$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2c600c-c71f-3108-a90d-8c00cd954158.roa File: de2c600c-c71f-3108-a90d-8c00cd954158.roa (raw, json) Hash identifier: ZWirqRTc55f72DPoZkUbbPYefq6Fp3X8t/uCUiaZKLA= Subject key identifier: 50:17:0E:E3:B7:AE:04:C9:5F:08:27:41:EA:0D:76:D2:46:AA:9D:78 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F1F9D87A481ED78F7AE8 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2c600c-c71f-3108-a90d-8c00cd954158.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397214 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f1:f9:d8:7a:48:1e:d7:8f:7a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d19e2246-16a9-41b5-b572-e554ae668398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:b6:30:74:11:c8:6b:5e:de:95:13:13:0b: 27:8e:1e:4d:95:c7:d0:2b:f5:de:01:f9:77:6e:43: d8:b3:a3:ff:47:81:78:a5:fd:c7:0b:3c:50:7c:f2: 2c:3f:a2:ec:fe:9c:70:12:6b:33:f0:4d:47:ab:52: af:a7:18:1e:85:4b:dd:ae:ce:ee:e9:07:40:e7:20: 80:13:71:42:7a:b5:f0:11:f0:17:2d:c0:46:73:30: c5:c2:47:a8:bf:f9:76:03:93:14:de:64:e3:62:83: e4:4d:0c:54:33:86:87:58:2b:1e:70:73:a1:b7:75: f1:41:41:ee:07:05:f6:e8:ae:ec:0e:e7:9d:b5:95: 89:44:89:21:1c:4e:2b:78:f8:9b:c2:97:c1:44:67: c5:85:ce:b0:29:55:63:13:5f:25:3a:3e:68:31:be: b4:7b:e6:12:45:d5:46:98:20:13:94:64:99:89:3e: e1:d2:06:09:3d:38:fb:75:9e:3a:06:27:10:f0:58: 57:7d:96:d5:46:02:ca:2f:67:d6:5a:ab:0b:49:05: 89:df:c2:d7:a5:74:5a:cf:9a:a1:f9:82:39:51:8a: 5d:bd:b6:a2:38:6e:99:97:3e:37:33:20:c0:d4:ff: 15:01:c2:5b:de:c1:d0:64:ef:1d:47:90:ee:b1:3d: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:0E:E3:B7:AE:04:C9:5F:08:27:41:EA:0D:76:D2:46:AA:9D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de2c600c-c71f-3108-a90d-8c00cd954158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c0:51:a7:40:d0:b4:f6:3d:86:5b:67:ee:48:c1:45:13:db: 96:7f:60:8b:36:43:aa:19:b2:12:02:b8:d7:f8:63:30:8c:55: a4:66:e9:59:ce:ae:c0:5e:9d:9e:d6:d9:11:5d:09:80:dd:95: 90:02:8d:df:ce:c9:50:38:fe:ed:d1:43:2a:b2:a9:72:1f:64: 14:87:14:21:5a:a4:42:8c:b5:a5:0f:07:17:f2:82:a4:84:28: 64:8e:5a:15:5c:17:81:93:3f:da:ee:7e:36:15:97:eb:48:2a: bb:65:75:65:19:81:8e:13:66:72:63:6e:2e:92:0a:62:0b:b3: 75:1a:d8:c7:ff:4a:56:dd:4a:8b:a9:f1:da:42:e6:f4:b4:aa: 26:1e:b2:96:57:7c:56:54:78:88:88:3b:c2:ad:2f:24:c8:fd: 78:6a:27:96:52:de:88:26:96:a5:3e:3b:08:af:84:c4:54:4b: a9:db:e1:fa:b2:de:82:57:9e:90:8a:30:4e:75:ae:88:8a:f2: 2d:ff:c6:42:49:15:e4:35:6b:f2:69:b3:2a:89:51:a5:45:62: d1:37:63:c2:5d:e0:ed:07:e1:52:7c:26:93:0b:80:6f:e6:a2: e5:58:5f:6d:e7:bf:e9:97:31:a7:a6:95:b4:4c:9f:45:3f:d9: 6d:12:a5:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/H52HpIHtePeugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDE5ZTIyNDYtMTZhOS00MWI1LWI1NzItZTU1NGFlNjY4Mzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1+2MHQRyGte3pUTEwsnjh5NlcfQK/XeAfl3 bkPYs6P/R4F4pf3HCzxQfPIsP6Ls/pxwEmsz8E1Hq1KvpxgehUvdrs7u6QdA5yCA E3FCerXwEfAXLcBGczDFwkeov/l2A5MU3mTjYoPkTQxUM4aHWCsecHOht3XxQUHu BwX26K7sDuedtZWJRIkhHE4rePibwpfBRGfFhc6wKVVjE18lOj5oMb60e+YSRdVG mCATlGSZiT7h0gYJPTj7dZ46BicQ8FhXfZbVRgLKL2fWWqsLSQWJ38LXpXRaz5qh +YI5UYpdvbaiOG6Zlz43MyDA1P8VAcJb3sHQZO8dR5DusT3JlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAXDuO3rgTJXwgnQeoNdtJGqp14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGUyYzYwMGMtYzcxZi0z MTA4LWE5MGQtOGMwMGNkOTU0MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLAUadA0LT2PYZbZ+5IwUUT25Z/YIs2Q6oZshICuNf4YzCMVaRm6VnO rsBenZ7W2RFdCYDdlZACjd/OyVA4/u3RQyqyqXIfZBSHFCFapEKMtaUPBxfygqSE KGSOWhVcF4GTP9rufjYVl+tIKrtldWUZgY4TZnJjbi6SCmILs3Ua2Mf/SlbdSoup 8dpC5vS0qiYespZXfFZUeIiIO8KtLyTI/XhqJ5ZS3ogmlqU+OwivhMRUS6nb4fqy 3oJXnpCKME51roiK8i3/xkJJFeQ1a/JpsyqJUaVFYtE3Y8Jd4O0H4VJ8JpMLgG/m ouVYX23nv+mXMaemlbRMn0U/2W0SpYk= -----END CERTIFICATE-----Generated at Mon Nov 3 03:14:41 2025 by rpki-client