$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa File: 956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa (raw, json) Hash identifier: MwwM5tR7jKPrwZdRuQed61Tb967mHhNOTzn8lhDVXa4= Subject key identifier: 1C:66:D7:D8:20:4A:E0:7B:16:68:BA:E6:69:31:E1:7B:A4:CE:F5:A7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F6A30BACCBE69F711700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397219 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f6:a3:0b:ac:cb:e6:9f:71:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=84c0a6b8-6fc2-45ef-a8ae-690c9b01aa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:74:7b:39:e7:7f:7c:af:5a:f5:cd:fc:8e: 16:17:05:e0:bf:58:c0:0e:df:91:05:b0:b2:bb:b4: 03:64:e1:6b:0f:9e:b6:b7:8b:f9:fa:24:18:d5:d8: 03:66:2c:2e:5b:e3:34:b4:d4:1f:bb:dc:03:d5:c7: c5:18:71:3f:62:b5:69:c4:f8:db:41:6c:f8:fc:7d: 5e:a0:19:77:93:a4:82:c4:16:d5:44:2d:29:67:93: 0a:d9:30:7f:ad:73:dd:a2:86:b8:7e:fd:66:88:a7: 38:a0:35:bd:a4:8a:cd:a0:2a:ce:ec:5f:fc:c0:20: 65:5d:e7:94:5a:15:80:5c:be:e7:d8:8f:8e:f0:a8: b0:1b:7f:8f:66:65:26:02:1e:de:83:1c:0e:27:17: ae:7d:f8:75:6e:45:a9:27:b0:c2:0b:d4:23:a1:bd: 88:b7:62:5c:c6:e9:76:8f:1a:99:99:0d:d5:99:75: 17:31:f6:87:5f:2b:7c:04:05:58:7b:6a:30:54:e1: e1:16:b5:4e:66:c6:29:92:2a:71:be:ad:fd:03:be: 20:ab:a7:1d:11:83:a3:2d:6f:ed:07:7b:a2:11:8a: cc:45:a7:db:bf:6d:de:c0:33:71:e7:17:70:82:e4: f4:86:6c:e3:e3:3e:32:b6:63:ac:e2:16:ad:d8:2f: fb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:66:D7:D8:20:4A:E0:7B:16:68:BA:E6:69:31:E1:7B:A4:CE:F5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:73:0f:83:38:ca:04:21:d4:d6:9a:19:fd:6b:3b:dc:29:9d: 8a:1f:12:60:87:df:ec:c6:28:26:c8:bf:37:c1:e3:b3:32:eb: ec:e9:88:77:5f:3e:07:28:c6:38:3f:7e:2a:76:63:02:dc:a2: ab:d6:43:f8:f2:8f:25:9c:38:92:5b:61:75:4f:db:b1:be:bf: ec:75:e4:4f:97:b1:9e:36:18:02:1a:d6:c5:d6:ff:62:23:32: a2:47:fc:3f:ad:4f:41:7d:ee:87:da:e4:65:13:97:60:f1:15: 0b:e1:ab:18:5f:36:eb:0c:ce:20:48:59:82:9d:5b:66:2f:e7: 00:63:22:13:5e:df:68:ae:2f:7d:c9:d7:1c:c3:7b:cd:ed:df: ba:1d:a5:16:f7:59:ce:58:db:e0:4b:56:78:ff:b2:7b:12:d5: 1e:64:41:aa:03:95:6b:1a:57:6e:3b:75:0f:69:73:73:ee:58: c6:65:ce:93:84:63:25:d7:12:54:94:b0:d6:83:f9:02:9e:9d: 0c:dd:f9:30:4a:95:d3:8c:80:4c:4b:0b:ae:ca:fa:37:c7:24: b9:56:ad:d9:10:8e:83:5c:aa:d7:3b:6e:f7:b4:ba:b2:d9:94: e8:95:97:75:bf:4f:8e:3c:9c:40:02:df:4d:96:94:eb:99:19: bb:47:8d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/ajC6zL5p9xFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODRjMGE2YjgtNmZjMi00NWVmLWE4YWUtNjkwYzliMDFhYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cl0eznnf3yvWvXN/I4WFwXgv1jADt+RBbCy u7QDZOFrD562t4v5+iQY1dgDZiwuW+M0tNQfu9wD1cfFGHE/YrVpxPjbQWz4/H1e oBl3k6SCxBbVRC0pZ5MK2TB/rXPdooa4fv1miKc4oDW9pIrNoCrO7F/8wCBlXeeU WhWAXL7n2I+O8KiwG3+PZmUmAh7egxwOJxeuffh1bkWpJ7DCC9Qjob2It2Jcxul2 jxqZmQ3VmXUXMfaHXyt8BAVYe2owVOHhFrVOZsYpkipxvq39A74gq6cdEYOjLW/t B3uiEYrMRafbv23ewDNx5xdwguT0hmzj4z4ytmOs4hat2C/7SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxm19ggSuB7Fmi65mkx4XukzvWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTU2MzkyYzYtNWUzMS0z YzRjLWJlYWItMWM2ZDdmMzE5OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1zD4M4ygQh1NaaGf1rO9wpnYofEmCH3+zGKCbIvzfB47My6+zpiHdf Pgcoxjg/fip2YwLcoqvWQ/jyjyWcOJJbYXVP27G+v+x15E+XsZ42GAIa1sXW/2Ij MqJH/D+tT0F97ofa5GUTl2DxFQvhqxhfNusMziBIWYKdW2Yv5wBjIhNe32iuL33J 1xzDe83t37odpRb3Wc5Y2+BLVnj/snsS1R5kQaoDlWsaV247dQ9pc3PuWMZlzpOE YyXXElSUsNaD+QKenQzd+TBKldOMgExLC67K+jfHJLlWrdkQjoNcqtc7bve0urLZ lOiVl3W/T448nEAC302WlOuZGbtHjXU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:52 2025 by rpki-client