$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa File: ef003311-7121-3824-bcbc-494d7e7fe6ad.roa (raw, json) Hash identifier: aITNPFcKASc628TC2NmB7Nb/NFjBZu6cJYJHndP2hAU= Subject key identifier: FF:8B:92:61:85:28:79:CE:E4:A3:2C:2B:FA:D7:2A:8E:A4:46:7B:FC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7F8B39659B65067F55E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397222 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:f8:b3:96:59:b6:50:67:f5:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=8bd9b98f-cb4d-46a6-8133-cd5d0b096bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:61:4d:54:5b:5a:89:92:1b:c5:2c:c1:0a: c7:88:bc:8e:c6:51:83:65:3e:7a:1e:d3:c6:a2:de: 3c:e6:90:93:a5:48:7a:ff:de:99:1f:79:70:6b:f5: 53:9e:ad:ec:c9:e8:ff:ee:1f:9c:04:23:dd:7e:3f: 07:52:f5:dd:12:4b:75:67:b5:e6:6e:8e:af:5a:94: 07:a6:e7:95:08:93:7d:52:4e:21:e1:6c:c8:da:05: 46:d9:69:f8:2c:b4:42:be:44:cb:d6:3c:94:5e:71: 0d:db:5c:4b:55:89:92:7e:53:73:ff:9b:c6:c4:0b: 05:53:d6:17:e4:95:b5:6c:b4:c9:b3:a0:e8:99:b7: e5:5f:9a:7f:c1:93:0c:a7:d5:fc:95:ba:d0:1a:59: 74:69:f2:e9:be:d3:ee:3a:10:36:29:ca:04:9e:21: a3:e8:8f:5a:76:02:7f:ca:e8:27:84:0f:2e:83:a6: 8c:f2:95:77:df:78:9e:81:88:c8:84:29:92:50:b8: d0:ac:67:e9:c7:46:af:50:d6:64:39:28:96:66:4f: d2:f6:92:a7:10:c0:93:bd:af:5e:59:ee:99:0f:7a: d1:af:9b:4b:2a:17:56:90:04:3c:c4:33:bd:72:af: 25:9f:f6:f4:9a:af:78:27:f2:1d:41:c0:68:8c:ee: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8B:92:61:85:28:79:CE:E4:A3:2C:2B:FA:D7:2A:8E:A4:46:7B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef003311-7121-3824-bcbc-494d7e7fe6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e4:d1:0b:1e:f4:01:ec:f0:3e:75:bf:d8:29:b0:9d:d6:2e: 41:0f:f2:71:d2:de:c4:c1:f1:66:26:20:47:92:b8:42:bf:62: 8d:5e:97:94:ba:ce:cf:9e:20:d4:82:e9:47:01:f9:46:09:b1: ee:0c:cc:3f:04:77:3b:7d:4a:f0:3a:50:1c:a2:e1:46:95:27: 71:15:ea:f3:2b:6a:12:d0:f9:11:60:4e:91:42:9b:39:1e:0d: 3b:b8:7d:b0:2c:e1:40:46:ec:a6:5c:94:4b:02:fd:4e:46:2a: 5e:e7:ee:aa:16:2b:47:89:3f:34:0a:ff:5b:28:06:90:fb:07: ff:82:56:13:b8:f0:b8:c4:78:91:26:2d:69:66:38:c1:8c:ab: a2:05:c4:03:87:56:10:1e:3e:23:e1:01:22:e2:da:a1:af:bb: ce:65:40:26:d1:a7:6a:66:ad:f6:18:c7:9f:0d:67:95:68:c3: c5:b0:cf:0a:9f:3f:78:99:77:4f:5c:e5:0a:ee:13:08:87:6f: be:5b:f1:d7:1f:0d:e8:3e:5a:bb:06:a6:75:8a:30:e9:e1:f5: 8c:3e:0f:e2:32:66:89:ee:ae:d2:3f:c4:bb:f1:c5:96:f0:f6: c9:0d:8b:7d:c1:c7:8f:e0:0a:81:cb:4f:4a:ee:27:82:0b:ec: e0:01:64:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/izllm2UGf1XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OGJkOWI5OGYtY2I0ZC00NmE2LTgxMzMtY2Q1ZDBiMDk2YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99hTVRbWomSG8UswQrHiLyOxlGDZT56HtPG ot485pCTpUh6/96ZH3lwa/VTnq3syej/7h+cBCPdfj8HUvXdEkt1Z7Xmbo6vWpQH pueVCJN9Uk4h4WzI2gVG2Wn4LLRCvkTL1jyUXnEN21xLVYmSflNz/5vGxAsFU9YX 5JW1bLTJs6DombflX5p/wZMMp9X8lbrQGll0afLpvtPuOhA2KcoEniGj6I9adgJ/ yugnhA8ug6aM8pV333iegYjIhCmSULjQrGfpx0avUNZkOSiWZk/S9pKnEMCTva9e We6ZD3rRr5tLKhdWkAQ8xDO9cq8ln/b0mq94J/IdQcBojO6/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+LkmGFKHnO5KMsK/rXKo6kRnv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWYwMDMzMTEtNzEyMS0z ODI0LWJjYmMtNDk0ZDdlN2ZlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfk0Qse9AHs8D51v9gpsJ3WLkEP8nHS3sTB8WYmIEeSuEK/Yo1el5S6 zs+eINSC6UcB+UYJse4MzD8Edzt9SvA6UByi4UaVJ3EV6vMrahLQ+RFgTpFCmzke DTu4fbAs4UBG7KZclEsC/U5GKl7n7qoWK0eJPzQK/1soBpD7B/+CVhO48LjEeJEm LWlmOMGMq6IFxAOHVhAePiPhASLi2qGvu85lQCbRp2pmrfYYx58NZ5Vow8Wwzwqf P3iZd09c5QruEwiHb75b8dcfDeg+WrsGpnWKMOnh9Yw+D+IyZonurtI/xLvxxZbw 9skNi33Bx4/gCoHLT0ruJ4IL7OABZPc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:08 2025 by rpki-client