$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa File: afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa (raw, json) Hash identifier: 64zWAVJp+or5GuQfk7e0lLJM3NjYiTlDjYyhrDyvtcc= Subject key identifier: EE:6E:2F:2D:E7:72:9C:AE:2B:D4:22:B5:22:60:A6:9E:4A:51:BB:33 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E945D4385BB93CAD4A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397240 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e9:45:d4:38:5b:b9:3c:ad:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=11770b3f-6c81-4b76-b2fb-55d8a7d3480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:a3:2a:f8:5f:10:22:89:3d:4c:e6:4e:41: e4:5f:fb:60:c5:e5:23:e7:ac:a0:27:bf:94:e8:93: 45:03:06:c6:44:1e:5a:dc:23:18:b6:4b:4b:cf:7f: a9:31:66:f6:78:e6:9b:97:fc:98:8e:5c:54:5e:57: 33:c2:d5:d1:0d:1b:f9:b5:47:ce:f1:7e:c0:e7:76: 90:18:15:3e:3d:6c:f2:1d:33:52:e6:87:9b:d6:04: 25:7d:6f:88:58:cf:7f:d0:25:02:f5:63:f2:e1:bd: 25:d4:0d:61:b3:1a:cc:bb:68:3d:9c:e9:d2:f1:55: aa:5d:ef:3d:fa:e8:7c:8a:22:07:60:e8:c2:e5:b9: a7:ee:70:1a:06:da:94:97:1d:ef:50:13:ba:68:34: d0:c2:7d:13:97:4b:42:06:88:57:08:90:a3:0c:ae: 3a:9a:83:e3:2e:10:50:f8:51:83:8d:b3:2d:a2:56: 2c:7e:10:65:77:d7:58:7d:be:22:1c:14:3c:f5:49: 1a:16:6e:bb:e0:91:83:14:9c:e2:88:7d:6d:5a:11: bb:d2:85:19:ca:72:b5:81:07:00:ab:9a:29:48:da: cd:5b:4b:1e:8f:51:90:9d:aa:91:32:5b:f7:27:06: 4f:6f:3b:3d:d5:42:c3:6c:95:1c:d9:04:59:4a:cc: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:2F:2D:E7:72:9C:AE:2B:D4:22:B5:22:60:A6:9E:4A:51:BB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afac40e7-9ccc-3b09-8f58-5b73e312f9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2a:41:2d:54:32:c7:b6:74:ec:b2:32:eb:a0:79:28:41:c5: 1e:94:a8:a6:0d:80:3d:df:64:4a:9f:cc:e6:1f:b0:60:88:37: e0:10:03:09:e4:16:39:2a:b9:52:87:f4:1f:8a:36:5e:9a:63: e0:3b:de:5d:38:81:04:66:54:86:43:13:1f:8e:fa:4d:24:f1: 32:f4:7b:c2:07:7c:d4:8c:6d:36:9a:e1:d3:82:45:39:11:64: be:82:a0:8f:f7:ea:09:b0:55:4c:74:6d:f9:b0:04:59:91:16: db:16:23:25:d2:f3:57:0e:2a:07:58:33:b4:11:d6:e9:82:12: 1d:c4:49:5a:7e:b6:ac:1a:46:02:e8:6a:bd:e2:a4:b1:a0:86: ef:10:d3:0a:3a:7c:5b:d6:53:fe:49:dd:06:b0:c9:e1:65:27: a6:f5:a6:2b:32:52:74:cd:ed:48:1e:64:a2:23:c5:87:41:94: be:85:aa:bd:93:9b:3e:85:3e:2d:61:4b:22:a9:9e:24:7b:8b: 27:49:fd:5f:1b:92:2e:54:1c:bb:e8:71:b2:cc:43:ae:a7:39: 18:06:b1:06:c3:73:32:4d:be:04:22:fd:c4:8a:4d:80:2d:06: 0e:af:ec:54:39:d5:fd:6b:67:77:de:0c:a0:e1:ea:15:ac:c5: 7f:ea:c4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+lF1DhbuTytSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTE3NzBiM2YtNmM4MS00Yjc2LWIyZmItNTVkOGE3ZDM0ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKijKvhfECKJPUzmTkHkX/tgxeUj56ygJ7+U 6JNFAwbGRB5a3CMYtktLz3+pMWb2eOabl/yYjlxUXlczwtXRDRv5tUfO8X7A53aQ GBU+PWzyHTNS5oeb1gQlfW+IWM9/0CUC9WPy4b0l1A1hsxrMu2g9nOnS8VWqXe89 +uh8iiIHYOjC5bmn7nAaBtqUlx3vUBO6aDTQwn0Tl0tCBohXCJCjDK46moPjLhBQ +FGDjbMtolYsfhBld9dYfb4iHBQ89UkaFm674JGDFJziiH1tWhG70oUZynK1gQcA q5opSNrNW0sej1GQnaqRMlv3JwZPbzs91ULDbJUc2QRZSswAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5uLy3ncpyuK9QitSJgpp5KUbszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWZhYzQwZTctOWNjYy0z YjA5LThmNTgtNWI3M2UzMTJmOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcqQS1UMse2dOyyMuugeShBxR6UqKYNgD3fZEqfzOYfsGCIN+AQAwnk FjkquVKH9B+KNl6aY+A73l04gQRmVIZDEx+O+k0k8TL0e8IHfNSMbTaa4dOCRTkR ZL6CoI/36gmwVUx0bfmwBFmRFtsWIyXS81cOKgdYM7QR1umCEh3ESVp+tqwaRgLo ar3ipLGghu8Q0wo6fFvWU/5J3QawyeFlJ6b1pisyUnTN7UgeZKIjxYdBlL6Fqr2T mz6FPi1hSyKpniR7iydJ/V8bki5UHLvocbLMQ66nORgGsQbDczJNvgQi/cSKTYAt Bg6v7FQ51f1rZ3feDKDh6hWsxX/qxAk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:36 2025 by rpki-client