$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3520ac22-780f-37cd-a47b-bdfb5dc4f740.roa File: 3520ac22-780f-37cd-a47b-bdfb5dc4f740.roa (raw, json) Hash identifier: JHqHYA8HWDzMOfW/0l5IyNATYxPxvR3bfdzQI5Jk1rw= Subject key identifier: B8:DD:F1:7F:FE:C0:3F:8A:29:E0:55:B1:50:EB:0D:A9:3B:B6:54:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EB42E3773F469DC55C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3520ac22-780f-37cd-a47b-bdfb5dc4f740.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397241 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:eb:42:e3:77:3f:46:9d:c5:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b10e4007-d8e8-4b83-9694-b09ab2535916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:18:a6:94:25:69:51:22:41:32:65:0d:bb: 36:eb:be:39:89:13:06:b6:8e:53:fc:15:7f:7a:af: 00:a5:a5:dd:af:c1:3b:50:f0:d5:2f:d2:12:03:18: 55:11:0e:16:12:4d:e3:7f:04:34:2d:92:88:8f:bd: 67:1f:cc:9f:3f:3c:dd:54:ab:7e:bd:cc:76:de:49: 6f:74:98:49:86:86:e1:32:bf:ff:1c:bd:07:aa:14: 0f:7a:d5:7b:32:de:7d:51:bf:22:c0:2c:2c:2b:c2: ed:6a:4b:2f:e8:ce:db:9f:d8:f7:e1:ce:22:ea:f2: bb:4d:1f:9a:98:a2:fb:e2:9c:40:94:e5:fe:71:96: b0:39:cf:ce:ae:18:1d:3c:a2:a1:f9:83:46:ac:d0: 4d:f1:fe:3c:e5:42:d9:0d:7d:56:56:bb:f8:e9:3a: 01:1a:5d:8a:5a:c2:62:41:e3:69:10:c0:af:98:e2: 95:ea:b1:99:73:5b:11:50:6b:bd:ae:ea:2f:ed:cb: 90:61:ee:01:14:3f:82:1d:e6:81:ba:dd:62:ab:47: a1:29:48:2a:13:6a:62:78:9e:13:b1:67:7b:76:28: 99:45:7c:4b:9f:b0:e9:85:80:b6:61:b9:a8:e2:42: 92:f9:ab:2a:56:5c:cb:c9:a1:ab:63:b5:71:ff:b7: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:F1:7F:FE:C0:3F:8A:29:E0:55:B1:50:EB:0D:A9:3B:B6:54:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3520ac22-780f-37cd-a47b-bdfb5dc4f740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ff:29:b8:ef:a6:ab:15:bf:1c:65:5f:8d:57:b4:78:f9:0d: ab:f8:73:56:74:1d:12:c5:6e:09:bf:13:4e:3b:f6:2c:ad:80: f1:18:69:71:40:21:c7:52:eb:b0:16:37:22:75:81:bc:65:6f: 74:ca:05:db:b3:99:dd:db:de:5b:46:25:c4:2e:8d:1c:b9:53: e1:86:b7:53:8e:b1:d1:df:8e:8b:86:8f:f9:34:90:9f:5d:1f: 4e:04:57:b0:56:ed:58:4f:fb:b4:a3:b8:51:28:e1:37:85:ce: ac:56:9b:0d:d0:78:8c:44:11:17:57:8d:a1:37:90:3c:07:8e: 75:71:d1:26:6e:10:4e:84:9d:4d:ff:cd:07:1c:aa:97:91:4c: 81:a1:57:62:9a:93:74:c5:2f:93:26:cd:8d:d2:d0:a1:07:fc: 1f:8a:16:57:e4:ee:f3:7d:66:60:3e:77:3a:91:72:5f:11:3b: 45:53:83:e6:45:6d:c7:7f:96:35:ff:89:0c:d1:c2:dd:ab:a4: 0b:08:a6:66:77:7b:9c:3b:20:16:9a:1c:ea:42:c7:33:25:8e: e9:f2:c7:5f:55:31:75:aa:2b:7f:44:77:43:3c:7e:97:39:75: 6b:37:54:df:89:92:ee:33:f1:4e:04:70:08:65:18:d9:12:f6: 17:f8:a0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+tC43c/Rp3FXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjEwZTQwMDctZDhlOC00YjgzLTk2OTQtYjA5YWIyNTM1OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FsYppQlaVEiQTJlDbs26745iRMGto5T/BV/ eq8ApaXdr8E7UPDVL9ISAxhVEQ4WEk3jfwQ0LZKIj71nH8yfPzzdVKt+vcx23klv dJhJhobhMr//HL0HqhQPetV7Mt59Ub8iwCwsK8Ltaksv6M7bn9j34c4i6vK7TR+a mKL74pxAlOX+cZawOc/OrhgdPKKh+YNGrNBN8f485ULZDX1WVrv46ToBGl2KWsJi QeNpEMCvmOKV6rGZc1sRUGu9ruov7cuQYe4BFD+CHeaBut1iq0ehKUgqE2pieJ4T sWd7diiZRXxLn7DphYC2Ybmo4kKS+asqVlzLyaGrY7Vx/7ecuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjd8X/+wD+KKeBVsVDrDak7tlQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzUyMGFjMjItNzgwZi0z N2NkLWE0N2ItYmRmYjVkYzRmNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP/KbjvpqsVvxxlX41XtHj5Dav4c1Z0HRLFbgm/E0479iytgPEYaXFA IcdS67AWNyJ1gbxlb3TKBduzmd3b3ltGJcQujRy5U+GGt1OOsdHfjouGj/k0kJ9d H04EV7BW7VhP+7SjuFEo4TeFzqxWmw3QeIxEERdXjaE3kDwHjnVx0SZuEE6EnU3/ zQccqpeRTIGhV2Kak3TFL5MmzY3S0KEH/B+KFlfk7vN9ZmA+dzqRcl8RO0VTg+ZF bcd/ljX/iQzRwt2rpAsIpmZ3e5w7IBaaHOpCxzMljunyx19VMXWqK39Ed0M8fpc5 dWs3VN+Jku4z8U4EcAhlGNkS9hf4oJE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:31 2025 by rpki-client