$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a3e0329-9977-355d-b0e4-ef0e44323920.roa File: 8a3e0329-9977-355d-b0e4-ef0e44323920.roa (raw, json) Hash identifier: ESO3+s8xoCCfpwLLA0H7ZShmKgLqJheeKyeKm1B7Qkg= Subject key identifier: 73:EB:F0:40:00:3C:7B:58:08:2C:B1:61:E7:09:0C:2E:21:2D:4D:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7EA9FB40D769167FA1880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a3e0329-9977-355d-b0e4-ef0e44323920.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397230 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ea:9f:b4:0d:76:91:67:fa:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=7b68a46c-664f-4de7-8078-c5893ed8b389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:e5:20:6b:9b:09:9c:4a:fa:02:02:0f:f0: fc:81:6e:bb:05:91:df:a8:5b:c4:83:69:4e:7a:92: 27:40:c5:d7:36:bf:34:50:a0:61:06:a7:74:48:b2: 91:a6:86:87:90:f0:a1:bf:a8:c9:d0:d5:d3:2f:af: 03:cd:f6:7e:a9:b8:50:c8:48:05:78:bf:02:d5:51: f5:e2:75:c2:4b:8d:f9:70:f3:ef:e2:32:92:11:e4: b0:66:77:71:f8:18:4a:8c:3e:d3:7f:2d:a2:a0:cd: 52:44:18:86:6b:d7:84:39:db:28:f6:0b:2b:51:b0: 05:ca:72:3b:80:f7:37:49:a1:af:e8:cd:da:b1:c1: af:2c:1b:ae:38:82:40:ec:16:81:81:67:a3:f8:6f: 5a:ea:42:99:04:4a:e7:ea:2e:ce:03:4d:dc:21:de: 02:7b:81:9b:59:3e:70:2e:85:da:be:88:70:71:2a: d0:96:ed:01:1e:fa:16:9c:d8:17:6d:dc:ca:7e:cd: 27:ec:b9:d1:74:ec:89:0b:5f:3a:a5:4e:d9:8e:5a: 74:3c:ea:24:5f:e1:84:d9:b2:53:4e:6e:a1:47:27: bf:f0:a8:f4:0b:3f:05:d4:88:7b:1b:63:55:a1:dc: 52:15:09:d1:98:6a:77:63:21:dc:9a:47:48:9f:f6: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:F0:40:00:3C:7B:58:08:2C:B1:61:E7:09:0C:2E:21:2D:4D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a3e0329-9977-355d-b0e4-ef0e44323920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e0:bd:02:1d:d0:5b:27:ff:fc:8c:e1:6d:5b:19:56:4e:aa: 2d:84:1a:04:6c:eb:84:07:2f:97:5b:73:7a:07:01:bd:69:90: 24:19:fc:55:23:84:eb:25:d8:d4:28:14:a2:f4:48:fb:b1:eb: f1:a5:23:25:b7:67:43:e1:f7:90:8e:08:df:84:6f:2f:c8:48: 4c:31:52:41:ef:50:62:bc:c9:b0:19:02:d9:3e:07:94:2c:3d: 57:e4:f7:26:bd:81:28:69:1b:1e:50:16:f4:0f:57:d6:a3:92: 77:28:29:7a:e4:6b:f1:11:7f:d4:3c:e0:85:25:0e:cd:c4:41: 78:2f:1f:08:c7:dc:bc:2c:55:dd:07:09:b8:15:f5:99:53:a5: 90:96:69:24:2e:6b:75:24:c8:d5:9e:65:77:6b:f7:f1:95:8f: 16:b2:ac:f4:19:56:7e:bc:6c:8e:c6:7b:71:9f:1c:88:6e:d0: 54:5e:57:32:00:62:92:7b:b2:7e:71:0c:04:89:ec:3a:ad:09: 98:72:47:b6:d0:58:93:4b:74:55:5f:6b:46:79:b6:69:1d:b9: 3c:dc:4d:0c:61:4d:ff:73:c9:6b:72:d7:e0:c0:4b:0b:77:29: 02:be:f7:5c:67:4d:cd:1a:06:1e:c9:3e:43:6f:c2:13:d0:b0: b0:a2:d1:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+qftA12kWf6GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk N2I2OGE0NmMtNjY0Zi00ZGU3LTgwNzgtYzU4OTNlZDhiMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVvlIGubCZxK+gICD/D8gW67BZHfqFvEg2lO epInQMXXNr80UKBhBqd0SLKRpoaHkPChv6jJ0NXTL68DzfZ+qbhQyEgFeL8C1VH1 4nXCS435cPPv4jKSEeSwZndx+BhKjD7Tfy2ioM1SRBiGa9eEOdso9gsrUbAFynI7 gPc3SaGv6M3ascGvLBuuOIJA7BaBgWej+G9a6kKZBErn6i7OA03cId4Ce4GbWT5w LoXavohwcSrQlu0BHvoWnNgXbdzKfs0n7LnRdOyJC186pU7Zjlp0POokX+GE2bJT Tm6hRye/8Kj0Cz8F1Ih7G2NVodxSFQnRmGp3YyHcmkdIn/bavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPr8EAAPHtYCCyxYecJDC4hLU34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGEzZTAzMjktOTk3Ny0z NTVkLWIwZTQtZWYwZTQ0MzIzOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjgvQId0Fsn//yM4W1bGVZOqi2EGgRs64QHL5dbc3oHAb1pkCQZ/FUj hOsl2NQoFKL0SPux6/GlIyW3Z0Ph95COCN+Eby/ISEwxUkHvUGK8ybAZAtk+B5Qs PVfk9ya9gShpGx5QFvQPV9ajkncoKXrka/ERf9Q84IUlDs3EQXgvHwjH3LwsVd0H CbgV9ZlTpZCWaSQua3UkyNWeZXdr9/GVjxayrPQZVn68bI7Ge3GfHIhu0FReVzIA YpJ7sn5xDASJ7DqtCZhyR7bQWJNLdFVfa0Z5tmkduTzcTQxhTf9zyWty1+DASwt3 KQK+91xnTc0aBh7JPkNvwhPQsLCi0RY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:06:31 2025 by rpki-client