7f: a6:f1:25:6d:81:d3:96:f5:2e:9d:a1:1b:1e:3a:bf: c5:af:24:00:f1:ac:f5:2a:3f:6d:ab:97:27:85:03: 29:32:37:5c:dd:18:70:f1:0e:a7:19:a3:fc:92:79: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A6:92:CA:4D:45:C1:73:44:BB:09:80:E7:F8:8F:5F:B2:D5:05:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:48:49:a4:05:44:39:d0:10:e6:13:fe:ef:45:1e:87:2a:6e: 25:23:4f:4d:e6:d9:40:e3:e2:0f:e8:aa:73:df:f2:45:6c:40: ec:e7:6b:2e:2b:13:82:e2:ba:82:4e:26:9e:6c:d7:e2:31:07: a6:95:be:1f:2b:23:a7:43:74:ee:91:52:2a:09:6c:cd:13:89: ef:fb:1a:0d:4c:86:ce:38:9e:c7:9c:e2:5c:21:60:dc:6a:3c: 1e:06:2e:42:19:3b:e6:b8:63:90:58:35:0c:6a:98:ac:a3:68: f8:9b:cb:3d:ef:b9:cc:2f:3e:bf:08:ab:dc:e2:7f:1e:82:9a: 67:10:c7:d7:49:ba:2d:f3:3a:83:4b:41:49:d3:f6:3a:69:17: 79:f6:e6:28:1b:c7:86:24:4e:d6:94:fc:49:45:94:11:66:bd: e8:fd:2d:43:14:4c:95:4d:14:af:11:75:c3:9e:fd:e8:0e:a8: 59:5f:0f:68:fe:be:74:c4:39:e0:0b:84:9c:1b:1b:10:fc:51: 88:b1:62:9b:a1:2e:b6:52:cf:7e:cc:33:d7:45:73:0d:67:51: 2e:58:cb:b7:b0:ef:20:06:83:cc:7e:27:e2:c7:c1:72:f9:f0: 85:60:bc:bc:a2:77:45:81:da:6f:aa:bc:f1:be:1d:8a:62:96: c2:72:35:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+enJxLYBImkbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MmRlOTc3NDItZTY1Yy00YzY3LWFiYTYtZjJkOWY0YmY5MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3mIq0ITMaldZIzCyIo9CGemhK/VfH95glvp 5M9HtfiYWzdXJo929LQF6QsSVwhzTnxgLJcMygua5uyU9tkFV3p7rEHl0e0E+98R RY8V1lAPP4qFXxGz3h+Obs6ReKLIQTCWJFAAlQoZKJVEqEuc2jAZh5gtIbBrpRaZ fflOdEyCemklaxK9/w8QkUl3i8vyiBtENvp2S3n71KzbURgCUJ+JRygeeRyVP55t pZBXtzgZTyEQrVlTXussWl7D/cYQwE3foqgpfIW2HP5kM0jrZn+m8SVtgdOW9S6d oRseOr/FryQA8az1Kj9tq5cnhQMpMjdc3Rhw8Q6nGaP8knlCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2mkspNRcFzRLsJgOf4j1+y1QXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGNlYTQ4MGMtYzA1ZS0z NmQzLWE5NWQtNGMzMmZlYjZmZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9ISaQFRDnQEOYT/u9FHocqbiUjT03m2UDj4g/oqnPf8kVsQOznay4r E4LiuoJOJp5s1+IxB6aVvh8rI6dDdO6RUioJbM0Tie/7Gg1Mhs44nsec4lwhYNxq PB4GLkIZO+a4Y5BYNQxqmKyjaPibyz3vucwvPr8Iq9zifx6CmmcQx9dJui3zOoNL QUnT9jppF3n25igbx4YkTtaU/ElFlBFmvej9LUMUTJVNFK8RdcOe/egOqFlfD2j+ vnTEOeALhJwbGxD8UYixYpuhLrZSz37MM9dFcw1nUS5Yy7ew7yAGg8x+J+LHwXL5 8IVgvLyid0WB2m+qvPG+HYpilsJyNRY= -----END CERTIFICATE-----Generated at Mon Nov 3 10:06:33 2025 by rpki-client