$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/600abad5-3447-321a-b759-26e6a0bc214f.roa File: 600abad5-3447-321a-b759-26e6a0bc214f.roa (raw, json) Hash identifier: R4zYMsvN08ZxKka709t+91uiyUrg2a9WXR1zJ0KFhyw= Subject key identifier: DA:F4:EA:3D:33:69:E1:6E:9C:39:BF:6C:43:07:BB:99:42:CF:6A:6A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F2FF2BAD23D2FCA3C880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/600abad5-3447-321a-b759-26e6a0bc214f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f2:ff:2b:ad:23:d2:fc:a3:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3dc7447f-831b-4ea2-96c5-7a3b5cbec71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:c5:b0:d7:5f:d8:df:e3:c8:83:75:62:4c: 2c:1f:49:67:8a:53:76:47:19:4d:fa:b5:33:a4:02: 74:40:7c:68:8b:13:60:3b:54:66:ad:2b:48:63:ba: 1d:26:f4:ea:d5:de:f7:0b:05:aa:e6:9c:50:26:4d: d4:39:d0:fe:1f:38:ed:8f:86:20:c3:9b:40:e6:98: 23:71:ed:6b:97:b4:d0:f0:07:77:0b:68:6b:65:df: 69:e0:f4:e2:00:c0:10:8d:48:01:61:84:51:9d:aa: 9b:54:51:08:a6:23:2f:29:bd:84:4c:ef:22:37:66: dd:5b:37:99:bc:ca:5a:cd:08:8f:aa:26:18:7f:8d: 96:02:2a:24:d1:ed:67:df:ec:96:4c:c0:7a:4f:f1: f5:9a:9f:15:f4:71:0a:ff:c5:30:67:a1:36:1f:6a: ad:72:95:5f:6b:08:b8:e8:db:c9:ed:bc:94:22:34: 03:66:6e:c6:be:7c:6e:2f:82:da:4e:40:e7:bc:52: b2:98:8a:71:e3:ca:70:4f:5a:aa:89:2b:52:8d:5d: 1c:91:8f:93:9c:d5:6f:b3:e3:2d:e7:5e:c5:6f:f2: 9c:91:24:23:45:13:b0:e6:9a:f1:6a:6f:18:6c:be: f9:6a:cc:1f:16:c0:c1:eb:55:25:e2:ec:06:56:9c: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:EA:3D:33:69:E1:6E:9C:39:BF:6C:43:07:BB:99:42:CF:6A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/600abad5-3447-321a-b759-26e6a0bc214f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:21:33:f2:7f:09:69:2b:3f:cd:d9:5f:3d:71:52:63:a3:2e: 95:2a:f6:93:9e:c8:64:71:ac:cc:eb:06:86:58:67:d3:88:22: 71:b9:5d:5c:ec:c9:e5:07:a7:5a:1c:e1:a8:40:41:82:3f:a7: 18:98:47:7d:07:97:d7:2c:33:10:8c:71:99:f5:eb:46:2b:89: d6:98:bb:37:a0:52:c3:13:bf:61:55:4b:a7:04:d5:15:93:d0: d5:26:26:10:ac:ee:f0:d2:92:05:42:b4:28:3d:04:ea:07:f9: 25:3c:1c:3f:0b:47:a1:47:bb:e9:22:28:db:0b:12:3b:ff:d0: d2:5a:cd:8c:be:8c:dc:d0:6e:45:9f:4e:13:50:89:76:bc:53: fa:32:83:6b:6d:22:7a:1c:ee:82:0e:e0:a6:97:df:75:4a:8a: 81:97:86:f6:a1:8c:2c:8d:61:93:0e:d7:7b:8d:c8:c1:24:b1: 89:64:ed:0e:f9:b3:27:52:8e:49:bd:73:e8:60:aa:51:e3:35: 03:e7:8d:75:6d:31:c6:89:9f:fa:d9:e8:bd:05:e1:8b:fb:1c: 65:a0:54:e5:7c:36:74:eb:33:7e:8a:44:bb:34:58:82:e2:b6: 89:17:8c:a9:02:4d:4a:73:b2:92:fc:25:44:a6:79:47:76:e3: c0:ae:c1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/L/K60j0vyjyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2RjNzQ0N2YtODMxYi00ZWEyLTk2YzUtN2EzYjVjYmVjNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVLFsNdf2N/jyIN1YkwsH0lnilN2RxlN+rUz pAJ0QHxoixNgO1RmrStIY7odJvTq1d73CwWq5pxQJk3UOdD+Hzjtj4Ygw5tA5pgj ce1rl7TQ8Ad3C2hrZd9p4PTiAMAQjUgBYYRRnaqbVFEIpiMvKb2ETO8iN2bdWzeZ vMpazQiPqiYYf42WAiok0e1n3+yWTMB6T/H1mp8V9HEK/8UwZ6E2H2qtcpVfawi4 6NvJ7byUIjQDZm7GvnxuL4LaTkDnvFKymIpx48pwT1qqiStSjV0ckY+TnNVvs+Mt 517Fb/KckSQjRROw5prxam8YbL75aswfFsDB61Ul4uwGVpyvgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr06j0zaeFunDm/bEMHu5lCz2pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjAwYWJhZDUtMzQ0Ny0z MjFhLWI3NTktMjZlNmEwYmMyMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABchM/J/CWkrP83ZXz1xUmOjLpUq9pOeyGRxrMzrBoZYZ9OIInG5XVzs yeUHp1oc4ahAQYI/pxiYR30Hl9csMxCMcZn160YridaYuzegUsMTv2FVS6cE1RWT 0NUmJhCs7vDSkgVCtCg9BOoH+SU8HD8LR6FHu+kiKNsLEjv/0NJazYy+jNzQbkWf ThNQiXa8U/oyg2ttInoc7oIO4KaX33VKioGXhvahjCyNYZMO13uNyMEksYlk7Q75 sydSjkm9c+hgqlHjNQPnjXVtMcaJn/rZ6L0F4Yv7HGWgVOV8NnTrM36KRLs0WILi tokXjKkCTUpzspL8JUSmeUd248CuwRM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:06:29 2025 by rpki-client