$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa File: 0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa (raw, json) Hash identifier: DV4OtXuJTTe8L+pD1wFfbfboL0z/GYFQlOrx6jKDLn4= Subject key identifier: 99:D6:D9:D7:5E:09:42:F8:EC:77:1F:1C:C0:D5:D3:19:95:47:7B:B3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EECCBA1108447A6A0180 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 156.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ee:cc:ba:11:08:44:7a:6a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=7ac0d6e7-cee6-43ed-b240-97daaf8a16e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:5f:4c:ca:14:a8:fa:7a:86:fd:fc:e5:ef: 4e:f4:2c:3f:2d:19:52:82:53:ec:c1:5c:e1:b9:04: 65:24:a0:0c:19:7f:1f:5b:d3:6b:5c:48:fc:f6:90: 8c:6e:2d:d4:68:ba:0d:32:fc:62:1a:f6:d8:c5:08: 17:c6:ab:97:97:34:1b:b1:51:c5:ad:3f:27:96:0e: 18:ec:8b:e8:46:8b:9d:f0:bc:f6:a9:2b:80:81:b0: ca:67:f4:b7:93:65:f8:1f:81:8e:ff:a7:e0:3f:bb: f0:21:8c:db:96:c4:bf:38:63:ea:71:01:54:db:4f: 91:d7:0d:46:7f:ad:69:b3:c2:a8:0a:9a:9b:c2:fd: 4c:d0:ca:87:b9:c5:12:12:39:a4:e5:34:0e:09:ee: 8b:38:28:cb:6d:04:c5:39:bc:47:14:44:a0:bd:cb: 25:d0:d5:5a:f0:e2:24:a8:e4:bd:db:bc:91:50:65: 90:67:78:04:be:05:57:fa:4f:8f:27:a6:a9:df:ad: d1:8d:6f:37:5f:3f:98:23:ec:f1:a8:6b:ed:5b:03: 32:c5:85:b6:cf:f5:e7:5e:78:e0:d2:bd:2f:3c:82: 33:3f:e0:9f:bb:fa:86:f5:53:ef:dc:1b:19:76:f0: 09:d5:c6:c7:8a:8b:51:29:a9:29:1c:57:73:65:cb: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D6:D9:D7:5E:09:42:F8:EC:77:1F:1C:C0:D5:D3:19:95:47:7B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0ad6e8dc-2744-3322-8bdf-6dc1e3fa25b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bc:ef:2c:47:5c:8c:7f:a3:a9:72:6f:f9:de:d6:36:cc:5b: 2d:63:f3:f7:8c:67:18:e1:b2:b2:ad:c8:54:00:cb:46:4f:ff: e9:b2:30:66:79:db:ca:84:13:60:b1:9b:0b:a0:99:c8:84:3b: 8d:75:b6:01:3f:96:67:c6:32:58:06:0c:b3:1a:8f:c9:2e:37: 72:ac:52:c4:51:d4:4f:52:61:35:bf:42:00:49:95:cc:4b:0e: 58:4c:3d:a2:68:f9:91:17:bb:ad:a5:63:c7:05:5c:97:ea:86: 76:65:bc:87:68:cd:cf:7d:d4:f0:c7:d8:81:b7:74:b1:dd:41: 90:fa:8c:92:a9:17:f7:cb:99:a3:15:13:55:22:07:44:5a:98: 2e:2a:cb:c7:b0:05:a5:ed:5b:29:6a:5b:af:2c:61:e4:90:ef: 00:62:9f:a7:57:9c:e6:b8:1f:cb:8d:c5:dd:dc:a4:d3:b6:ac: 2a:d7:9d:c8:5b:d9:35:c1:87:32:a9:f0:e7:de:66:ce:01:e6: 7d:5a:d9:cb:4c:5d:0d:a7:15:c9:84:0d:df:cc:4e:7a:08:2d: 25:12:05:35:98:af:79:19:fe:83:cf:79:9c:93:75:8a:82:dd: 62:4b:99:c7:08:d7:f9:06:2f:7b:76:4e:ea:1e:7e:d7:cc:78: 24:24:4e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+7MuhEIRHpqAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk N2FjMGQ2ZTctY2VlNi00M2VkLWIyNDAtOTdkYWFmOGExNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdNfTMoUqPp6hv385e9O9Cw/LRlSglPswVzh uQRlJKAMGX8fW9NrXEj89pCMbi3UaLoNMvxiGvbYxQgXxquXlzQbsVHFrT8nlg4Y 7IvoRoud8Lz2qSuAgbDKZ/S3k2X4H4GO/6fgP7vwIYzblsS/OGPqcQFU20+R1w1G f61ps8KoCpqbwv1M0MqHucUSEjmk5TQOCe6LOCjLbQTFObxHFESgvcsl0NVa8OIk qOS927yRUGWQZ3gEvgVX+k+PJ6ap363RjW83Xz+YI+zxqGvtWwMyxYW2z/XnXnjg 0r0vPIIzP+Cfu/qG9VPv3BsZdvAJ1cbHiotRKakpHFdzZcta0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnW2ddeCUL47HcfHMDV0xmVR3uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGFkNmU4ZGMtMjc0NC0z MzIyLThiZGYtNmRjMWUzZmEyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC87yxHXIx/o6lyb/ne1jbMWy1j8/eMZxjhsrKtyFQAy0ZP/+myMGZ5 28qEE2CxmwugmciEO411tgE/lmfGMlgGDLMaj8kuN3KsUsRR1E9SYTW/QgBJlcxL DlhMPaJo+ZEXu62lY8cFXJfqhnZlvIdozc991PDH2IG3dLHdQZD6jJKpF/fLmaMV E1UiB0RamC4qy8ewBaXtWylqW68sYeSQ7wBin6dXnOa4H8uNxd3cpNO2rCrXnchb 2TXBhzKp8OfeZs4B5n1a2ctMXQ2nFcmEDd/MTnoILSUSBTWYr3kZ/oPPeZyTdYqC 3WJLmccI1/kGL3t2TuoeftfMeCQkTpc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:30 2025 by rpki-client