$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f28a7ff-7e81-3799-ae5f-b03a6bdd2a70.roa File: 2f28a7ff-7e81-3799-ae5f-b03a6bdd2a70.roa (raw, json) Hash identifier: IibZGxzNaVyXKFvAlX+9Zb2apP2C3MN9od3TMLUpwXE= Subject key identifier: 2A:04:82:64:B2:F8:77:5B:42:EC:F2:75:D9:C3:4D:79:FC:56:C3:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E43D42EBAD9945A8CBC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f28a7ff-7e81-3799-ae5f-b03a6bdd2a70.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397226 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e4:3d:42:eb:ad:99:45:a8:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d23ad850-659b-4a18-a4c1-d97838f077b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:9b:bd:7e:23:55:75:7f:83:f5:7a:f8:ef: 78:13:a8:d8:31:0b:ec:77:81:b6:ba:f7:8f:09:10: 29:35:5b:d5:da:58:20:b9:56:27:82:d5:bb:96:42: 0f:64:b1:c2:1d:96:a7:02:22:20:26:1f:2c:f5:fa: 13:ae:4f:09:fc:0e:9d:f3:c5:85:37:c8:2e:b2:cf: 90:82:a6:d8:3b:eb:f6:4e:8c:94:e6:35:47:28:6f: 9f:c4:9d:0c:2f:3a:d4:15:d6:12:37:5f:b0:a6:ab: 51:4a:63:b6:e7:99:3d:97:e2:31:a2:86:0c:d9:02: 61:4c:e0:89:b8:9c:98:b5:82:b2:ee:8d:10:c7:c9: d0:99:01:dd:24:c5:7e:29:71:03:12:52:a4:21:33: 24:61:f5:02:a5:b7:e8:be:c0:2c:f2:2a:ce:9a:0d: dd:26:f9:8f:a0:96:8b:fd:07:df:a8:70:0a:e4:ba: d2:58:ff:8f:15:4d:cc:99:55:2c:0d:f3:49:a9:4d: 3f:90:0d:de:35:c5:11:86:a8:ed:f2:d6:fc:c1:84: e0:80:01:1f:57:4d:a2:38:73:6b:fc:6f:23:b4:9e: 1a:2e:74:3b:1c:c8:15:45:51:11:64:c9:0c:fb:f8: 1b:52:49:37:f5:2d:11:c1:df:2b:dd:c1:ee:0e:49: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:82:64:B2:F8:77:5B:42:EC:F2:75:D9:C3:4D:79:FC:56:C3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f28a7ff-7e81-3799-ae5f-b03a6bdd2a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:be:1b:24:c0:5b:8e:22:a0:ff:3e:36:b5:35:e2:17:e0:39: 63:6f:69:c6:6e:9c:f6:d9:5f:6f:b5:1d:61:8c:97:6d:37:a3: 75:e7:23:1c:55:f2:75:cc:b0:98:92:69:b1:65:f7:be:67:e9: 8b:03:64:0c:71:8a:33:50:0d:0e:6c:15:8a:54:75:3e:a7:7f: 1f:48:73:7b:a2:ce:ee:56:db:40:1e:37:c0:db:30:cf:c2:97: 2b:05:c1:62:59:4e:37:f4:09:9b:b5:4b:52:65:e3:09:ab:8c: 4c:29:bd:b6:65:0c:94:bf:c6:e2:da:ce:a2:a6:26:6d:de:5d: cf:9d:d7:61:0a:f5:56:33:7b:07:94:5e:c6:5f:47:54:d1:e0: 5f:79:ee:f0:54:bd:cd:e3:a2:a9:24:33:20:d3:cb:10:78:b7: c1:ef:9a:89:4c:3a:0b:84:c4:02:ac:b1:87:fd:a9:73:d5:1d: 0f:e6:dc:82:98:0c:13:08:42:78:7b:30:83:43:1b:85:b8:b8: f4:27:6a:d1:d8:d7:9c:84:f5:41:33:09:dc:e8:61:b1:c2:a0: 76:47:93:76:7b:36:5a:26:aa:2f:98:f7:8b:43:b8:4a:5d:f2: ad:c6:6a:35:27:46:87:0a:b4:ab:dc:98:3a:f6:24:c6:b7:cb: 89:8f:d0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+Q9QuutmUWoy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDIzYWQ4NTAtNjU5Yi00YTE4LWE0YzEtZDk3ODM4ZjA3N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7abvX4jVXV/g/V6+O94E6jYMQvsd4G2uveP CRApNVvV2lgguVYngtW7lkIPZLHCHZanAiIgJh8s9foTrk8J/A6d88WFN8guss+Q gqbYO+v2ToyU5jVHKG+fxJ0MLzrUFdYSN1+wpqtRSmO255k9l+IxooYM2QJhTOCJ uJyYtYKy7o0Qx8nQmQHdJMV+KXEDElKkITMkYfUCpbfovsAs8irOmg3dJvmPoJaL /QffqHAK5LrSWP+PFU3MmVUsDfNJqU0/kA3eNcURhqjt8tb8wYTggAEfV02iOHNr /G8jtJ4aLnQ7HMgVRVERZMkM+/gbUkk39S0Rwd8r3cHuDknYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoEgmSy+HdbQuzyddnDTXn8VsMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmYyOGE3ZmYtN2U4MS0z Nzk5LWFlNWYtYjAzYTZiZGQyYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq+GyTAW44ioP8+NrU14hfgOWNvacZunPbZX2+1HWGMl203o3XnIxxV 8nXMsJiSabFl975n6YsDZAxxijNQDQ5sFYpUdT6nfx9Ic3uizu5W20AeN8DbMM/C lysFwWJZTjf0CZu1S1Jl4wmrjEwpvbZlDJS/xuLazqKmJm3eXc+d12EK9VYzeweU XsZfR1TR4F957vBUvc3joqkkMyDTyxB4t8HvmolMOguExAKssYf9qXPVHQ/m3IKY DBMIQnh7MINDG4W4uPQnatHY15yE9UEzCdzoYbHCoHZHk3Z7Nlomqi+Y94tDuEpd 8q3GajUnRocKtKvcmDr2JMa3y4mP0OQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:57 2025 by rpki-client