$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa File: deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa (raw, json) Hash identifier: CgcwyARLYRVuY0AIu+6phNRHq6KU+uv/MpF58JUiaZQ= Subject key identifier: E0:E6:A1:3F:4A:29:38:15:1E:58:AF:4C:63:67:BE:1C:9E:D1:F0:FB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7E50AB7FEBF704AEDBE80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397238 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e5:0a:b7:fe:bf:70:4a:ed:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=743ccf5e-e9f5-49eb-8fab-dbdf5ffcbb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:8d:82:d3:3e:71:7b:e4:5b:ff:be:9a:bb: 5f:29:d9:70:44:f0:34:ce:83:71:41:0a:d6:59:2a: ea:63:8c:d3:9b:4e:71:c8:df:0f:20:1c:f0:4b:2a: 9a:64:8e:8f:55:7e:cd:04:14:77:03:2e:41:56:7b: 85:2c:f4:ac:f0:ac:63:55:9d:a8:57:13:12:1a:fc: ab:b3:6a:0d:98:54:11:a4:63:3b:35:85:c7:53:a8: 9f:cc:fc:e3:de:2b:58:a1:be:cf:92:d6:50:5d:a4: b4:cd:82:5c:27:e4:44:65:20:57:0a:e3:fc:e1:a7: 52:83:96:37:56:76:48:d3:db:0d:6f:f4:20:70:1f: e3:6e:d3:7c:31:7f:2d:51:da:f7:da:cf:d3:54:a8: 95:05:4d:a3:f8:76:99:b9:8d:50:a8:bf:dd:69:e7: ae:ac:b8:4d:23:2d:d0:9d:88:0c:a1:aa:4d:6e:0d: 0f:32:a7:0b:8a:c4:be:83:c5:8a:cf:44:6f:8d:9f: 1e:ea:ec:f5:da:a7:e8:13:f9:ef:25:69:88:ec:f0: da:40:8e:e1:9a:88:bf:a7:a1:9b:8b:cf:bd:ae:11: ad:92:72:c9:cd:35:38:ba:5d:81:f7:f7:a5:2b:40: 73:34:33:fb:1c:6f:12:0c:b0:ec:82:f1:cd:f9:98: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E6:A1:3F:4A:29:38:15:1E:58:AF:4C:63:67:BE:1C:9E:D1:F0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/deb2f5fa-ecd2-33eb-a95c-1579c4a700db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7e:71:7d:82:bb:bb:c0:f9:da:d3:cd:76:a5:0c:cf:61:9e: 56:78:cd:b8:d0:d1:8a:6f:b0:f7:e9:f2:77:c5:86:12:91:43: 88:98:e1:da:1e:ce:df:8a:76:0f:bc:16:46:a8:f2:4f:32:7b: bc:26:3e:f0:fc:7a:b4:9f:d1:74:dd:c1:57:90:1f:4a:c9:4e: 8f:a3:db:71:ea:f3:65:73:05:57:db:95:2b:3e:76:b7:cb:b0: c4:8a:30:e7:d0:dd:14:1a:0c:f6:5a:5e:91:4a:1b:b5:83:34: 75:bd:94:7f:11:63:ee:2e:46:ba:4a:ed:6d:11:a1:a0:3c:9a: 68:01:df:06:7c:9e:fe:8d:f3:38:86:4e:16:26:b2:f1:2f:65: 1b:b9:1e:c1:63:52:33:43:cb:55:fc:46:f9:cc:22:e6:4c:f9: 35:6d:fa:00:37:ba:d7:7d:c4:e6:7d:bc:29:6f:d8:18:2a:24: ea:70:c4:5f:31:8a:5a:90:88:e1:69:ac:df:bd:05:bd:ef:3e: c1:63:50:69:f2:88:57:8e:89:fc:34:41:81:df:9b:11:b3:1b: 7f:7e:fc:07:c2:0a:1c:af:af:8e:ba:1f:21:2f:df:c7:00:bf: 08:56:8b:0e:c9:74:00:f5:58:70:c7:bd:20:f1:fd:c5:68:8d: e2:c3:13:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+UKt/6/cErtvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzQzY2NmNWUtZTlmNS00OWViLThmYWItZGJkZjVmZmNiYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrONgtM+cXvkW/++mrtfKdlwRPA0zoNxQQrW WSrqY4zTm05xyN8PIBzwSyqaZI6PVX7NBBR3Ay5BVnuFLPSs8KxjVZ2oVxMSGvyr s2oNmFQRpGM7NYXHU6ifzPzj3itYob7PktZQXaS0zYJcJ+REZSBXCuP84adSg5Y3 VnZI09sNb/QgcB/jbtN8MX8tUdr32s/TVKiVBU2j+HaZuY1QqL/daeeurLhNIy3Q nYgMoapNbg0PMqcLisS+g8WKz0RvjZ8e6uz12qfoE/nvJWmI7PDaQI7hmoi/p6Gb i8+9rhGtknLJzTU4ul2B9/elK0BzNDP7HG8SDLDsgvHN+ZghkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODmoT9KKTgVHlivTGNnvhye0fD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGViMmY1ZmEtZWNkMi0z M2ViLWE5NWMtMTU3OWM0YTcwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF+cX2Cu7vA+drTzXalDM9hnlZ4zbjQ0YpvsPfp8nfFhhKRQ4iY4doe zt+Kdg+8Fkao8k8ye7wmPvD8erSf0XTdwVeQH0rJTo+j23Hq82VzBVfblSs+drfL sMSKMOfQ3RQaDPZaXpFKG7WDNHW9lH8RY+4uRrpK7W0RoaA8mmgB3wZ8nv6N8ziG ThYmsvEvZRu5HsFjUjNDy1X8RvnMIuZM+TVt+gA3utd9xOZ9vClv2BgqJOpwxF8x ilqQiOFprN+9Bb3vPsFjUGnyiFeOifw0QYHfmxGzG39+/AfCChyvr466HyEv38cA vwhWiw7JdAD1WHDHvSDx/cVojeLDE8g= -----END CERTIFICATE-----Generated at Tue Nov 4 22:01:24 2025 by rpki-client