$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e023eb96-d60d-310e-8d17-d942a82f3ae9.roa File: e023eb96-d60d-310e-8d17-d942a82f3ae9.roa (raw, json) Hash identifier: +Ay54j/O4mS593sSEvnCqFT3FFr145qNTuKTO+8d1wo= Subject key identifier: 9C:AD:2C:7B:E5:2B:A1:61:07:3D:BB:E3:F6:26:4B:C7:0F:57:90:80 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7ECC81B420138FF9B4000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e023eb96-d60d-310e-8d17-d942a82f3ae9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397233 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ec:c8:1b:42:01:38:ff:9b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=4bd0ffcb-4c8f-4c59-97a7-f83f81a3ea15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:ab:97:80:98:73:67:07:1c:48:58:82:9a: 96:ea:8d:df:95:dd:ee:28:6c:c5:73:c9:3a:68:2b: 18:55:5f:1c:a3:da:0d:8b:5a:8d:ad:31:46:c6:4d: 07:93:9e:d9:2b:52:38:41:49:a9:5d:a3:ec:1d:8b: c0:f2:5a:a2:ae:b8:50:22:f9:41:fc:98:ec:cb:01: 44:13:4c:4b:16:9f:75:f9:5d:7f:1a:b6:8c:1b:5b: f4:a9:04:82:bb:73:f5:02:d9:c8:0b:c6:70:31:71: c7:54:23:17:62:af:72:74:6b:bd:a3:7c:d2:35:88: f3:08:63:26:a1:e2:f0:aa:46:ba:a6:b4:01:0c:25: d1:eb:4e:30:d4:46:27:67:84:ac:b6:ee:6e:a9:4e: 92:51:c6:42:80:66:2f:e2:d2:6c:8f:f9:a6:9d:3b: 3a:4d:db:8d:a7:92:90:c0:75:61:6e:12:ca:fb:67: 39:f3:1c:12:a7:4e:87:b0:05:7d:42:f6:2c:b8:10: ac:97:fd:d5:c9:12:fe:d1:bf:aa:13:b5:f1:91:82: 82:6e:e1:40:9d:1f:43:54:15:d8:22:89:10:91:34: 78:b7:cb:80:ac:01:a6:47:a3:a9:9a:93:d3:52:78: 94:7a:52:f5:81:ee:91:7b:c8:70:b0:f4:dc:b0:ca: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:2C:7B:E5:2B:A1:61:07:3D:BB:E3:F6:26:4B:C7:0F:57:90:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e023eb96-d60d-310e-8d17-d942a82f3ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:61:fc:41:33:57:5a:eb:f4:bd:65:a4:41:c0:6b:18:05:5e: de:04:ca:95:60:5a:69:0c:de:44:d2:97:c9:94:fe:bc:13:ca: bd:f2:f4:27:0c:1b:d7:3d:d6:4b:88:20:8b:23:ea:27:77:4c: c7:64:90:ca:02:fd:d1:da:96:40:18:f7:ff:29:6a:36:10:10: ab:1c:67:aa:3d:81:7a:17:20:77:94:a1:2b:4e:1d:58:ff:a8: 7b:1d:20:6d:2a:a7:43:06:1e:04:e7:82:d3:7c:8c:fa:5b:35: be:bd:aa:54:7e:90:7f:ea:dd:e6:92:1c:ff:66:97:85:40:19: 85:bd:e9:0f:3f:ba:99:13:e0:5d:94:42:cf:4d:58:60:f9:d0: b8:c3:25:5e:c0:e4:e6:10:56:bc:1d:bc:22:4b:1a:f2:b3:31: 29:60:6b:3e:d4:95:ed:cd:7b:1e:f1:2f:77:71:d4:f7:c8:3c: f8:d5:2f:ae:cf:57:2d:24:26:e2:cc:04:b9:fb:fe:24:cb:4e: ff:98:b4:7a:47:83:77:56:cf:c9:a4:b4:31:ee:47:46:b5:bc: 31:ce:8d:32:fd:a0:78:5d:dd:cb:19:0a:d9:f0:63:cb:13:22: 18:3e:27:8a:03:02:e2:40:2a:d3:13:bf:fd:4a:29:da:5d:ed: bf:fa:4f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+zIG0IBOP+bQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NGJkMGZmY2ItNGM4Zi00YzU5LTk3YTctZjgzZjgxYTNlYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVqrl4CYc2cHHEhYgpqW6o3fld3uKGzFc8k6 aCsYVV8co9oNi1qNrTFGxk0Hk57ZK1I4QUmpXaPsHYvA8lqirrhQIvlB/JjsywFE E0xLFp91+V1/GraMG1v0qQSCu3P1AtnIC8ZwMXHHVCMXYq9ydGu9o3zSNYjzCGMm oeLwqka6prQBDCXR604w1EYnZ4Sstu5uqU6SUcZCgGYv4tJsj/mmnTs6TduNp5KQ wHVhbhLK+2c58xwSp06HsAV9QvYsuBCsl/3VyRL+0b+qE7XxkYKCbuFAnR9DVBXY IokQkTR4t8uArAGmR6OpmpPTUniUelL1ge6Re8hwsPTcsMrgUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJytLHvlK6FhBz274/YmS8cPV5CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTAyM2ViOTYtZDYwZC0z MTBlLThkMTctZDk0MmE4MmYzYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhh/EEzV1rr9L1lpEHAaxgFXt4EypVgWmkM3kTSl8mU/rwTyr3y9CcM G9c91kuIIIsj6id3TMdkkMoC/dHalkAY9/8pajYQEKscZ6o9gXoXIHeUoStOHVj/ qHsdIG0qp0MGHgTngtN8jPpbNb69qlR+kH/q3eaSHP9ml4VAGYW96Q8/upkT4F2U Qs9NWGD50LjDJV7A5OYQVrwdvCJLGvKzMSlgaz7Ule3Nex7xL3dx1PfIPPjVL67P Vy0kJuLMBLn7/iTLTv+YtHpHg3dWz8mktDHuR0a1vDHOjTL9oHhd3csZCtnwY8sT Ihg+J4oDAuJAKtMTv/1KKdpd7b/6T1Q= -----END CERTIFICATE-----Generated at Mon Nov 3 03:18:03 2025 by rpki-client