$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa File: 575ed7fa-ddfe-3689-8b33-23bcde60b060.roa (raw, json) Hash identifier: tqBVeGv5OpF0cbS1H9EaLpzKeDhnCscYmG+IjmrT5vI= Subject key identifier: D7:62:DA:A9:9D:B7:CE:61:0C:A8:22:F3:C5:C0:7F:1C:3F:86:13:20 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FFD929DAE193204DD120 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397234 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ff:d9:29:da:e1:93:20:4d:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=5bb23b93-129c-46af-ae70-c796549488cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:ad:7b:ea:c3:9e:80:b6:a9:be:b2:52:d4: c2:c2:e8:17:27:8d:20:a3:e4:5e:8f:02:92:f6:6d: 0a:10:97:91:21:4f:40:5e:7d:5c:77:72:78:f3:80: d4:7e:17:32:7d:4f:81:1c:ab:96:f3:5a:00:71:f5: bd:a1:8e:30:b9:21:43:6e:37:fb:c9:73:05:e7:85: a0:9f:a0:c4:a2:bd:55:19:76:69:66:89:4f:20:cd: 23:3b:17:cf:94:3a:3f:64:86:83:a7:e3:fb:ab:fc: ec:11:e7:d2:49:80:70:d1:62:fd:60:e3:19:1d:f2: 6d:61:ee:8c:68:cb:c7:e7:31:1f:13:4f:d3:37:a3: 63:6f:53:a9:69:dc:bf:9c:62:1d:24:f0:1c:bd:c4: 2d:f0:2e:c7:7a:ad:ab:7d:55:af:ab:cb:c9:f2:a6: aa:21:e2:cd:1d:e8:81:ab:ee:49:ea:65:5b:a2:5d: 32:c8:4a:7c:47:47:67:61:2c:70:a5:ad:7a:4e:f4: d5:b6:b9:52:6a:23:83:0e:f1:96:76:82:2b:8c:53: db:42:64:1c:36:f0:90:f4:cc:ca:5d:d2:f1:90:66: 4c:97:53:b7:33:1e:24:e7:51:5a:9b:93:52:30:9b: d3:dd:f2:17:d8:b0:fc:0e:4e:89:45:99:7c:90:c8: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:62:DA:A9:9D:B7:CE:61:0C:A8:22:F3:C5:C0:7F:1C:3F:86:13:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/575ed7fa-ddfe-3689-8b33-23bcde60b060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:33:45:f1:df:83:42:28:4d:71:b9:8e:92:42:6b:c0:fd:d1: 45:65:68:5c:2e:fa:2b:66:ef:d7:39:e5:31:9e:24:23:71:dd: 1c:cd:72:14:cd:42:5b:ec:6c:22:fb:df:c1:a2:b4:92:17:53: 11:f4:c1:66:30:95:1e:dc:4c:e0:bd:23:75:9c:57:4e:0c:4c: 1c:7e:43:e7:f7:bc:80:ed:61:1b:c9:0a:e1:88:3a:27:ce:6c: 88:49:85:c9:dd:d8:06:a7:ad:0c:0e:4d:70:13:78:25:87:69: 22:51:d3:7c:46:73:fc:df:1f:45:01:99:6a:47:5e:c2:55:86: 65:bc:66:5e:01:3d:98:59:87:d5:13:be:89:96:00:0e:f4:c4: cd:d3:e1:c2:99:dd:d8:03:0a:16:fd:07:57:b3:36:36:60:51: 36:fc:99:77:db:e6:17:f3:b3:63:c5:a1:c4:f7:1f:04:99:85: ee:5e:e8:6d:e3:6c:d8:31:b2:7f:55:26:f9:7b:08:74:82:69: 63:69:51:88:13:5e:b7:34:14:e5:f4:b2:98:ad:91:5c:61:e8: 45:98:10:c1:15:1d:35:03:0a:4f:5f:bf:98:41:e5:b5:25:21: 10:89:6d:00:03:00:ea:6e:a1:ac:04:6a:ef:e4:c1:46:7d:70: 50:99:b6:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9//ZKdrhkyBN0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NWJiMjNiOTMtMTI5Yy00NmFmLWFlNzAtYzc5NjU0OTQ4OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNute+rDnoC2qb6yUtTCwugXJ40go+RejwKS 9m0KEJeRIU9AXn1cd3J484DUfhcyfU+BHKuW81oAcfW9oY4wuSFDbjf7yXMF54Wg n6DEor1VGXZpZolPIM0jOxfPlDo/ZIaDp+P7q/zsEefSSYBw0WL9YOMZHfJtYe6M aMvH5zEfE0/TN6Njb1Opady/nGIdJPAcvcQt8C7Heq2rfVWvq8vJ8qaqIeLNHeiB q+5J6mVbol0yyEp8R0dnYSxwpa16TvTVtrlSaiODDvGWdoIrjFPbQmQcNvCQ9MzK XdLxkGZMl1O3Mx4k51Fam5NSMJvT3fIX2LD8Dk6JRZl8kMildwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdi2qmdt85hDKgi88XAfxw/hhMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTc1ZWQ3ZmEtZGRmZS0z Njg5LThiMzMtMjNiY2RlNjBiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEzRfHfg0IoTXG5jpJCa8D90UVlaFwu+itm79c55TGeJCNx3RzNchTN QlvsbCL738GitJIXUxH0wWYwlR7cTOC9I3WcV04MTBx+Q+f3vIDtYRvJCuGIOifO bIhJhcnd2AanrQwOTXATeCWHaSJR03xGc/zfH0UBmWpHXsJVhmW8Zl4BPZhZh9UT vomWAA70xM3T4cKZ3dgDChb9B1ezNjZgUTb8mXfb5hfzs2PFocT3HwSZhe5e6G3j bNgxsn9VJvl7CHSCaWNpUYgTXrc0FOX0spitkVxh6EWYEMEVHTUDCk9fv5hB5bUl IRCJbQADAOpuoawEau/kwUZ9cFCZtvk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:11 2025 by rpki-client