$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa File: 3be8da86-16ec-340c-88ac-0481eaeee7ee.roa (raw, json) Hash identifier: ASL2G96vO0lv5lehKjEsemQ1GyKvZWFwfk6oxp0A5tY= Subject key identifier: DA:7A:1D:F6:B8:3C:14:D9:9D:56:E2:1B:6D:9A:94:5E:9F:64:E6:24 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D3466E80C80290B24500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397226 IP address blocks: 156.154.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d3:46:6e:80:c8:02:90:b2:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a344ad3d-e2ab-4f31-9fbd-2249d72c5e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:32:48:5e:42:0b:2c:11:ef:84:02:9f:15: 17:44:9c:0b:bc:5c:41:35:0b:f4:63:1b:19:17:7d: e7:e4:a6:ff:ae:8b:96:de:70:81:f9:d0:d1:13:d7: 42:21:16:a8:ed:f8:f7:f6:e5:b1:7a:50:29:5f:ff: 6a:b3:42:7f:b8:e3:be:f4:72:d8:bf:a3:2e:58:d9: ef:3f:78:79:9b:f9:f8:e3:8b:8f:e3:2b:80:6e:5e: 94:1a:bc:b8:e1:f2:1f:f5:d2:78:85:b2:11:b0:54: 03:19:59:34:66:b6:02:01:76:9a:79:a2:b0:8d:f4: bd:a4:75:f5:34:29:f1:b7:87:fa:6a:ec:89:0e:8d: 34:c2:6f:ab:87:65:b6:ac:ea:6f:12:e1:4a:8e:f6: db:30:4c:b7:76:66:69:c3:50:10:02:fe:b8:1d:b3: 95:08:44:fe:17:f8:03:a0:7d:fe:80:2d:16:33:5b: 5e:1e:1e:56:88:2e:fc:8f:cf:8e:de:6f:ad:cf:c4: 8e:72:aa:48:da:6f:fc:6c:d6:7e:c7:62:c5:e7:d7: ac:5a:8c:90:11:7d:94:56:29:70:f4:b8:d4:0d:f7: 1e:2b:a4:5d:3f:29:b9:df:d8:02:d2:18:c1:bd:2f: 7d:16:01:45:f2:8e:3c:94:56:f4:16:d1:64:21:b6: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:1D:F6:B8:3C:14:D9:9D:56:E2:1B:6D:9A:94:5E:9F:64:E6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3be8da86-16ec-340c-88ac-0481eaeee7ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b7:da:7a:fb:69:85:af:04:2b:ec:ee:1b:d7:13:41:83:bf: 84:f2:bd:6c:b4:ee:76:e4:9e:8e:1b:0c:68:04:c8:df:20:6a: 0a:ee:4c:84:7b:7d:04:4f:1c:1e:8e:68:34:59:7d:c4:1b:18: a1:dd:97:40:2f:0d:de:2f:34:1b:c6:39:32:32:7c:7f:d0:fe: 6f:6c:48:67:b1:b0:f6:4f:3f:4e:18:aa:2c:18:cf:cc:71:30: 8b:17:fc:de:d7:2d:1c:4a:da:06:0c:e9:fb:ff:76:23:6e:91: d0:a9:55:c0:99:00:20:fc:36:1e:52:ed:50:ac:6c:ef:b4:6d: a2:cb:7a:08:8b:d2:63:c6:3f:d5:35:6d:25:11:f1:f8:a0:f0: 07:cf:d3:c0:36:98:2a:11:83:49:c3:1b:10:da:a5:43:9b:0a: 10:ae:43:a9:da:e1:95:9f:71:64:a7:e6:bb:c7:47:d4:eb:31: 97:c9:d0:7b:f8:dc:4d:98:92:33:df:8a:ab:9e:cf:6b:0d:87: 20:c1:b5:36:cc:f9:fc:02:90:c6:d1:61:6e:9d:68:bd:fa:77: b0:ae:8a:93:a6:b2:a1:38:3b:76:6e:ce:1c:34:e9:5b:85:d8: d4:d2:04:c4:d9:54:1a:8d:88:17:e9:98:f9:44:22:9d:5f:50: 25:f7:28:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dNGboDIApCyRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTM0NGFkM2QtZTJhYi00ZjMxLTlmYmQtMjI0OWQ3MmM1ZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfoySF5CCywR74QCnxUXRJwLvFxBNQv0YxsZ F33n5Kb/rouW3nCB+dDRE9dCIRao7fj39uWxelApX/9qs0J/uOO+9HLYv6MuWNnv P3h5m/n444uP4yuAbl6UGry44fIf9dJ4hbIRsFQDGVk0ZrYCAXaaeaKwjfS9pHX1 NCnxt4f6auyJDo00wm+rh2W2rOpvEuFKjvbbMEy3dmZpw1AQAv64HbOVCET+F/gD oH3+gC0WM1teHh5WiC78j8+O3m+tz8SOcqpI2m/8bNZ+x2LF59esWoyQEX2UVilw 9LjUDfceK6RdPym539gC0hjBvS99FgFF8o48lFb0FtFkIbaMEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp6Hfa4PBTZnVbiG22alF6fZOYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JlOGRhODYtMTZlYy0z NDBjLTg4YWMtMDQ4MWVhZWVlN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW32nr7aYWvBCvs7hvXE0GDv4TyvWy07nbkno4bDGgEyN8gagruTIR7 fQRPHB6OaDRZfcQbGKHdl0AvDd4vNBvGOTIyfH/Q/m9sSGexsPZPP04YqiwYz8xx MIsX/N7XLRxK2gYM6fv/diNukdCpVcCZACD8Nh5S7VCsbO+0baLLegiL0mPGP9U1 bSUR8fig8AfP08A2mCoRg0nDGxDapUObChCuQ6na4ZWfcWSn5rvHR9TrMZfJ0Hv4 3E2YkjPfiquez2sNhyDBtTbM+fwCkMbRYW6daL36d7CuipOmsqE4O3Zuzhw06VuF 2NTSBMTZVBqNiBfpmPlEIp1fUCX3KNY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:31 2025 by rpki-client