$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa File: 669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa (raw, json) Hash identifier: OC626ygzxV1oR9CemQvmBJdujT9WqBH9iDiuJi1o4Jw= Subject key identifier: 0D:F7:40:58:02:1C:E0:5D:E2:35:5E:04:95:10:ED:44:4B:41:66:03 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EB36ED0743DD9C8C79E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397240 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:eb:36:ed:07:43:dd:9c:8c:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0ba19d74-ce2a-499f-88a5-e199b0e9a42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:ba:4a:df:a9:6a:3b:44:12:fa:d9:6c:9b: 87:ca:ad:b3:97:90:96:3f:e9:ff:fa:05:d7:dd:7f: ea:fe:4a:eb:03:98:c3:7b:84:3d:7d:36:fc:7b:6e: 06:42:56:63:27:71:1e:32:70:f8:4d:b8:9e:58:d8: a8:82:fd:31:d6:24:9f:70:0a:9d:1b:3c:61:83:45: dc:82:ee:56:c7:b7:07:15:d5:30:ae:9f:77:ba:ce: cb:5a:09:51:7a:50:77:f6:0f:c7:26:2b:79:fe:0b: 3b:6b:54:74:fa:3b:2f:b5:2a:bf:06:0e:c2:16:05: 0e:46:6e:01:0d:e9:b6:af:e5:2a:bc:8c:c9:f1:94: 73:30:d7:83:f9:d7:d7:7c:d8:ad:c7:48:f9:a4:36: 63:93:ca:70:6c:c9:d4:1c:95:5b:f0:45:13:02:c4: 3b:18:c3:a6:4e:ef:e7:43:e1:d7:ec:23:42:f7:6a: c5:41:2c:e2:bc:53:aa:7e:86:92:52:fa:dc:88:9e: 2f:c1:4c:e8:57:6c:19:79:8a:11:23:76:15:0f:7e: d0:52:bc:10:07:de:bc:e6:76:85:ca:c6:b8:5e:2c: c7:cd:cf:9e:75:2e:6e:a5:0e:7d:bb:2b:da:24:e0: 78:cf:4f:a9:c2:59:71:36:34:5e:95:33:dd:f6:47: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:40:58:02:1C:E0:5D:E2:35:5E:04:95:10:ED:44:4B:41:66:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/669de6e1-e13e-3ccd-9b2d-a37a6b7028c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:61:08:a6:0a:b6:42:11:c2:63:c4:33:f1:fc:86:38:9f:99: 9c:6d:4e:dd:74:d7:55:07:3e:a7:21:b1:1f:2c:38:f8:9e:bf: 1f:7b:1f:da:3a:54:11:cf:08:20:53:b9:53:a7:eb:8e:7e:ec: 15:ac:31:0b:3b:df:0e:5f:a9:49:f4:2e:83:44:07:c8:51:f5: d0:c6:3a:c4:96:f2:40:88:12:6e:f7:9d:c3:e4:76:e8:1d:bc: 89:8f:50:59:04:4b:1c:2b:51:19:83:45:a4:72:41:aa:67:02: ba:03:09:4e:a8:84:31:24:6d:8a:52:db:22:42:49:f3:6a:49: 5d:e4:af:6b:64:b5:28:25:06:63:4d:30:ac:5e:fa:3d:d7:48: 60:2b:a9:95:d6:0d:a9:c6:57:a5:ee:1e:9d:d4:94:34:80:b3: d4:30:c6:c1:d2:87:db:55:a8:d8:25:b5:86:37:02:84:db:e5: bb:0b:b0:e4:3e:34:b5:63:c0:5f:57:0c:8b:89:30:c9:09:62: 7e:e9:94:84:3f:6b:58:d7:db:3f:58:37:0f:4d:51:5b:c5:00: 5d:83:cc:43:fa:57:c0:a9:59:e4:dc:6b:76:2b:01:f6:a1:56: 4f:0e:fc:2f:94:80:d8:de:9b:7d:36:1a:05:ee:d1:fa:e8:b4: c3:e7:f9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+s27QdD3ZyMeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGJhMTlkNzQtY2UyYS00OTlmLTg4YTUtZTE5OWIwZTlhNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuS6St+pajtEEvrZbJuHyq2zl5CWP+n/+gXX 3X/q/krrA5jDe4Q9fTb8e24GQlZjJ3EeMnD4TbieWNiogv0x1iSfcAqdGzxhg0Xc gu5Wx7cHFdUwrp93us7LWglRelB39g/HJit5/gs7a1R0+jsvtSq/Bg7CFgUORm4B Dem2r+UqvIzJ8ZRzMNeD+dfXfNitx0j5pDZjk8pwbMnUHJVb8EUTAsQ7GMOmTu/n Q+HX7CNC92rFQSzivFOqfoaSUvrciJ4vwUzoV2wZeYoRI3YVD37QUrwQB9685naF ysa4XizHzc+edS5upQ59uyvaJOB4z0+pwllxNjRelTPd9kfGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA33QFgCHOBd4jVeBJUQ7URLQWYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjY5ZGU2ZTEtZTEzZS0z Y2NkLTliMmQtYTM3YTZiNzAyOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlhCKYKtkIRwmPEM/H8hjifmZxtTt1011UHPqchsR8sOPievx97H9o6 VBHPCCBTuVOn645+7BWsMQs73w5fqUn0LoNEB8hR9dDGOsSW8kCIEm73ncPkdugd vImPUFkESxwrURmDRaRyQapnAroDCU6ohDEkbYpS2yJCSfNqSV3kr2tktSglBmNN MKxe+j3XSGArqZXWDanGV6XuHp3UlDSAs9QwxsHSh9tVqNgltYY3AoTb5bsLsOQ+ NLVjwF9XDIuJMMkJYn7plIQ/a1jX2z9YNw9NUVvFAF2DzEP6V8CpWeTca3YrAfah Vk8O/C+UgNjem302GgXu0frotMPn+Xc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:37 2025 by rpki-client