$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json) Hash identifier: SH/aTGYlHJeHQlp+MpBJi3/5ovgIhKunjn9/Mjso8U8= Subject key identifier: DE:38:3B:F7:32:99:CE:C0:B8:FB:61:4E:D3:C8:28:5E:89:2E:1F:E2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FFB8A4794F542208DD40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397232 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ff:b8:a4:79:4f:54:22:08:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ff767905-2a9c-44dc-83f5-4ddad4737055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:12:98:5b:8a:f5:92:90:2f:48:3f:63:4c: aa:95:0e:a5:cf:37:93:08:dd:b0:16:bb:7b:9e:f6: ef:56:d0:e9:3e:76:c9:a6:e9:a2:c6:55:dc:d4:b5: 72:ae:c1:58:16:bc:1f:91:34:31:ba:9a:1e:39:35: 65:c2:4a:25:7a:12:cb:63:83:fd:74:38:b9:4e:b6: 12:69:2f:fd:98:48:00:e5:f3:3b:7f:ef:6d:32:05: 5f:dc:36:50:ac:81:29:8a:3f:17:5c:51:1b:bb:57: a3:3f:09:0e:0e:8a:93:5b:e2:45:ef:76:1a:20:21: 5f:84:59:c8:bb:3c:90:86:75:39:3f:47:2a:aa:fe: a4:11:d9:b2:46:a3:6d:d1:ba:97:73:6d:ed:2e:4d: c2:be:d8:2f:2a:d5:ac:4c:bd:35:95:3c:d9:eb:2a: 66:27:52:70:cc:8b:4e:57:d3:92:1c:52:85:1e:f9: b7:1a:55:88:9a:72:ff:99:ab:9a:cf:ad:de:30:03: 15:4c:2f:d5:86:b7:10:0b:97:29:10:84:c9:5a:73: 6b:28:23:0b:9c:09:24:43:d8:7f:78:91:37:69:4e: 1a:57:fb:83:59:12:4f:92:16:ae:73:82:51:58:1d: 71:61:65:3b:80:64:38:36:9d:3b:bd:a4:80:9c:2c: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:3B:F7:32:99:CE:C0:B8:FB:61:4E:D3:C8:28:5E:89:2E:1F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:27:83:de:2c:94:ef:fe:f8:25:fa:70:ab:f3:10:a5:88:a3: 9f:af:29:a6:43:60:0d:90:bd:b4:73:e6:42:16:9b:7f:f1:a0: d8:5c:29:90:53:94:5e:91:33:c9:57:83:4b:b0:56:a6:a7:17: a8:c3:53:6d:92:2f:c5:1e:74:06:75:3a:be:9b:2f:b1:0c:2a: 0f:67:f1:c0:62:f2:de:19:b4:6d:15:5c:81:98:5d:73:ff:23: b4:fa:14:94:86:79:6f:f9:ac:40:02:38:03:60:e0:1a:b8:d5: 09:c4:7d:1a:94:18:e1:b4:31:ca:d0:29:d2:f6:90:5e:b0:d8: a8:87:95:ee:c9:67:6d:c0:ab:f2:8b:e0:5d:fb:31:3e:5c:7e: 1a:a6:f6:f9:98:7e:84:e6:58:e9:ca:29:36:96:bb:36:cb:0b: a6:70:0f:23:77:f5:2c:bb:39:a1:c5:69:7d:2a:9d:b9:26:94: 29:b0:2a:5f:6b:98:7b:04:03:8b:e2:f0:56:ff:54:9a:cb:e9: e8:c5:bb:ca:8b:e7:34:9b:77:58:90:df:9c:6e:8e:c3:5a:d8: e9:de:0d:68:b7:60:0b:b4:1e:4f:a3:bc:da:2d:a0:c5:65:be: 65:96:fa:99:0c:11:6e:53:91:be:2e:eb:8c:a4:37:f4:c8:2e: 47:d1:12:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/+4pHlPVCII3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmY3Njc5MDUtMmE5Yy00NGRjLTgzZjUtNGRkYWQ0NzM3MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzMSmFuK9ZKQL0g/Y0yqlQ6lzzeTCN2wFrt7 nvbvVtDpPnbJpumixlXc1LVyrsFYFrwfkTQxupoeOTVlwkolehLLY4P9dDi5TrYS aS/9mEgA5fM7f+9tMgVf3DZQrIEpij8XXFEbu1ejPwkODoqTW+JF73YaICFfhFnI uzyQhnU5P0cqqv6kEdmyRqNt0bqXc23tLk3CvtgvKtWsTL01lTzZ6ypmJ1JwzItO V9OSHFKFHvm3GlWImnL/mauaz63eMAMVTC/VhrcQC5cpEITJWnNrKCMLnAkkQ9h/ eJE3aU4aV/uDWRJPkhauc4JRWB1xYWU7gGQ4Np07vaSAnCya1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN44O/cymc7AuPthTtPIKF6JLh/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FlNjBlNzAtZTVmZS0z ODAyLWFlNTUtZjY4ZTIzYTE5NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcng94slO/++CX6cKvzEKWIo5+vKaZDYA2QvbRz5kIWm3/xoNhcKZBT lF6RM8lXg0uwVqanF6jDU22SL8UedAZ1Or6bL7EMKg9n8cBi8t4ZtG0VXIGYXXP/ I7T6FJSGeW/5rEACOANg4Bq41QnEfRqUGOG0McrQKdL2kF6w2KiHle7JZ23Aq/KL 4F37MT5cfhqm9vmYfoTmWOnKKTaWuzbLC6ZwDyN39Sy7OaHFaX0qnbkmlCmwKl9r mHsEA4vi8Fb/VJrL6ejFu8qL5zSbd1iQ35xujsNa2OneDWi3YAu0Hk+jvNotoMVl vmWW+pkMEW5Tkb4u64ykN/TILkfREug= -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:05 2025 by rpki-client