$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4fe878b6-6ae7-3a69-aa5f-679c6d28189a.roa File: 4fe878b6-6ae7-3a69-aa5f-679c6d28189a.roa (raw, json) Hash identifier: wGmhmYKzXWFmIF5ihw3H8BJ2ScYeALbp8a0OJtK1N44= Subject key identifier: 03:DE:C2:AE:32:07:B0:38:EE:B0:5E:EA:C0:DE:30:71:E1:5D:4A:92 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F3B6F5765A870B250A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4fe878b6-6ae7-3a69-aa5f-679c6d28189a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397241 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f3:b6:f5:76:5a:87:0b:25:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=42b2c57e-af75-4b47-846a-33f44e21bbb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:e6:40:ce:6b:b3:17:03:d2:00:7d:0c:32: f0:6a:af:b2:a8:b0:76:70:db:d2:ac:ae:1b:71:31: 67:e2:7c:15:17:58:37:71:66:53:21:92:a1:a1:1c: 03:c1:d5:aa:8c:2f:70:5d:a4:a2:be:74:77:58:7a: 6f:e1:2c:22:ea:11:ef:1b:c5:ce:b8:6b:4a:b3:80: d6:13:72:50:3e:13:a4:6a:ba:ab:68:8e:1e:ab:6c: e2:3e:e4:59:fa:10:7a:85:69:d7:f4:6b:c4:05:c7: 0f:fe:95:e0:17:7f:67:ba:1d:9f:b0:8a:23:80:69: fa:70:f3:90:59:23:05:74:f9:dc:6f:73:82:85:57: 02:3b:a3:a9:d3:27:46:a7:0d:ad:f8:93:d6:53:24: 02:f5:f7:ac:45:5c:e1:4d:e1:1d:37:6b:79:c5:fd: 52:b0:a7:c6:ba:d9:25:fa:c2:e5:e1:23:0e:f4:f7: ca:6c:44:ac:de:d8:79:68:fb:7e:a3:bb:d4:43:a8: 64:33:56:ef:71:10:3f:cf:e1:92:70:dd:2b:2c:db: 4b:3a:49:19:a2:46:4e:1e:95:96:df:56:39:1c:d5: 4b:bf:54:a0:44:cb:4e:dd:52:32:85:a2:01:22:6f: 42:88:05:5e:58:ef:4e:19:2f:fe:d8:5c:d3:ad:03: 1b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:C2:AE:32:07:B0:38:EE:B0:5E:EA:C0:DE:30:71:E1:5D:4A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4fe878b6-6ae7-3a69-aa5f-679c6d28189a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:51:6a:b1:a2:92:8c:31:e3:bb:d4:0e:b4:d5:15:11:40:eb: 24:53:48:5d:76:6a:b2:3a:13:b7:fe:ef:a5:80:c4:5b:4b:69: 30:21:79:37:46:88:b7:a9:91:3b:6d:43:94:67:c0:c6:c6:dc: a4:7a:b4:91:b8:97:9f:83:05:05:67:66:85:c2:1e:9d:24:26: 4f:54:f4:64:d0:65:fa:72:0a:d9:f2:61:64:e4:e0:cc:4f:2d: 09:57:f2:23:56:ed:58:b7:4b:25:54:97:4d:86:ea:ca:48:20: 31:70:fa:d0:ac:9b:75:6b:86:03:ec:b5:ac:8c:98:58:04:cc: c8:12:47:30:36:10:cf:d0:09:41:2e:92:42:b4:9d:60:fa:24: d6:5a:5b:a4:af:5d:a8:d6:02:3e:69:44:af:77:61:93:71:12: bf:ed:e0:ad:fd:d5:91:4b:32:ea:49:92:c8:3c:b6:41:b3:63: f7:44:59:95:65:5b:4f:c1:e1:fe:1f:dc:2e:1d:3c:1e:2a:54: 0f:a4:bf:f3:39:08:45:02:e9:c4:03:25:30:6b:fc:10:61:a3: fb:a4:3d:4c:b4:00:53:ac:3c:02:8f:20:f3:e7:e1:54:0a:dd: 12:75:e8:15:c6:d4:ac:a9:ed:3a:35:87:85:01:68:4f:34:92: 9a:8a:cf:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/O29XZahwslCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDJiMmM1N2UtYWY3NS00YjQ3LTg0NmEtMzNmNDRlMjFiYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aXmQM5rsxcD0gB9DDLwaq+yqLB2cNvSrK4b cTFn4nwVF1g3cWZTIZKhoRwDwdWqjC9wXaSivnR3WHpv4Swi6hHvG8XOuGtKs4DW E3JQPhOkarqraI4eq2ziPuRZ+hB6hWnX9GvEBccP/pXgF39nuh2fsIojgGn6cPOQ WSMFdPncb3OChVcCO6Op0ydGpw2t+JPWUyQC9fesRVzhTeEdN2t5xf1SsKfGutkl +sLl4SMO9PfKbESs3th5aPt+o7vUQ6hkM1bvcRA/z+GScN0rLNtLOkkZokZOHpWW 31Y5HNVLv1SgRMtO3VIyhaIBIm9CiAVeWO9OGS/+2FzTrQMbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPewq4yB7A47rBe6sDeMHHhXUqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNGZlODc4YjYtNmFlNy0z YTY5LWFhNWYtNjc5YzZkMjgxODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFRarGikowx47vUDrTVFRFA6yRTSF12arI6E7f+76WAxFtLaTAheTdG iLepkTttQ5RnwMbG3KR6tJG4l5+DBQVnZoXCHp0kJk9U9GTQZfpyCtnyYWTk4MxP LQlX8iNW7Vi3SyVUl02G6spIIDFw+tCsm3VrhgPstayMmFgEzMgSRzA2EM/QCUEu kkK0nWD6JNZaW6SvXajWAj5pRK93YZNxEr/t4K391ZFLMupJksg8tkGzY/dEWZVl W0/B4f4f3C4dPB4qVA+kv/M5CEUC6cQDJTBr/BBho/ukPUy0AFOsPAKPIPPn4VQK 3RJ16BXG1Kyp7To1h4UBaE80kpqKz70= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:32 2025 by rpki-client