$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c85efe7-a392-3a80-b83b-19097344e598.roa File: 0c85efe7-a392-3a80-b83b-19097344e598.roa (raw, json) Hash identifier: fO6DZ/PQtZkPbq6hLJx8x+CEa9p3kPYuwvfJpP7gzD4= Subject key identifier: C1:1F:E6:A5:9F:62:8C:C9:13:91:A9:96:76:D5:D4:67:B7:5D:50:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EA615B457645E6235B40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c85efe7-a392-3a80-b83b-19097344e598.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397226 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ea:61:5b:45:76:45:e6:23:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a24320c1-f33c-452a-9709-fc1014b83305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:27:de:89:57:90:a1:24:3f:e8:1f:91:1a: 40:b4:19:19:88:54:66:20:7b:3a:05:87:5b:b9:8c: c0:7a:d7:27:b2:2d:a1:60:24:80:f0:31:2a:c8:39: ab:45:d5:b3:65:59:c5:35:91:36:e5:8e:cc:5e:4b: c5:e1:13:45:17:b7:c1:55:9c:8a:11:49:7a:bd:bd: 0d:0e:ba:83:4c:65:80:e9:6d:35:a9:65:ed:7e:e0: 1a:e8:84:b3:f1:33:95:15:a8:b5:6e:8b:f2:ea:96: 90:4f:38:4c:13:11:04:2d:8f:ce:94:62:85:4d:ab: bc:74:f4:ef:c7:00:ef:de:79:15:90:5f:86:94:66: 43:82:74:3b:73:9f:2a:99:de:19:b4:4b:d7:ae:b9: a3:2b:c9:33:d6:b0:5b:98:7b:c9:d9:77:eb:27:ed: 89:7b:4e:11:1f:47:33:0f:97:b1:65:5d:5b:64:3b: 55:57:26:75:79:f0:45:29:7c:1c:dc:ad:23:b1:4d: 7d:5b:7a:64:71:73:e7:58:8b:8f:cb:db:9b:a5:36: 5d:e8:14:62:93:16:1d:47:a7:a8:e6:55:84:3a:44: 35:35:49:ba:45:55:f9:12:92:18:d6:27:ea:e2:1d: 1d:b3:2e:cb:dc:c8:ec:29:cc:0c:2a:d8:28:66:0b: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:E6:A5:9F:62:8C:C9:13:91:A9:96:76:D5:D4:67:B7:5D:50:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0c85efe7-a392-3a80-b83b-19097344e598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fa:0d:f0:78:a8:dc:7a:37:1d:81:a0:96:ee:fc:e5:4c:50: 53:90:ec:62:55:4c:8a:50:b4:6b:5c:66:75:60:60:44:b3:62: b1:40:12:f3:85:54:92:e9:56:1c:b0:64:53:68:c2:60:8e:00: ff:31:46:78:d8:8b:dc:d1:00:3a:00:5a:66:f4:0f:42:bc:c2: a8:ce:4b:82:ec:a1:3a:5f:9b:7f:0a:cc:2c:ef:8f:42:09:67: 48:ec:e8:ca:8b:af:b0:ca:17:e3:74:82:8e:3b:fb:54:0a:9e: 38:11:9a:97:4d:5e:47:71:66:a9:5a:e2:d2:6a:32:8d:d0:e1: 3b:a5:e4:a5:e6:eb:f0:69:88:b7:4f:bb:ff:c0:d1:bf:ed:9a: 86:5b:20:a7:3c:03:ba:cd:bf:ce:da:30:c9:6d:9b:b0:c2:74: a1:25:cf:8e:70:f6:26:4c:18:a8:7d:94:b4:ab:26:2e:cd:04: 7a:ad:43:08:e6:45:83:79:e1:26:50:b9:85:6c:27:43:13:44: 4c:f2:66:f0:11:d3:62:86:5d:37:6b:8c:07:f8:01:6d:79:9c: b6:dc:1e:78:9e:24:e1:b3:a4:24:1e:8d:13:33:cc:2b:1d:07: 2f:e7:2f:c6:61:34:d4:92:8b:5e:1e:89:59:ae:2d:68:57:81: 5c:0a:c2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+phW0V2ReYjW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTI0MzIwYzEtZjMzYy00NTJhLTk3MDktZmMxMDE0YjgzMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07gn3olXkKEkP+gfkRpAtBkZiFRmIHs6BYdb uYzAetcnsi2hYCSA8DEqyDmrRdWzZVnFNZE25Y7MXkvF4RNFF7fBVZyKEUl6vb0N DrqDTGWA6W01qWXtfuAa6ISz8TOVFai1bovy6paQTzhMExEELY/OlGKFTau8dPTv xwDv3nkVkF+GlGZDgnQ7c58qmd4ZtEvXrrmjK8kz1rBbmHvJ2XfrJ+2Je04RH0cz D5exZV1bZDtVVyZ1efBFKXwc3K0jsU19W3pkcXPnWIuPy9ubpTZd6BRikxYdR6eo 5lWEOkQ1NUm6RVX5EpIY1ifq4h0dsy7L3MjsKcwMKtgoZguQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEf5qWfYozJE5GplnbV1Ge3XVAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGM4NWVmZTctYTM5Mi0z YTgwLWI4M2ItMTkwOTczNDRlNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB36DfB4qNx6Nx2BoJbu/OVMUFOQ7GJVTIpQtGtcZnVgYESzYrFAEvOF VJLpVhywZFNowmCOAP8xRnjYi9zRADoAWmb0D0K8wqjOS4LsoTpfm38KzCzvj0IJ Z0js6MqLr7DKF+N0go47+1QKnjgRmpdNXkdxZqla4tJqMo3Q4Tul5KXm6/BpiLdP u//A0b/tmoZbIKc8A7rNv87aMMltm7DCdKElz45w9iZMGKh9lLSrJi7NBHqtQwjm RYN54SZQuYVsJ0MTREzyZvAR02KGXTdrjAf4AW15nLbcHnieJOGzpCQejRMzzCsd By/nL8ZhNNSSi14eiVmuLWhXgVwKwqw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:37 2025 by rpki-client