$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e39bb8b-615e-3c30-969c-8a232e684ca2.roa File: 9e39bb8b-615e-3c30-969c-8a232e684ca2.roa (raw, json) Hash identifier: mKXjHRtTZnmSoQKu2HwswsD/J/vz1/Fyf/euw+GeAxo= Subject key identifier: 9C:F2:94:60:8B:53:B5:DB:A1:0A:04:2E:CD:E9:32:D4:E6:F2:27:EE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FBBFAC32E10AC5A13F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e39bb8b-615e-3c30-969c-8a232e684ca2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397238 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:fb:bf:ac:32:e1:0a:c5:a1:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=384a68fb-3f02-4c98-8390-5521cd8635ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:26:16:b8:0d:54:c1:b0:7f:42:b2:89:8e: 16:15:bb:53:9e:dd:b2:d5:04:53:4e:b2:f8:bb:ee: 6d:ff:62:79:57:99:e2:47:49:a8:8b:5d:36:c9:57: 4c:b9:ff:df:cf:5c:f9:08:a2:5b:d2:72:65:89:e6: 3a:23:61:60:0b:b1:ca:d7:dc:56:a1:0e:d1:b0:85: 12:f0:bb:b4:20:3a:19:e5:19:f4:a8:08:2b:57:e7: f5:be:82:e2:c4:35:9d:d1:5c:ce:eb:05:99:97:68: e4:74:f7:1a:7f:a6:3a:c1:c3:52:b3:00:2b:e4:eb: 9d:21:30:2c:3d:90:2f:ca:3e:92:29:d2:ab:4c:2e: 28:93:8c:83:33:14:5e:96:f1:2e:d8:2b:a6:f2:5f: 6f:56:1e:8a:7a:28:62:de:d1:41:05:49:e9:20:e2: 94:08:aa:1b:b4:25:c1:2d:36:52:bc:64:31:9d:d0: e6:e9:f5:f4:41:af:f4:e2:6a:c5:51:3f:8f:de:48: 4c:26:3e:6f:a0:f6:7e:55:17:7e:d5:cc:97:7f:88: 9d:b8:9e:87:9e:69:61:c7:96:44:85:6b:1a:ca:cc: f0:ad:fc:f3:f4:48:4f:53:a2:62:59:cd:5e:5a:69: 70:58:41:05:d5:cb:2c:fa:ed:62:1f:b3:13:ed:52: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F2:94:60:8B:53:B5:DB:A1:0A:04:2E:CD:E9:32:D4:E6:F2:27:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e39bb8b-615e-3c30-969c-8a232e684ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5c:b2:63:d7:14:c7:1c:3c:5f:6c:b1:fc:a1:eb:70:80:f2: c8:af:c4:2b:f9:3c:7c:30:d0:c5:d8:b9:59:4c:c7:02:65:53: 43:68:3c:01:78:ce:7e:15:c8:de:a9:60:fa:56:b5:79:d9:ee: 42:c3:55:7d:14:0c:de:71:44:3d:83:78:f1:e1:cf:04:b2:2a: 3f:ae:51:1e:c8:ec:6f:97:9d:c1:18:54:4d:5e:b6:16:4d:22: 4e:da:c8:8b:e4:81:0b:75:5e:06:25:f1:27:84:34:e3:75:53: 56:f1:0e:2e:3a:70:22:92:5c:a1:49:fa:dc:69:09:b0:d1:3c: b4:43:04:01:ca:e6:c1:84:f1:5d:5a:4a:67:04:2c:8c:6f:48: b6:47:4c:9d:88:05:47:cb:3f:c9:37:8a:44:29:6f:20:43:29: ee:4b:3d:76:6a:45:c8:64:20:2b:aa:48:bf:23:11:9c:56:27: c3:e3:e9:0e:a9:61:e8:0a:3c:7b:c8:24:aa:89:3a:15:84:a7: fb:3b:c2:55:b5:b1:62:da:ed:fc:a4:8b:6b:36:d4:f8:61:50: d9:63:0c:0a:e4:ac:28:b4:ad:65:76:f2:4d:03:78:98:62:18: 71:31:52:ea:1c:42:06:ea:d8:60:66:94:33:98:ae:98:ef:38: bd:34:23:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/u/rDLhCsWhP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Mzg0YTY4ZmItM2YwMi00Yzk4LTgzOTAtNTUyMWNkODYzNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfomFrgNVMGwf0KyiY4WFbtTnt2y1QRTTrL4 u+5t/2J5V5niR0moi102yVdMuf/fz1z5CKJb0nJlieY6I2FgC7HK19xWoQ7RsIUS 8Lu0IDoZ5Rn0qAgrV+f1voLixDWd0VzO6wWZl2jkdPcaf6Y6wcNSswAr5OudITAs PZAvyj6SKdKrTC4ok4yDMxRelvEu2Cum8l9vVh6Keihi3tFBBUnpIOKUCKobtCXB LTZSvGQxndDm6fX0Qa/04mrFUT+P3khMJj5voPZ+VRd+1cyXf4iduJ6Hnmlhx5ZE hWsayszwrfzz9EhPU6JiWc1eWmlwWEEF1css+u1iH7MT7VJriQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzylGCLU7XboQoELs3pMtTm8ifuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWUzOWJiOGItNjE1ZS0z YzMwLTk2OWMtOGEyMzJlNjg0Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxcsmPXFMccPF9ssfyh63CA8sivxCv5PHww0MXYuVlMxwJlU0NoPAF4 zn4VyN6pYPpWtXnZ7kLDVX0UDN5xRD2DePHhzwSyKj+uUR7I7G+XncEYVE1ethZN Ik7ayIvkgQt1XgYl8SeENON1U1bxDi46cCKSXKFJ+txpCbDRPLRDBAHK5sGE8V1a SmcELIxvSLZHTJ2IBUfLP8k3ikQpbyBDKe5LPXZqRchkICuqSL8jEZxWJ8Pj6Q6p YegKPHvIJKqJOhWEp/s7wlW1sWLa7fyki2s21PhhUNljDArkrCi0rWV28k0DeJhi GHExUuocQgbq2GBmlDOYrpjvOL00Izo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:05 2025 by rpki-client