$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa File: 2d9da503-3a56-3a3e-8031-35310762665a.roa (raw, json) Hash identifier: MjikrJzV4SORALSBzvMGr8oO34YYc3kycr9VG47k1XM= Subject key identifier: 51:20:C2:54:85:B4:61:B9:D9:6B:1E:45:50:86:F4:7C:09:C9:B5:BD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EB2962AF69B8BAE3A100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397239 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:eb:29:62:af:69:b8:ba:e3:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=c391b76b-58d8-40c4-ae62-ff29b8ca21ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:13:14:4a:e2:35:d5:4b:cf:e4:fd:0c:b8: a8:00:42:ff:82:6f:3a:69:b5:d5:08:53:8a:cd:0a: 65:83:46:d1:f7:d2:d0:b4:ee:b2:a0:96:7f:5d:0e: d2:55:85:b9:27:a0:c0:58:66:c6:fb:3c:e8:0d:f0: 3f:1b:12:c8:da:0d:8c:40:fc:4f:9b:2b:1a:78:e7: ec:87:33:08:98:94:88:e7:c5:4c:fd:9c:c9:00:4d: 38:9a:86:1c:ec:f5:9d:45:50:4f:06:0a:67:fa:2b: de:8c:81:7d:2d:ec:21:2b:ca:9b:b0:40:fd:02:9b: d8:2b:f0:e8:41:9b:02:5d:81:4e:97:eb:36:a5:ac: bc:25:88:a3:97:83:6f:1e:e7:aa:07:49:e3:33:de: 2b:8b:42:4d:4a:af:d6:32:71:8f:32:71:23:0a:ea: 94:b9:1c:92:bc:52:0a:46:2f:29:42:66:8c:68:09: 5f:c7:4a:e3:bd:e9:e0:23:e2:04:0f:ed:46:43:af: 79:a8:93:91:6d:89:69:9e:78:7d:e3:77:e3:09:97: 87:63:da:f3:71:f0:d5:bb:1a:42:65:20:ab:04:2c: b9:40:f4:f4:0e:6f:72:16:c4:c3:0d:87:02:d2:c2: ff:d0:92:ba:b7:5b:c3:5f:fc:99:81:51:1c:10:76: 22:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:C2:54:85:B4:61:B9:D9:6B:1E:45:50:86:F4:7C:09:C9:B5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d9da503-3a56-3a3e-8031-35310762665a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:26:40:fe:24:60:0e:be:0f:4b:24:94:ee:95:6d:ef:4c:40: f2:35:45:87:42:59:6b:b8:84:e0:f4:df:a4:43:03:1f:dc:8c: 07:16:59:6a:d4:12:b8:77:58:39:81:42:3f:19:d3:7f:0d:db: 67:92:aa:0a:4f:ff:ce:dd:b8:94:d8:82:85:5e:3e:90:96:6b: 6d:51:af:a6:04:3f:c9:ac:17:91:cf:23:25:cc:3f:de:f3:90: d1:87:a9:df:5b:57:70:f3:96:f7:cf:3d:03:15:55:95:1c:06: 4b:ed:92:87:de:a4:37:1b:ee:41:ef:e0:72:07:ac:42:17:9c: d7:2a:d3:ad:46:41:09:e9:68:b7:03:71:66:45:56:b0:c6:3e: bd:c2:b7:58:02:d0:93:f0:ee:9e:d3:10:c0:b4:81:55:47:3c: 53:72:66:89:b8:45:ec:cd:a7:ef:9c:05:38:be:3b:21:4d:a1: 23:bd:0b:bd:3f:89:be:c7:47:d3:73:60:b2:56:b6:30:90:e3: 52:72:d3:89:2c:4e:d8:71:28:f4:1b:7f:11:7e:d7:ce:a7:d8: 34:1e:16:d4:67:47:b7:05:49:f2:1b:90:30:c1:f0:2a:7f:b9: 84:49:86:33:6b:36:28:19:d1:7f:49:c0:c3:91:7e:3a:61:1a: c3:4d:55:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+spYq9puLrjoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YzM5MWI3NmItNThkOC00MGM0LWFlNjItZmYyOWI4Y2EyMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0cTFEriNdVLz+T9DLioAEL/gm86abXVCFOK zQplg0bR99LQtO6yoJZ/XQ7SVYW5J6DAWGbG+zzoDfA/GxLI2g2MQPxPmysaeOfs hzMImJSI58VM/ZzJAE04moYc7PWdRVBPBgpn+ivejIF9LewhK8qbsED9ApvYK/Do QZsCXYFOl+s2pay8JYijl4NvHueqB0njM94ri0JNSq/WMnGPMnEjCuqUuRySvFIK Ri8pQmaMaAlfx0rjvengI+IED+1GQ695qJORbYlpnnh943fjCZeHY9rzcfDVuxpC ZSCrBCy5QPT0Dm9yFsTDDYcC0sL/0JK6t1vDX/yZgVEcEHYi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEgwlSFtGG52WseRVCG9HwJybW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5ZGE1MDMtM2E1Ni0z YTNlLTgwMzEtMzUzMTA3NjI2NjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwmQP4kYA6+D0sklO6Vbe9MQPI1RYdCWWu4hOD036RDAx/cjAcWWWrU Erh3WDmBQj8Z038N22eSqgpP/87duJTYgoVePpCWa21Rr6YEP8msF5HPIyXMP97z kNGHqd9bV3DzlvfPPQMVVZUcBkvtkofepDcb7kHv4HIHrEIXnNcq061GQQnpaLcD cWZFVrDGPr3Ct1gC0JPw7p7TEMC0gVVHPFNyZom4RezNp++cBTi+OyFNoSO9C70/ ib7HR9NzYLJWtjCQ41Jy04ksTthxKPQbfxF+186n2DQeFtRnR7cFSfIbkDDB8Cp/ uYRJhjNrNigZ0X9JwMORfjphGsNNVew= -----END CERTIFICATE-----Generated at Tue Nov 4 23:37:03 2025 by rpki-client